csyous[.]com
Pemeriksaan phishing dan keamanan csyous.com
“csyous.com”
csyous.com — Konten tidak tersedia (HTTP 503). Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 10/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25); URLQuery 2 alerts; PhishDestroy score 85/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
csyous.com has been identified as a credential harvesting phishing domain, posing an elevated risk to users who may unknowingly submit login credentials. This domain is actively engaged in malicious activities designed to trick victims into divulging sensitive information such as usernames, passwords, or financial details. The threat is particularly insidious due to its use of deceptive web interfaces that closely mimic legitimate services, increasing the likelihood of successful exploitation.
This domain was flagged by PhishDestroy with an elevated risk rating and is associated with multiple indicators of compromise. csyous.com resolves to IP address 50.3.160.146 and was registered through Gname.com Pte. Ltd. on August 09, 2023. Security vendor analysis via VirusTotal shows that 2 out of 95 security engines flagged this domain as malicious or suspicious. The domain’s recent creation date and low detection rate suggest it may be part of a rapidly evolving campaign, potentially evading traditional security measures. While specific blocklist data is not provided, the combination of these factors indicates a credible threat that warrants immediate attention from both security professionals and end-users.
To mitigate the risk posed by csyous.com, users should avoid interacting with this domain entirely. Organizations are advised to block both the domain and its associated IP address (50.3.160.146) at the network perimeter. Implementing DNS filtering solutions can prevent users from accidentally accessing this or similar malicious domains. If credentials have been inadvertently submitted, users should immediately change their passwords on all accounts, enable multi-factor authentication where possible, and monitor for signs of unauthorized access or fraudulent activity. Security teams should also conduct a broader review of their threat intelligence feeds to identify related domains or IPs that may be part of the same campaign. Proactive monitoring of newly registered domains with similar naming conventions is recommended to stay ahead of emerging threats.
Cakupan data13 recorded checks
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | fcl.xueyuxingfeng.com |
malicious | Sinkholed |
| DNS4EU | fcl.xueyuxingfeng.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan EksternalIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.