secure-documents--files056[.]replit[.]app
Pemeriksaan phishing dan keamanan secure-documents--files056.replit.app
“PORTAL - Mail Authentication”
secure-documents--files056.replit.app — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Genericemail; Jenis penipuan: Impersonation. Ringkasan bukti: VT 17/91 (alphaMountain.ai, BitDefender, Cluster25, ESET, Emsisoft); URLScan malicious; GSB no flag; Spamhaus DBL_ABUSED_PHISH; BL 0; CF Radar malicious; PD 100/100. Registrar: Replit.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
secure-documents--files056.replit.app is a subdomain of replit.app. PhishDestroy first recorded this hostname on Aug 6, 2026. Stored content metadata identifies Genericemail as the apparent target. The stored content classification is impersonation. The assembled evidence scores 100/100 (critical).
Four independent sources are positive: VirusTotal, Spamhaus DBL, Cloudflare Radar, and URLScan. VirusTotal recorded 17 detections among 91 engines: alphaMountain.ai, BitDefender, Cluster25, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, Sophos, URLQuery, VIPRE, Webroot on Aug 7, 2026 at 02:10 UTC. Spamhaus DBL: DBL_ABUSED_PHISH on Aug 6, 2026 at 14:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100 on Aug 6, 2026 at 12:39 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Aug 6, 2026 at 12:35 UTC.
HTTP 200 was recorded on Aug 7, 2026 at 10:43 UTC. Registration records for the registrable domain replit.app list Replit Inc. as the registrar. At collection time, the hostname resolved to 34.117.33.233 on AS396982 (GOOGLE-CLOUD-PLATFORM - Google LLC, US). The associated network metadata labels the endpoint as AS396982 Google LLC in Kansas City, US. The stored server header is cloudflare. Captured page title: “PORTAL - Mail Authentication”. DOM analysis completed on Aug 6, 2026 at 14:20 UTC; stored DOM score 88/100. The evidence archive retains 4 visual captures from PhishDestroy, URLScan, and Cloudflare Radar. IoC extraction completed on Aug 7, 2026 at 04:00 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Google Trust Services as the certificate issuer with validity through Oct 7, 2026; checked Aug 6, 2026 at 13:02 UTC.
Taken together, the page content and independent findings support classifying this hostname as Genericemail-themed impersonation.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: replit.app
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
ICANN Sudah Dibayar. Akuntabilitas Tak Kunjung Datang.
For the registrable domain replit.app behind this subdomain, the registrar above operates under an ICANN contract. ICANN collects annual, variable and transaction-based fees tied to registrations, renewals and transfers.
Akreditasi: dimonetisasi. Akuntabilitas: silakan periksa kembali nanti.
Lalu keajaiban dimulai: ICANN menulis RAA §3.18, registrar menyelidiki penyalahgunaan di dalam basis pelanggannya sendiri, dan para korban menyerahkan bukti secara cuma-cuma sementara setiap lapisan menunggu pihak lain bertindak. Jika itu membuat para korban merasa lebih aman, bagus sekali—ternyata tagihannya bekerja.
Teknologi · 4 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of secure-documents--files056.replit.app · checked Aug 6, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive