VirusTotal
16 / 89
“EasyWeb Login - TD Canada Trust”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@registrar.eu.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
microsoft-advertising-authentification.sgn-1.com — असत्यापित. ब्रांड प्रतिरूपण: Microsoft; घोटाले का प्रकार: Impersonation. साक्ष्य सारांश: VirusTotal 16/89 (BitDefender, Chong Lua Dao, CRDF, Forcepoint ThreatSeeker, Fortinet); URLQuery 3 alerts; URLScan malicious verdict; Google Safe Browsing flagged; PhishDestroy score 100/100. रजिस्ट्रार: Hosting Concepts.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
16 / 89
3 threat-system alerts
रिपोर्ट करेंmalicious
रिपोर्ट करें15/100
रिपोर्ट करेंThreat flag recorded
रिपोर्ट करेंno community references
रिपोर्ट करेंprovider verdict: clean
रिपोर्ट करेंसंग्रहित रिपोर्ट
रिपोर्ट करें | Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | microsoft-advertising-authentification.sgn-1.com/signin/login.html |
malware | Detects file containing Telegram Bot API |
| OpenDNS | microsoft-advertising-authentification.sgn-1.com |
phishing | Phishing Block |
| DNS4EU | microsoft-advertising-authentification.sgn-1.com |
malicious | Sinkholed |
The domain microsoft-advertising-authentification.sgn-1.com returned an HTTP 502 status on 2026-10-07, indicating a recorded server error at that time. This domain was first observed in records on 2026-09-11.
Google Safe Browsing flagged the domain for social engineering on 2026-09-25. VirusTotal, on 2026-09-23, reported 16 detections out of 89 scanners for this domain. The domain was listed in the internal PhishDestroy catalogue, and an HTTP check on 2026-10-07 recorded a 502 status code.
These observations from Google Safe Browsing, VirusTotal, and the PhishDestroy catalogue document several automated responses to the domain across different dates. The recorded HTTP status provides a snapshot of server response but does not describe all possible content or uses for the domain.
For ongoing review, retain the Google Safe Browsing and VirusTotal records for microsoft-advertising-authentification.sgn-1.com as sources of external and multi-scanner data. Preserve the HTTP status record and the PhishDestroy internal listing for reference in future comparisons. Use these documented findings to guide further monitoring or analysis of this domain.
इस होस्ट के लिए संग्रहीत क्रॉलर-बनाम-ब्राउज़र अवलोकन, साथ ही केइतारो-शैली ट्रैफ़िक वितरण प्रणालियों के लिए लाइव फिंगरप्रिंट जांच।
स्कैनर नोट: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='microsoft-advertising-authentification.sgn-1.com', port=80): Max retries exceeded with url
grant.ns.cloudflare.comvida.ns.cloudflare.comLocation describes the IP network.
107.189.18.119. 14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20260911-1075A9 Recipient: abuse@registrar.eu Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (FR): French Penal Code Article 323-1 French Penal Code Article 313-1 (Fraud) Law for a Digital Republic French law prohibits fraudulent access to automated data processing systems. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
Template-based draft · optional AI wording assistance requires separate consent
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंसंदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंहाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंलाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।