intuition-systems[.]info
intuition-systems.info — error del servidor (HTTP 502). Resumen de las pruebas: VirusTotal 5/93 (alphaMountain.ai, Fortinet, Gridinsoft, Seclookup, SOCRadar); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 75/100. Registrador: NiceNIC.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of intuition-systems.info indicates that the domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited. The authoritative name servers are mira.ns.cloudflare.com and dexter.ns.cloudflare.com, pointing to Cloudflare’s DNS infrastructure. DNS resolution returns the address 172.67.160.138, which belongs to AS13335 Cloudflare, Inc., located in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 root, confirming that the site uses a valid HTTPS certificate, a common tactic for increasing credibility. When accessed, the only observable page element is the title “Just a moment…”, and no further content has been captured.
The site is currently marked as offline, and the page title suggests the presence of a JavaScript challenge or redirection step that has not been rendered. Cloudflare Browser Insights and HTTP/3 support are detected, indicating that the service is hosted behind Cloudflare’s edge network. Threat intelligence sources have flagged the domain. It appears in three public blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX lists the domain in a single pulse, and VirusTotal reports that five of ninety‑three scanned scanners flagged it as malicious.
The combination of recent registration, use of a reputable certificate, and inclusion on multiple blocklists aligns with patterns observed in generic phishing infrastructure. Uncertainty remains regarding the specific payload or credential‑harvesting page that may have been served before the domain was taken offline, as the page content beyond the title has not been captured. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host under the same IP range, and consider adding the IP address to reputation lists. Ongoing observation of Cloudflare‑associated IP blocks for similar registration patterns is recommended.
Inteligencia de seguridad de red Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | intuition-systems.info |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-13 03:04:04 UTC
Tecnologías · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianzaAnálisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.