surexpert[.]pro
“SUREXPERT, l'électronique de sécurité pour les installateurs”
surexpert.pro — Nicht bestätigt. Zusammenfassung der Beweislage: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); PhishDestroy score 81/100. Registrar: OVH SAS.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Analysis of the domain surexpert.pro, observed on July 28 2026, indicates that it is presently active and hosted on Cloudflare infrastructure, as demonstrated by the authoritative name servers bill.ns.cloudflare.com and heather.ns.cloudflare.com. Registration records show the domain was created through OVH SAS, a widely used hosting provider. Network routing and IP address data have not been disclosed, but the reliance on Cloudflare suggests the underlying service may be obscured by the provider’s CDN and mitigation layer. The domain appears on a single public security blocklist and is actively blocked by the PhishDestroy feed, which classifies it as a phishing‑related indicator. An HTTP request to the site returns a 301 redirect response, a pattern commonly employed by malicious actors to forward victims to credential‑harvesting pages or to conceal the final landing location.
VirusTotal has processed the domain with scans from 91 anti‑malware vendors; at the time of analysis none have raised a detection. This absence of alerts does not constitute a safety guarantee, as many phishing sites evade static detection engines. The lack of detections may reflect the dynamic nature of the payload or reliance on server‑side logic that only manifests after user interaction. Given the limited public evidence, the precise phishing campaign target, page content, and any associated malware kit remain unknown.
Analysts should treat surexpert.pro as a potentially hostile resource pending further investigation. Defensive recommendations include adding the domain to local blocklists, configuring web proxies to block HTTP 301 redirects to the domain, and monitoring DNS queries for the listed Cloudflare name servers. Continuous re‑scanning on platforms such as VirusTotal is advised to capture any future changes in vendor detections.
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologien · 17 identified
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
wordpress.org 100 % KonfidenzPrestaShop is a freemium, open-source ecommerce solution, written in the PHP programming language with support for the MySQL database management system.
www.prestashop.com 100 % KonfidenzDoofinder is a search site solution that enables users to include advanced and smart search engine capabilities in their ecommerce website.
www.doofinder.com 100 % KonfidenzSendinblue is an email marketing solution for small and medium-sized businesses that want to send and automate email marketing campaigns.
www.sendinblue.com 100 % KonfidenzreCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 100 % KonfidenzLinkedIn Insight Tag is a lightweight JavaScript tag that powers conversion tracking, website audiences, and website demographics.
business.linkedin.com 100 % KonfidenzJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100 % KonfidenzjQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.
jqueryui.com 100 % KonfidenzjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100 % KonfidenzGoogle Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com 100 % KonfidenzGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100 % KonfidenzFancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.
fancyapps.com 100 % KonfidenzCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % KonfidenzHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of surexpert.pro · checked Jul 28, 2026
Analyse der Website-Konfiguration
Nachweise und externe Berichte
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt