user-profile-system[.]accounts-admin-agency[.]com
“Accounts Centre”
user-profile-system.accounts-admin-agency.com — सामग्री अनुपलब्ध (HTTP 502). ब्रांड प्रतिरूपण: Facebook. साक्ष्य सारांश: VirusTotal 20 detections (engine total unavailable) (ADMINUSLabs, Criminal IP, BitDefender, Chong Lua Dao, Cluster25); URLQuery 6 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: Gransy, s.r.o.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain user-profile-system.accounts-admin-agency.com has been identified as a credential phishing site designed to harvest user account credentials. Analysis indicates the infrastructure was specifically crafted to impersonate authentication portals, as evidenced by the page title 'Accounts Centre,' which aligns with common login interface terminology. The domain is currently offline, but prior activity suggests it was actively targeting users through deceptive login prompts. Infrastructure analysis reveals the domain was registered on May 1, 2026, through Gransy, s.r.o., and resolved to the IP address 162.159.140.98. Security vendor detections on VirusTotal reached 20 of 95, indicating a moderate but notable level of malicious classification. The domain appears on two security blocklists, and its trust score from Gridinsoft is 0 out of 100, further confirming its high-risk nature. Technologies detected include Node.js, React, Next.js, Cloudflare, Webpack, and HTTP/3, suggesting a modern, obfuscated phishing framework designed to evade detection and enhance scalability. Current status confirms the domain has been taken offline, likely due to enforcement actions or infrastructure changes by the threat actor. However, the registration date in the future (2026) suggests potential preemptive domain squatting or a misconfiguration in the data. Organizations and users are advised to block the domain and associated IP at the network level, monitor for similar naming patterns (e.g., 'accounts-admin-agency'), and implement multi-factor authentication to mitigate credential theft risks. Security teams should also review logs for prior connections to 162.159.140.98 and investigate any related domains registered through the same registrar.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | user-profile-system.accounts-admin-agency.com |
malicious | Sinkholed |
| OpenDNS | user-profile-system.accounts-admin-agency.com |
phishing | Phishing Block |
| DigiCert UltraDNS | user-profile-system.accounts-admin-agency.com |
malicious | Sinkholed |
| Hagezi Threat Feed | user-profile-system.accounts-admin-agency.com |
malicious | Sinkholed |
| DNS4EU | user-profile-system.accounts-admin-agency.com |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | user-profile-system.accounts-admin-agency.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: accounts-admin-agency.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain accounts-admin-agency.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% विश्वासNext.js is a React framework for developing single page Javascript applications.
nextjs.org 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260507-A8B524 Recipient: abuse@regtons.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।