Keamanan domain dan intelijen ancaman

ww19.hiring9.com

Name: ww19.hiring9.com — PhishDestroy evidence record
Published: 2026-10-25
License: https://creativecommons.org/licenses/by/4.0/

Tinjau bukti

Registrar: Tucows
Resolved IP: 208.91.196.145
Terdaftar: 22/02/2025

Penilaian PhishDestroy Tinggi

63/100

Skor bukti

Ketersediaan Terakhir diketahui aktif Pengamatan keterjangkauan tersimpan terbaru Teramati 25 Okt 2026 · 23:00 UTCPemeriksaan HTTP

Sinyal risiko

Daftar ancaman PhishDestroy yang tersimpan

VirusTotal

0 / 92

deteksi mesin · 2026-10-25

OTX

referensi komunitas

Cloudflare Radar

bersih

putusan sumber

Tangkapan halaman

buka galeri

Usia domain

610 days

Laporan terkirim

—

Tidak ada catatan yang terkirim

Ringkasan laporan

ww19.hiring9.com — Terakhir diketahui aktif (HTTP 200). Ringkasan bukti: VirusTotal 0/92; PhishDestroy score 63/100. Registrar: Tucows.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Analisis

Laporan Ancaman PhishDestroy2026-10-25 17:35:25 UTC

Overview

PhishDestroy added ww19.hiring9.com to its internal blocklist on 2026-10-25 based on a trusted intake. The prior assessment on the same date noted minimal page content and insufficient information to determine intent. An HTTP 200 response was recorded on 2026-10-25, but no further behavior was observed.

How the scam works

The listing does not establish a specific fraudulent mechanism for this domain. Suspicious domains may be used for phishing, credential harvesting, or social-engineering attacks, but no such activity was observed here.

Bukti

VirusTotal scanned the domain on 2026-10-20 with 92 engines and reported zero detections and zero suspicious results. Google Safe Browsing checked the site on 2026-10-25 and did not flag it. URLScan’s machine-learning engine assigned a malicious score of 78 on 2026-10-19, though its overall verdict was non-malicious. PhishDestroy’s internal list marks the domain as blocked, while external blocklists showed no entries as of 2026-10-25, and OTX reported zero pulses.

Infrastruktur

The domain ww19.hiring9.com was seven days old on the observation date, while its apex hiring9.com was 1,458 days old. Recorded DNS data on 2026-10-20 showed the domain pointing to IP 208.91.196.145 and a CNAME record to 9145.searchmagnified.com; the IP was observed behind Cloudflare. The IP belonged to ASN 40034 (Confluence Networks Inc) and was geolocated to Road Town, British Virgin Islands.

What to do

Do not submit credentials, personal data, or cryptocurrency information to this site, as no malicious intent has been proven but the domain is flagged as suspicious. Administrators should monitor access logs for any requests to ww19.hiring9.com and consider blocking the exact hostname in web filters. Users who may have entered sensitive information should change affected passwords and review account activity.

Bukti sumberVirusTotal 0 / 92 8 sources

URLScan

Berbahaya · putusan mesin · skor 78

2026-10-19 15:39 UTC

Buka laporan

URLScanCatatan asli sumberTeramati: 2026-10-19 15:39:20 UTC21 kolom

Teramati: 2026-10-19T15:39:20Z · Diambil: 2026-10-25T17:32:06Z

ID laporan

01a154d1-1581-75e1-90a0-a92e2fad9feb

URL Akhir

http://ww19.hiring9.com/

Respons HTTP

200

Jenis pengalihan

off-domain

Pengalihan

Ke
https://amaizingnetjobs3580.pages.dev/
Dari
http://amaizingnetjobs3580.pages.dev/
Status
307
Ke
https://www.fb.hiring9.com/
Dari
https://amaizingnetjobs3580.pages.dev/
Ke
http://ww19.hiring9.com/
Dari
https://www.fb.hiring9.com/
Status
302
Ke
https://ww19.hiring9.com/
Dari
http://ww19.hiring9.com/
Status
307
Ke
http://ww19.hiring9.com/
Dari
https://ww19.hiring9.com/
Status
307

Alamat IP

208.91.196.145

Domain yang dihubungi

l.cdn-fileserver.com
d.delivery.consentmanager.net
s.cdn-fileserver.com
cdn.consentmanager.net
amaizingnetjobs3580.pages.dev
s.yimg.com
msadsscale.microsoft.com
scripts.clarity.ms
searchresultsworld.com
www.fb.hiring9.com

Alamat IP yang dihubungi

172.67.181.210
69.147.92.11
150.171.109.72
150.171.109.113
104.21.26.182
89.187.167.38
85.9.207.144
104.21.31.250
208.91.196.145
185.150.189.29
172.66.44.93

Sistem otonom (ASN)

13335
14777
8075
60068
202053
40034
23470

Negara server

Domain yang tertaut

findsearchresults.com
skenzo.com

Hash dokumen

9dca5128b9b6ef243254c35151d332e842ffb61070f75261566ce64f3b444a84

Variabel global JavaScript

cmp_id
cmp_cdid
cmp_params
cmp_host
cmp_cdn
cmp_proto
cmp_codesrc
cmp_getsupportedLangs
cmp_getRTLLangs
cmp_getlang
cmp_addFrame
cmp_rc
cmp_stub
cmp_gpp_ping
cmp_gppstub
cmp_msghandler
cmp_setStub
cmp_setGppStub
__cmp
__uspapi
__gpp
olaSyncCount
__bdata
checkDNS
cmp_utillities
cmp_gppmanifest
cmp_fibo
cmp_reader
cmp_writer
cmp_cs
cmp_lang
cmp_purpose
cmp_getFeatureTextSignature
cmp_hasNonStandardFeatureTexts
cmp_feature
cmp_stack
cmp_vendor
cmp_snapshot
cmp_storage
cmp_gpp_helper

Cookie

sid
visitor-id
__cmpcc
__cmpcccx175795

Kunci penyimpanan browser

cmp_gpcConsentModeEligible.40679ccc92462
__cmpcccx175795_ww19.hiring9.com
__cmpcccx175795_expire_ww19.hiring9.com

Sesi TLS dan sertifikat

Nama alternatif subjek (SAN): amaizingnetjobs3580.pages.dev
*.amaizingnetjobs3580.pages.dev
Cipher suite: AES_128_GCM
Penerbit: WE1
Subjek: amaizingnetjobs3580.pages.dev
Protokol: QUIC
Berlaku hingga: 2026-12-27 15:38:01 UTC
Berlaku sejak: 2026-09-28 14:38:22 UTC

Usia domain, hari

Usia domain terdaftar, hari

1458

Permintaan halaman

Keputusan penyedia layanan

Putusan mesin

Tag: urlscan-ml
urlscan-ml-60c5e22
Skor: 78
Berbahaya: Ya

Putusan keseluruhan

Skor: 0
Berbahaya: Tidak

Header HTTP

Server: cloudflare
Content-type: text/html; charset=utf-8
X-content-type-options: nosniff
Referrer-policy: strict-origin-when-cross-origin

Kolom asli sumber · JSON

Uuid	01a154d1-1581-75e1-90a0-a92e2fad9feb
Final url	http://ww19.hiring9.com/
Status	200
Dialihkan	off-domain
Pengalihan	[ { "to": "https://amaizingnetjobs3580.pages.dev/", "from": "http://amaizingnetjobs3580.pages.dev/", "status": 307 }, { "to": "https://www.fb.hiring9.com/", "from": "https://amaizingnetjobs3580.pages.dev/" }, { "to": "http://ww19.hiring9.com/", "from": "https://www.fb.hiring9.com/", "status": 302 }, { "to": "https://ww19.hiring9.com/", "from": "http://ww19.hiring9.com/", "status": 307 }, { "to": "http://ww19.hiring9.com/", "from": "https://ww19.hiring9.com/", "status": 307 } ]
Ip	208.91.196.145
Domain yang dihubungi	[ "l.cdn-fileserver.com", "d.delivery.consentmanager.net", "s.cdn-fileserver.com", "cdn.consentmanager.net", "amaizingnetjobs3580.pages.dev", "s.yimg.com", "msadsscale.microsoft.com", "scripts.clarity.ms", "searchresultsworld.com", "www.fb.hiring9.com" ]
Alamat IP yang dihubungi	[ "172.67.181.210", "69.147.92.11", "150.171.109.72", "150.171.109.113", "104.21.26.182", "89.187.167.38", "85.9.207.144", "104.21.31.250", "208.91.196.145", "185.150.189.29", "172.66.44.93" ]
Asns	[ "13335", "14777", "8075", "60068", "202053", "40034", "23470" ]
Countries	[ "US", "GB", "DE", "VG" ]
Domain yang tertaut	[ "findsearchresults.com", "skenzo.com" ]
Hash dokumen	9dca5128b9b6ef243254c35151d332e842ffb61070f75261566ce64f3b444a84
Globals	[ "cmp_id", "cmp_cdid", "cmp_params", "cmp_host", "cmp_cdn", "cmp_proto", "cmp_codesrc", "cmp_getsupportedLangs", "cmp_getRTLLangs", "cmp_getlang", "cmp_addFrame", "cmp_rc", "cmp_stub", "cmp_gpp_ping", "cmp_gppstub", "cmp_msghandler", "cmp_setStub", "cmp_setGppStub", "__cmp", "__uspapi", "__gpp", "olaSyncCount", "__bdata", "checkDNS", "cmp_utillities", "cmp_gppmanifest", "cmp_fibo", "cmp_reader", "cmp_writer", "cmp_cs", "cmp_lang", "cmp_purpose", "cmp_getFeatureTextSignature", "cmp_hasNonStandardFeatureTexts", "cmp_feature", "cmp_stack", "cmp_vendor", "cmp_snapshot", "cmp_storage", "cmp_gpp_helper" ]
Cookie	[ "sid", "visitor-id", "__cmpcc", "__cmpcccx175795" ]
Storage keys	[ "cmp_gpcConsentModeEligible.40679ccc92462", "__cmpcccx175795_ww19.hiring9.com", "__cmpcccx175795_expire_ww19.hiring9.com" ]
Tls	{ "san": [ "amaizingnetjobs3580.pages.dev", "*.amaizingnetjobs3580.pages.dev" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "amaizingnetjobs3580.pages.dev", "protocol": "QUIC", "valid_to": "2026-12-27T15:38:01Z", "valid_from": "2026-09-28T14:38:22Z" }
Usia domain (hari)	7
Apex age days	1458
Permintaan	21
Keputusan penyedia layanan	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 78, "malicious": true }, "overall": { "score": 0, "malicious": false } }
Header HTTP	{ "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" }

Catatan monitor terpisah · 2026-10-26 04:30 UTC

Cuplikan monitor yang disimpan secara terpisah; tidak menggantikan catatan laporan utama atau menentukan ketersediaan saat ini.

record_source: domain_monitor.urlscan
uuid: 01a154d1-1581-75e1-90a0-a92e2fad9feb
report_url: https://urlscan.io/result/01a154d1-1581-75e1-90a0-a92e2fad9feb/
skor: 0
malicious: false
result_at: 2026-10-26T04:30:20Z
enriched_at: null
source_timestamps: {"urlscan_result_at":"2026-10-26 05:30:20","urlscan_enriched_at":null}
timestamp_basis: Eropa/Berlin, sebagaimana digunakan dalam laporan yang ada; cap waktu sumber dipertahankan apa adanya

VirusTotal

0 / 92 deteksi mesin · ringkasan yang tersimpan

2026-10-25 17:32 UTC

Buka laporan

VirusTotalCatatan asli sumberTeramati: 2026-10-20 01:16:57 UTC10 kolom

Teramati: 2026-10-20T01:16:57Z · Diambil: 2026-10-25T17:32:33Z

Jumlah hasil vendor

Waktu habis: 0
Tidak berbahaya: 55
Berbahaya: 0
Mencurigakan: 0
Tidak terdeteksi: 37

Skor reputasi

Registrar

Tucows Domains Inc.

Dibuat

2025-02-22 18:18:42 UTC

Berlaku hingga

2027-02-22 18:18:42 UTC

Diperbarui

2026-01-30 17:18:10 UTC

Pertama terlihat

2026-10-20 01:16:57 UTC

Catatan DNS

TTL, detik
300
Jenis
TXT
Nilai
v=spf1 a -all
TTL, detik
300
Jenis
SOA
Alamat penanggung jawab
abuse.confluence-networks.com
Nilai
ns1.cnomy.com
TTL, detik
300
Jenis
MX
Nilai
~
Prioritas
300
TTL, detik
900
Jenis
NS
Nilai
ns2.cnomy.com
TTL, detik
300
Jenis
CNAME
Nilai
9145.searchmagnified.com
TTL, detik
900
Jenis
NS
Nilai
ns1.cnomy.com
TTL, detik
822
Jenis
A
Nilai
208.91.196.145

Waktu pengambilan catatan DNS

2026-10-20 01:30:38 UTC

Catatan pendaftaran

Registrar: Tucows Domains Inc.
ID IANA registrar: 69
URL registrar: http://www.tucows.com
Terdaftar: 2025-02-22 18:18:42 UTC
Diperbarui: 2026-01-30 17:18:10 UTC
Berlaku hingga: 2027-02-22 18:18:42 UTC
Status: ok
Server nama: ns15.abovedomains.com
ns16.abovedomains.com
DNSSEC: unsigned

Kolom asli sumber · JSON

Jumlah hasil vendor	{ "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }
Reputasi	0
Registrar	Tucows Domains Inc.
Dibuat	2025-02-22T18:18:42Z
Berlaku hingga	2027-02-22T18:18:42Z
Diperbarui	2026-01-30T17:18:10Z
Pertama terlihat	2026-10-20T01:16:57Z
Catatan DNS	[ { "ttl": 300, "type": "TXT", "value": "v=spf1 a -all" }, { "ttl": 300, "type": "SOA", "rname": "abuse.confluence-networks.com", "value": "ns1.cnomy.com" }, { "ttl": 300, "type": "MX", "value": "~", "priority": 300 }, { "ttl": 900, "type": "NS", "value": "ns2.cnomy.com" }, { "ttl": 300, "type": "CNAME", "value": "9145.searchmagnified.com" }, { "ttl": 900, "type": "NS", "value": "ns1.cnomy.com" }, { "ttl": 822, "type": "A", "value": "208.91.196.145" } ]
Dns at	2026-10-20T01:30:38Z
Catatan pendaftaran	{ "registrar": "Tucows Domains Inc.", "registrar_iana_id": "69", "registrar_url": "http://www.tucows.com", "created": "2025-02-22T18:18:42Z", "updated": "2026-01-30T17:18:10Z", "expires": "2027-02-22T18:18:42Z", "status": [ "ok" ], "nameservers": [ "ns15.abovedomains.com", "ns16.abovedomains.com" ], "dnssec": "unsigned" }

Catatan sumber terpisah · 0 malicious + 0 suspicious / 92 · 2026-10-20 01:16:57 UTC

Ringkasan di atas dan catatan penyedia ini dikumpulkan pada waktu yang berbeda. Keduanya tetap tersedia; klasifikasi berbahaya dan mencurigakan ditampilkan secara terpisah.

record_source: collected_observations.vt
analysis_at: 2026-10-20T01:16:57Z
fetched_at: 2026-10-25T17:32:33Z
stats: {"timeout":0,"harmless":55,"malicious":0,"suspicious":0,"undetected":37}

OTX

tidak ada referensi komunitas

2026-10-25 17:33 UTC

Buka laporan