VirusTotal
3 / 92
Interpretation & limits
Engine detections from this stored analysis. Vendors and collection times may differ from other sources.
Assessment based on the stored source evidence below. Review sources →
Assessment based on the stored source evidence below.
szlxskj.com — لم يتم التحقق منها. انتحال العلامة التجارية: Gmail. ملخص الأدلة: VirusTotal 3/92 (alphaMountain.ai, CRDF, DNS8); URLQuery 2 det.; URLScan capture; 1 external blocklist match (OpenPhish); PhishDestroy score 70/100. مسجّل النطاق: Alibaba Cloud Computing.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
3 / 92
Engine detections from this stored analysis. Vendors and collection times may differ from other sources.
2 det.
Alerts refer to the preserved scan. They do not describe the current state of the site.
4 community references
إبلاغCommunity publication references, not a vendor verdict or evidence of a common operator.
التقرير المخزن
إبلاغ A preserved page image documents what the collector received; a capture is not a safety verdict.
Report stored; verdict not recorded
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Checked; no threat flag recorded
إبلاغA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
PhishDestroy first observed szlxskj.com on Oct 15, 2026. Stored content metadata identifies Gmail as the apparent target. Page analysis recorded additional brand references to Google. Current evidence score: 70/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, OpenPhish, and URLQuery. VirusTotal recorded 3 detections among 92 engines: alphaMountain.ai, CRDF, DNS8 on Oct 15, 2026 at 02:27 UTC. OpenPhish listed the hostname in the separate external-blocklist snapshot on Oct 15, 2026 at 02:20 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Additional recorded evidence: AlienVault OTX listed 4 community pulse references (not vendor detections) on Oct 15, 2026 at 02:27 UTC. URLScan captured the page on Oct 15, 2026 at 01:25 UTC.
The collector marked the hostname reachable on Oct 15, 2026 at 01:25 UTC, but did not retain the HTTP response code. Latest classified outcome: unknown; cause probe inconclusive on Oct 14, 2026 at 23:25 UTC. Registration records for the domain list Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) as the registrar and Dec 24, 2025 as the creation date. At collection time, the hostname resolved to 170.106.8.35 on AS132203 (Tencent Building, Kejizhongyi Avenue). The recorded endpoint location is Ashburn, US. DOM analysis on Oct 15, 2026 at 02:20 UTC returned 50/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; the captures preserve the landing-page appearance.
The content indicators and 3 positive source findings support the current Gmail impersonation and phishing classification. The target field identifies Gmail.
الملاحظات المخزنة المتعلقة بالمقارنة بين برامج الزحف والمتصفح لهذا المضيف، بالإضافة إلى فحص مباشر للبصمة الرقمية لأنظمة توزيع حركة المرور على غرار «كيتارو».
Local تم أرشفته في 2026-10-15 03:29:10 بالتوقيت العالمي المنسق (UTC)dns1.hichina.comdns2.hichina.comLocation describes the IP network.
Google PageSpeed Insights — mobile performance audit of szlxskj.com · checked Oct 15, 2026
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
http://szlxskj.com/newlp/2/xkmd13.htmlhttps://szlxskj.com/newlp/2/xkmd13.htmlServer: nginxContent-Type: text/htmlContent-Encoding: gzipkeep-alivegziptext/htmlThu, 15 Oct 2026 01:29:09 GMTW/"6acc918e-173bc"Mon, 12 Oct 2026 07:51:42 GMTnginxmax-age=31536000chunkedAccept-EncodingValues retained by the collector; long values may be shortened during collection.
170.106.8.35.11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20261015-85D7B2 Recipient: abuse@tencent.com AUP & Terms of Service Violations: Acceptable Use Policy: Active phishing operations targeting internet users directly violate standard AUP provisions prohibiting fraud and deceptive practices. Terms of Service: Material breach of service terms regarding malicious use, providing contractual justification for immediate suspension. Applicable Legal Framework (CN): Cybersecurity Law of China Criminal Law Article 285 Criminal Law Article 266 - Fraud Chinese law strictly prohibits cyber fraud and illegal access to computer systems. Investigation Notice: We fully respect your internal investigation processes and discretion. Prompt remediation protects innocent users while mitigating regulatory compliance scrutiny, legal liability, and brand reputation risks associated with ongoing malicious infrastructure.
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
Template-based draft · optional AI wording assistance requires separate consent
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنأرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةراقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب