greekcs[.]cyou
“Plesk Obsidian 18.0.77”
greekcs.cyou — Belum terverifikasi. Jenis penipuan: Generic Phishing. Ringkasan bukti: VirusTotal 23/94 (ADMINUSLabs, alphaMountain.ai, AlphaSOC, BitDefender, Chong Lua Dao); URLQuery 4 alerts; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This report details the analysis of the domain greekcs.cyou. The site displays a page title of "Plesk Obsidian 18.0.77", which is a legitimate web hosting control panel interface. This indicates the domain is likely a compromised or maliciously deployed instance of Plesk, not an authorized service. The primary threat is that such a setup can be used to host phishing pages, distribute malware, or serve as a command-and-control endpoint, posing a significant risk to visitors and network security.
Technical evidence from the provided data shows the domain was flagged by 22 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, AlphaSOC, BitDefender, and Chong Lua Dao. The domain is registered via Dynadot LLC, with a creation date of 2026-04-04. It resolves to IP address 37.77.150.150, hosted by LLC Baxet in Russia (RU). The SSL certificate is issued by Let's Encrypt with identifier R12, and nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net. The domain is currently listed on 3 blocklists.
As of this report, the domain status is DOWN/OFFLINE. GridinSoft trust rating is 0 out of 100, and the domain risk score is 90 out of 100, indicating a very high risk. The combination of high detection rates, recent creation, and association with a control panel interface makes this domain a confirmed threat, even while offline.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | greekcs.cyou |
malicious | Sinkholed |
| Cloudflare DNS | greekcs.cyou |
malicious | Sinkholed |
| DNS4EU | greekcs.cyou |
malicious | Sinkholed |
| Hagezi Threat Feed | greekcs.cyou |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ZONA SHORTDOT · BUKTI PUBLIK
.cyou
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive