88790[.]xyz
“welcome-BET365”
88790.xyz — Konten tidak tersedia. Ringkasan bukti: VirusTotal 5/91 (alphaMountain.ai, Fortinet, LevelBlue, Sophos, Webroot); URLQuery 8 alerts; PhishDestroy score 75/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, 88790.xyz, was registered on 2026-02-08 through Gname.com Pte. Ltd. and is currently active. Authoritative name servers listed are a.share-dns.com, a7.share-dns.com, b.share-dns.net, and b7.share-dns.net, indicating use of a shared DNS service. DNS resolution points to the IPv4 address 103.27.177.164. Analysis on VirusTotal shows that six of ninety-one scanning engines have flagged the domain, reflecting a modest but notable detection rate. The threat classification assigned is generic_phishing, and the risk level is high. Publicly available intelligence does not include a content review of the landing page, so the specific phishing vector, credential targets, or malicious payloads remain unknown. The limited detection count suggests that the site may be newly deployed or employing evasion techniques, but the presence of multiple detections confirms malicious intent. Defenders should treat 88790.xyz as hostile. Immediate mitigation steps include adding the domain and its resolving IP address to network blocklists, configuring email gateways to reject messages containing the domain, and monitoring DNS queries for the associated name servers. Continuous re-scanning on multi-engine platforms is recommended to capture any changes in detection status. Correlation with other activity from the same IP or DNS hosts may reveal additional campaign infrastructure.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | 17654.xyz |
malicious | Sinkholed |
| Hagezi Threat Feed | img.esportsdata.cc |
malicious | Sinkholed |
| DNS4EU | img.esportsdata.cc |
malicious | Sinkholed |
| Cloudflare DNS | 88790.xyz |
malicious | Sinkholed |
| OpenDNS | 88790.xyz |
phishing | Phishing Block |
| DigiCert UltraDNS | 88790.xyz |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | 88790.xyz |
malicious | Sinkholed |
| DNS4EU | ssl.hw301.xyz |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260717-37EB62 Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive