Seguridad de dominio e inteligencia sobre amenazas

ww19.hiring9.com

Name: ww19.hiring9.com — PhishDestroy evidence record
Published: 2026-10-25
License: https://creativecommons.org/licenses/by/4.0/

Revisar las pruebas

Registrador: Tucows
Resolved IP: 208.91.196.145
Registrado: 22/02/2025

Evaluación de PhishDestroy Alto

63/100

Puntuación de evidencias

Disponibilidad Último activo conocido Última observación de accesibilidad almacenada Observado 25 oct 2026 · 23:00 UTCSondeo HTTP

Señales de riesgo

Lista de amenazas PhishDestroy almacenadas

VirusTotal

0 / 92

detecciones del motor · 2026-10-25

OTX

referencias de la comunidad

Cloudflare Radar

limpio

veredicto de la fuente

Capturas de la página

abrir galería

Antigüedad del dominio

610 days

Denuncias enviadas

—

No hay registros enviados

Resumen del informe

ww19.hiring9.com — Último activo conocido (HTTP 200). Resumen de las pruebas: VirusTotal 0/92; PhishDestroy score 63/100. Registrador: Tucows.

El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.

Análisis

Informe sobre la amenaza PhishDestroy2026-10-25 17:35:25 UTC

Overview

PhishDestroy added ww19.hiring9.com to its internal blocklist on 2026-10-25 based on a trusted intake. The prior assessment on the same date noted minimal page content and insufficient information to determine intent. An HTTP 200 response was recorded on 2026-10-25, but no further behavior was observed.

How the scam works

The listing does not establish a specific fraudulent mechanism for this domain. Suspicious domains may be used for phishing, credential harvesting, or social-engineering attacks, but no such activity was observed here.

Pruebas

VirusTotal scanned the domain on 2026-10-20 with 92 engines and reported zero detections and zero suspicious results. Google Safe Browsing checked the site on 2026-10-25 and did not flag it. URLScan’s machine-learning engine assigned a malicious score of 78 on 2026-10-19, though its overall verdict was non-malicious. PhishDestroy’s internal list marks the domain as blocked, while external blocklists showed no entries as of 2026-10-25, and OTX reported zero pulses.

Infraestructura

The domain ww19.hiring9.com was seven days old on the observation date, while its apex hiring9.com was 1,458 days old. Recorded DNS data on 2026-10-20 showed the domain pointing to IP 208.91.196.145 and a CNAME record to 9145.searchmagnified.com; the IP was observed behind Cloudflare. The IP belonged to ASN 40034 (Confluence Networks Inc) and was geolocated to Road Town, British Virgin Islands.

What to do

Do not submit credentials, personal data, or cryptocurrency information to this site, as no malicious intent has been proven but the domain is flagged as suspicious. Administrators should monitor access logs for any requests to ww19.hiring9.com and consider blocking the exact hostname in web filters. Users who may have entered sensitive information should change affected passwords and review account activity.

Evidencias de las fuentesVirusTotal 0 / 92 8 sources

URLScan

Malicioso · veredicto de los motores · puntuación 78

2026-10-19 15:39 UTC

Abrir informe

URLScanRegistro original de la fuenteObservado: 2026-10-19 15:39:20 UTC21 campos

Observado: 2026-10-19T15:39:20Z · Consultado el: 2026-10-25T17:32:06Z

ID del informe

01a154d1-1581-75e1-90a0-a92e2fad9feb

URL final

http://ww19.hiring9.com/

Respuesta HTTP

200

Tipo de redirección

off-domain

Redirecciones

Hacia
https://amaizingnetjobs3580.pages.dev/
Desde
http://amaizingnetjobs3580.pages.dev/
Estado
307
Hacia
https://www.fb.hiring9.com/
Desde
https://amaizingnetjobs3580.pages.dev/
Hacia
http://ww19.hiring9.com/
Desde
https://www.fb.hiring9.com/
Estado
302
Hacia
https://ww19.hiring9.com/
Desde
http://ww19.hiring9.com/
Estado
307
Hacia
http://ww19.hiring9.com/
Desde
https://ww19.hiring9.com/
Estado
307

Dirección IP

208.91.196.145

Dominios contactados

l.cdn-fileserver.com
d.delivery.consentmanager.net
s.cdn-fileserver.com
cdn.consentmanager.net
amaizingnetjobs3580.pages.dev
s.yimg.com
msadsscale.microsoft.com
scripts.clarity.ms
searchresultsworld.com
www.fb.hiring9.com

Direcciones IP con las que se ha establecido contacto

172.67.181.210
69.147.92.11
150.171.109.72
150.171.109.113
104.21.26.182
89.187.167.38
85.9.207.144
104.21.31.250
208.91.196.145
185.150.189.29
172.66.44.93

Sistemas autónomos (ASN)

13335
14777
8075
60068
202053
40034
23470

Países de los servidores

Dominios vinculados

findsearchresults.com
skenzo.com

Hash del documento

9dca5128b9b6ef243254c35151d332e842ffb61070f75261566ce64f3b444a84

Variables globales de JavaScript

cmp_id
cmp_cdid
cmp_params
cmp_host
cmp_cdn
cmp_proto
cmp_codesrc
cmp_getsupportedLangs
cmp_getRTLLangs
cmp_getlang
cmp_addFrame
cmp_rc
cmp_stub
cmp_gpp_ping
cmp_gppstub
cmp_msghandler
cmp_setStub
cmp_setGppStub
__cmp
__uspapi
__gpp
olaSyncCount
__bdata
checkDNS
cmp_utillities
cmp_gppmanifest
cmp_fibo
cmp_reader
cmp_writer
cmp_cs
cmp_lang
cmp_purpose
cmp_getFeatureTextSignature
cmp_hasNonStandardFeatureTexts
cmp_feature
cmp_stack
cmp_vendor
cmp_snapshot
cmp_storage
cmp_gpp_helper

Cookies

sid
visitor-id
__cmpcc
__cmpcccx175795

Claves de almacenamiento del navegador

cmp_gpcConsentModeEligible.40679ccc92462
__cmpcccx175795_ww19.hiring9.com
__cmpcccx175795_expire_ww19.hiring9.com

Sesión TLS y certificado

Nombres alternativos del sujeto (SAN): amaizingnetjobs3580.pages.dev
*.amaizingnetjobs3580.pages.dev
Conjunto de cifrado: AES_128_GCM
Emisor: WE1
Sujeto: amaizingnetjobs3580.pages.dev
Protocolo: QUIC
Válido hasta: 2026-12-27 15:38:01 UTC
Válido desde: 2026-09-28 14:38:22 UTC

Antigüedad del dominio, días

Antigüedad del dominio registrado, días

1458

Solicitudes de la página

Veredictos de los proveedores

Veredicto de los motores

Etiquetas: urlscan-ml
urlscan-ml-60c5e22
Puntuación: 78
Malicioso: Sí

Veredicto general

Puntuación: 0
Malicioso: No

Encabezados HTTP

Servidor: cloudflare
Content-type: text/html; charset=utf-8
X-content-type-options: nosniff
Referrer-policy: strict-origin-when-cross-origin

Campos originales de la fuente · JSON

Uuid	01a154d1-1581-75e1-90a0-a92e2fad9feb
Final url	http://ww19.hiring9.com/
Estado	200
Redirigido	off-domain
Redirecciones	[ { "to": "https://amaizingnetjobs3580.pages.dev/", "from": "http://amaizingnetjobs3580.pages.dev/", "status": 307 }, { "to": "https://www.fb.hiring9.com/", "from": "https://amaizingnetjobs3580.pages.dev/" }, { "to": "http://ww19.hiring9.com/", "from": "https://www.fb.hiring9.com/", "status": 302 }, { "to": "https://ww19.hiring9.com/", "from": "http://ww19.hiring9.com/", "status": 307 }, { "to": "http://ww19.hiring9.com/", "from": "https://ww19.hiring9.com/", "status": 307 } ]
Ip	208.91.196.145
Dominios contactados	[ "l.cdn-fileserver.com", "d.delivery.consentmanager.net", "s.cdn-fileserver.com", "cdn.consentmanager.net", "amaizingnetjobs3580.pages.dev", "s.yimg.com", "msadsscale.microsoft.com", "scripts.clarity.ms", "searchresultsworld.com", "www.fb.hiring9.com" ]
Direcciones IP con las que se ha establecido contacto	[ "172.67.181.210", "69.147.92.11", "150.171.109.72", "150.171.109.113", "104.21.26.182", "89.187.167.38", "85.9.207.144", "104.21.31.250", "208.91.196.145", "185.150.189.29", "172.66.44.93" ]
Asns	[ "13335", "14777", "8075", "60068", "202053", "40034", "23470" ]
Countries	[ "US", "GB", "DE", "VG" ]
Dominios vinculados	[ "findsearchresults.com", "skenzo.com" ]
Hash del documento	9dca5128b9b6ef243254c35151d332e842ffb61070f75261566ce64f3b444a84
Globals	[ "cmp_id", "cmp_cdid", "cmp_params", "cmp_host", "cmp_cdn", "cmp_proto", "cmp_codesrc", "cmp_getsupportedLangs", "cmp_getRTLLangs", "cmp_getlang", "cmp_addFrame", "cmp_rc", "cmp_stub", "cmp_gpp_ping", "cmp_gppstub", "cmp_msghandler", "cmp_setStub", "cmp_setGppStub", "__cmp", "__uspapi", "__gpp", "olaSyncCount", "__bdata", "checkDNS", "cmp_utillities", "cmp_gppmanifest", "cmp_fibo", "cmp_reader", "cmp_writer", "cmp_cs", "cmp_lang", "cmp_purpose", "cmp_getFeatureTextSignature", "cmp_hasNonStandardFeatureTexts", "cmp_feature", "cmp_stack", "cmp_vendor", "cmp_snapshot", "cmp_storage", "cmp_gpp_helper" ]
Cookies	[ "sid", "visitor-id", "__cmpcc", "__cmpcccx175795" ]
Storage keys	[ "cmp_gpcConsentModeEligible.40679ccc92462", "__cmpcccx175795_ww19.hiring9.com", "__cmpcccx175795_expire_ww19.hiring9.com" ]
Tls	{ "san": [ "amaizingnetjobs3580.pages.dev", "*.amaizingnetjobs3580.pages.dev" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "amaizingnetjobs3580.pages.dev", "protocol": "QUIC", "valid_to": "2026-12-27T15:38:01Z", "valid_from": "2026-09-28T14:38:22Z" }
Antigüedad del dominio en días	7
Apex age days	1458
Solicitudes	21
Veredictos de los proveedores	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 78, "malicious": true }, "overall": { "score": 0, "malicious": false } }
Encabezados HTTP	{ "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" }

Registro de monitorización independiente · 2026-10-26 04:30 UTC

Instantánea del monitor almacenada por separado; no sustituye al registro principal del informe ni determina la disponibilidad actual.

record_source: domain_monitor.urlscan
uuid: 01a154d1-1581-75e1-90a0-a92e2fad9feb
report_url: https://urlscan.io/result/01a154d1-1581-75e1-90a0-a92e2fad9feb/
puntuación: 0
malicious: false
result_at: 2026-10-26T04:30:20Z
enriched_at: null
source_timestamps: {"urlscan_result_at":"2026-10-26 05:30:20","urlscan_enriched_at":null}
timestamp_basis: Europa/Berlín, tal y como se utiliza en el informe actual; las marcas de tiempo de origen se conservan tal cual

VirusTotal

0 / 92 detecciones del motor · resumen guardado

2026-10-25 17:32 UTC

Abrir informe

VirusTotalRegistro original de la fuenteObservado: 2026-10-20 01:16:57 UTC10 campos

Observado: 2026-10-20T01:16:57Z · Consultado el: 2026-10-25T17:32:33Z

Recuento de resultados de proveedores

Tiempo agotado: 0
Inofensivo: 55
Malicioso: 0
Sospechoso: 0
No detectado: 37

Puntuación de reputación

Registrador

Tucows Domains Inc.

Creado

2025-02-22 18:18:42 UTC

Caduca

2027-02-22 18:18:42 UTC

Actualizado

2026-01-30 17:18:10 UTC

Visto por primera vez

2026-10-20 01:16:57 UTC

Registros DNS

TTL, segundos
300
Tipo
TXT
Valor
v=spf1 a -all
TTL, segundos
300
Tipo
SOA
Buzón del responsable
abuse.confluence-networks.com
Valor
ns1.cnomy.com
TTL, segundos
300
Tipo
MX
Valor
~
Prioridad
300
TTL, segundos
900
Tipo
NS
Valor
ns2.cnomy.com
TTL, segundos
300
Tipo
CNAME
Valor
9145.searchmagnified.com
TTL, segundos
900
Tipo
NS
Valor
ns1.cnomy.com
TTL, segundos
822
Tipo
A
Valor
208.91.196.145

Registros DNS obtenidos

2026-10-20 01:30:38 UTC

Ficha de registro

Registrador: Tucows Domains Inc.
ID de IANA del registrador: 69
URL del registrador: http://www.tucows.com
Registrado: 2025-02-22 18:18:42 UTC
Actualizado: 2026-01-30 17:18:10 UTC
Caduca: 2027-02-22 18:18:42 UTC
Estado: ok
Servidores de nombres: ns15.abovedomains.com
ns16.abovedomains.com
DNSSEC: unsigned

Campos originales de la fuente · JSON

Recuento de resultados de proveedores	{ "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }
Reputación	0
Registrador	Tucows Domains Inc.
Creado	2025-02-22T18:18:42Z
Caduca	2027-02-22T18:18:42Z
Actualizado	2026-01-30T17:18:10Z
Visto por primera vez	2026-10-20T01:16:57Z
Registros DNS	[ { "ttl": 300, "type": "TXT", "value": "v=spf1 a -all" }, { "ttl": 300, "type": "SOA", "rname": "abuse.confluence-networks.com", "value": "ns1.cnomy.com" }, { "ttl": 300, "type": "MX", "value": "~", "priority": 300 }, { "ttl": 900, "type": "NS", "value": "ns2.cnomy.com" }, { "ttl": 300, "type": "CNAME", "value": "9145.searchmagnified.com" }, { "ttl": 900, "type": "NS", "value": "ns1.cnomy.com" }, { "ttl": 822, "type": "A", "value": "208.91.196.145" } ]
Dns at	2026-10-20T01:30:38Z
Ficha de registro	{ "registrar": "Tucows Domains Inc.", "registrar_iana_id": "69", "registrar_url": "http://www.tucows.com", "created": "2025-02-22T18:18:42Z", "updated": "2026-01-30T17:18:10Z", "expires": "2027-02-22T18:18:42Z", "status": [ "ok" ], "nameservers": [ "ns15.abovedomains.com", "ns16.abovedomains.com" ], "dnssec": "unsigned" }

Registro de origen independiente · 0 malicious + 0 suspicious / 92 · 2026-10-20 01:16:57 UTC

El resumen anterior y este registro del proveedor se recopilaron en momentos diferentes. Ambos siguen estando disponibles; las clasificaciones como «malicioso» y «sospechoso» se muestran por separado.

record_source: collected_observations.vt
analysis_at: 2026-10-20T01:16:57Z
fetched_at: 2026-10-25T17:32:33Z
stats: {"timeout":0,"harmless":55,"malicious":0,"suspicious":0,"undetected":37}

OTX

sin referencias de la comunidad

2026-10-25 17:33 UTC

Abrir informe