softbaok[.]cc
Pemeriksaan phishing dan keamanan softbaok.cc
“ログイン | My SoftBank | ソフトバンク”
softbaok.cc — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Yahoo; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 20 detections (engine total unavailable) (ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, CRDF); URLQuery 4 alerts; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Dominet (HK).
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, softbaok.cc, is identified as a brand impersonation phishing site targeting Yahoo users. The phishing page presents a fake login portal titled "ログイン | My SoftBank | ソフトバンク," designed to harvest credentials by mimicking legitimate Yahoo-associated services. Analysis indicates the site does not employ a cryptocurrency drainer kit but focuses on credential theft through deceptive login interfaces. The use of Japanese-language branding suggests a targeted campaign aimed at users of Yahoo Japan or SoftBank services, increasing the likelihood of successful deception among regional victims. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered on February 21, 2026, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 154.213.178.101, hosted under AS54801 (Zillion Network Inc.) in Japan. VirusTotal reports 20 out of 95 security vendors flagging the domain as malicious, while it appears on one additional security blocklist. The domain lacks an SSL certificate, further reducing its legitimacy and increasing detection likelihood by security tools. No entries were found in Google Safe Browsing at the time of analysis, though this does not preclude prior or future listings. The domain is currently offline, likely due to takedown actions or voluntary suspension by the hosting provider. Despite its inactive status, residual risk remains for users who may have interacted with the site during its operational window. Organizations and individuals are advised to monitor for unauthorized access attempts linked to credentials potentially harvested by this campaign. Network defenders should update blocklists to include the domain and associated IP address, while users should be alerted to the specific page title and branding used in this phishing attempt. Continuous monitoring of newly registered domains under the same registrar or hosting provider is recommended to identify potential follow-up campaigns.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | softbaok.cc |
malicious | Sinkholed |
| DNS4EU | softbaok.cc |
malicious | Sinkholed |
| OpenDNS | softbaok.cc |
phishing | Phishing Block |
| Cloudflare DNS | softbaok.cc |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260125-486E64 Recipient: domainabuse@service.aliyun.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive