soft[.]mydiv[.]net
Pemeriksaan phishing dan keamanan soft.mydiv.net
“Access Verification”
soft.mydiv.net — Terselubung · dapat dijangkau (HTTP 403). Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 3/91 (AutoShun, Chong Lua Dao, Gridinsoft); cloaking observed; PhishDestroy score 86/100. Registrar: OVH, SAS.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
On 24 July 2026 analysts observed that the domain soft.mydiv.net continues to be active and hosts a page titled "Access Verification". The site resolves to IP 108.181.24.29, which belongs to AS40676 Psychz Networks located in the United States. The hosting environment runs Ubuntu behind an Nginx web server, and the TLS certificate is issued by Let’s Encrypt (R12), indicating a valid HTTPS endpoint. The domain was created on 26 April 2007 and is registered through OVH, SAS.
Nameserver records point to Cloudflare’s igor.ns.cloudflare.com and val.ns.cloudflare.com. VirusTotal reports that two out of ninety–three scanning engines flag the domain, confirming a modest detection rate. The site appears on at least one external blocklist and is explicitly blocked by the PhishDestroy service. An HTTP request to the root URL returns a 403 Forbidden status, suggesting that direct access is denied or that the page is intended to be reached only after a prior step.
No additional content analysis is available beyond the page title, and the exact phishing vector has not been publicly disclosed. Given the presence of detections, blocklist inclusion, and the "Access Verification" title, the domain is consistent with credential–harvesting activity. Defenders should add soft.mydiv.net to URL filtering policies, enforce TLS inspection where possible, and monitor outbound traffic for connections to 108.181.24.29. Continuous re–evaluation is advised in case additional malicious payloads are observed.
Cakupan data13 recorded checks
Sinyal Keamanan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: mydiv.net
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain mydiv.net behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 2 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Analisis VirusTotal
Bukti Terarsip
Analisis Konfigurasi Situs
Bukti & Laporan EksternalIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.