b28a[.]top
Pemeriksaan phishing dan keamanan b28a.top
“welcome-BET365”
b28a.top — Konten tidak tersedia (HTTP 502). Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 14/91 (alphaMountain.ai, Cluster25, ESET, Forcepoint ThreatSeeker, Fortinet); URLQuery 10 alerts; Spamhaus DBL_SPAM; PhishDestroy score 95/100. Registrar: NameMart.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, b28a.top, is flagged as a high-risk generic phishing site based on infrastructure analysis and vendor detections. Registered on May 15, 2026, through NameMart Pte. Ltd., it currently resolves to the IP address 103.27.177.164 and remains active as of July 16, 2026. The domain uses nameservers ns1.1111343.com, ns2.1111343.com, ns3.1111343.com, and ns4.1111343.com, which may be part of a broader malicious infrastructure. Security vendors have detected this domain, with 14 of 91 flagging it as malicious, though the specific brand or service being impersonated is not yet confirmed. The exact content and targeting of the phishing site remain unanalyzed, but the domain's registration and resolution patterns align with known phishing campaigns. Defenders should treat this domain as hostile and prioritize blocking or monitoring traffic to 103.27.177.164 and its associated nameservers. Further investigation into the domain's content and any linked infrastructure is recommended to determine the full scope of the threat.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | b43i.top |
phishing | Phishing Block |
| DNS4EU | b43i.top |
malicious | Sinkholed |
| Cloudflare DNS | b28a.top |
malicious | Sinkholed |
| OpenDNS | b28a.top |
phishing | Phishing Block |
| Hagezi Threat Feed | b28a.top |
malicious | Sinkholed |
| DigiCert UltraDNS | b28a.top |
malicious | Sinkholed |
| DNS4EU | b28a.top |
malicious | Sinkholed |
| Hagezi Threat Feed | img.esportsdata.cc |
malicious | Sinkholed |
| DNS4EU | img.esportsdata.cc |
malicious | Sinkholed |
| DNS4EU | ssl.hw301.xyz |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260717-5A08AB Recipient: abuse@namemart.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive