threshold[.]sbs
Analyse phishing et sécurité de threshold.sbs
“threshold.sbs”
threshold.sbs — Dernier actif connu (HTTP 200). Type d'arnaque : Crypto Drainer. Résumé des preuves: VirusTotal 4/91 (alphaMountain.ai, Gridinsoft, SOCRadar, Webroot); URLQuery 8 alerts; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 81/100. Bureau d’enregistrement: Dynadot.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Résumé des preuves
PhishDestroy first observed threshold.sbs on Apr 29, 2026. The captured page title is “threshold.sbs”. Stored page analysis classifies the content as crypto drainer. Evidence score: 81/100 (critical).
5 independent sources recorded positive findings: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and URLQuery. VirusTotal recorded 4 detections among 91 engines: alphaMountain.ai, Gridinsoft, SOCRadar, Webroot on Jul 18, 2026 at 16:45 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 06:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 13, 2026 at 18:31 UTC. URLQuery recorded 8 threat-system alerts on Apr 29, 2026 at 09:14 UTC.
HTTP 200 was recorded on Aug 9, 2026 at 02:13 UTC. Registration records for the domain list Dynadot LLC as the registrar and Apr 29, 2026 as the creation date. At collection time, the hostname resolved to 185.53.179.128 on AS61969 (Team Internet AG). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
Couverture des données13 recorded checks
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | obseu.northwavepoint.com |
malicious | Sinkholed |
| DigiCert UltraDNS | l.cdn-fileserver.com |
malicious | Sinkholed |
| Quad9 DNS | l.cdn-fileserver.com |
malicious | Sinkholed |
| Cloudflare DNS | realtimesearchresults.com |
malicious | Sinkholed |
| DNS4EU | realtimesearchresults.com |
malicious | Sinkholed |
| DigiCert UltraDNS | s.cdn-fileserver.com |
malicious | Sinkholed |
| Quad9 DNS | s.cdn-fileserver.com |
malicious | Sinkholed |
| DigiCert UltraDNS | euob.northwavepoint.com |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ZONE SHORTDOT · PREUVES PUBLIQUES
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Données factuelles et rapports externesIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.