MALICIOUS — CRITICAL
Análisis de phishing y seguridad de web-sys.digital
web-sys[.]
The domain web-sys.digital is a confirmed generic phishing site posing an elevated risk of credential theft or fraudulent activity.
- VirusTotal
- 14/91
- Blocklists
- No stored match
- Disponibilidad
- Contenido no disponible · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
web-sys.digital — Contenido no disponible (HTTP 502). Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 14/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, ESET); PhishDestroy score 92/100. Registrador: Web Commerce Communica….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Analysis
The domain web-sys.digital is a confirmed generic phishing site posing an elevated risk of credential theft or fraudulent activity. It does not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, web-sys.digital has been taken offline, though prior activity indicates it was actively used for phishing attempts.
Technical indicators confirm the domain's malicious nature: 11 of 95 VirusTotal security vendors flagged web-sys.digital, including ADMINUSLabs, alphaMountain.ai, and BitDefender. The domain was registered through Web Commerce Communications Limited on November 10, 2025, and resolves to the IP address 77.110.112.57, hosted in Russia under AS207713 GLOBAL INTERNET SOLUTIONS LLC. It appears on one security blocklist (PhishDestroy) and uses an SSL certificate issued by Internet Widgits Pty Ltd. The observed page title was identical to the domain name, and Gridinsoft assigned it a trust score of 0/100.
Individuals who interacted with web-sys.digital should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized transactions or identity fraud. Victims are advised to report the domain to their email provider, browser security teams, and relevant cybersecurity organizations such as the Anti-Phishing Working Group (APWG) or local cybercrime units. If financial data was exposed, contact the associated institution to secure accounts and review recent activity for signs of compromise.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cobertura de los datos12 recorded checks
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.