g98f[.]xyz
“g98f.xyz”
Resumen de las pruebas
Analysis of the domain g98f.xyz indicates active involvement in a generic phishing operation. The domain was registered on 18 April 2026 through Gname.com Pte. Ltd. and is currently serviced by four nameservers (ns1-4.1111343.com). DNS resolution points to the IPv4 address 103.27.177.163, which hosts a Let's Encrypt YR2 certificate, confirming the presence of TLS encryption. VirusTotal scans show nine of ninety‑one security vendors flagging the domain, reinforcing the suspicion of malicious use. The domain remains live as of the reporting date, and no additional public intelligence (such as target brand or phishing kit) has been disclosed. Uncertainty remains regarding the specific payload or credential collection mechanisms employed, as no page content has been examined. Defenders should block outbound connections to 103.27.177.163, add g98f.xyz to URL filtering policies, and monitor DNS queries for the associated nameservers. Continuous re‑scanning on VirusTotal and similar platforms is advised to capture any changes in detection status. Organizations should also educate users about unsolicited emails that may reference short‑lived domains like g98f.xyz, emphasizing verification of sender authenticity before entering credentials.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260717-F339DC- Título de la página capturada
- welcome-BET365
Texto completo de la evidencia
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | img.esportsdata.cc |
malicious | Sinkholed |
| Hagezi Threat Feed | img.esportsdata.cc |
malicious | Sinkholed |
| OpenDNS | g26y.top |
phishing | Phishing Block |
| DNS4EU | g26y.top |
malicious | Sinkholed |
| DNS4EU | ssl.hw301.xyz |
malicious | Sinkholed |
| Cloudflare DNS | g98f.xyz |
malicious | Sinkholed |
| DigiCert UltraDNS | g98f.xyz |
malicious | Sinkholed |
| DNS4EU | g98f.xyz |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 13/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Estado del dominio
Accesible → Inaccesible
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías
5 tecnologías identificadas con alta confianza
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.