diffuculttan[.]xyz
Verifica phishing e sicurezza per diffuculttan.xyz
“This website domain has been seized by Microsoft”
diffuculttan.xyz — Ultimo attivo conosciuto (HTTP 302). Simulazione del marchio: Microsoft; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 22/91 (ADMINUSLabs, alphaMountain.ai, Antiy-AVL, BitDefender, Certego); URLQuery 6 alerts; 1 external blocklist match (CryptoFirewall); CF Radar malicious; PhishDestroy score 100/100. Registrar: MarkMonitor.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Riepilogo delle prove
PhishDestroy first observed diffuculttan.xyz on May 5, 2026. Stored content metadata identifies Microsoft as the apparent target. The captured page title is “This website domain has been seized by Microsoft”. Evidence score: 100/100 (critical).
5 independent sources recorded positive findings: VirusTotal, CryptoFirewall, DNS security resolvers, Cloudflare Radar, and URLQuery. VirusTotal recorded 22 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, Antiy-AVL, BitDefender, Certego, Chong Lua Dao, CRDF, CyRadar on Aug 9, 2026 at 02:18 UTC. CryptoFirewall listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 06:20 UTC. DNS security checks returned 7 blocking results across 14 tested policies: Adguard Default, Adguard Family, Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories command and control & botnet, malware, and security threats; its verdict timestamp was not retained.
HTTP 302 was recorded on Aug 9, 2026 at 01:58 UTC. Registration records for the domain list MarkMonitor, Inc. as the registrar and Dec 6, 2024 as the creation date. At collection time, the hostname resolved to 40.91.108.115 on AS8075 (Microsoft Corporation). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
Copertura dei dati13 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | www.noticeofpleadings.net |
malicious | Sinkholed |
| Cloudflare DNS | diffuculttan.xyz |
malicious | Sinkholed |
| Hagezi Threat Feed | diffuculttan.xyz |
malicious | Sinkholed |
| DigiCert UltraDNS | diffuculttan.xyz |
malicious | Sinkholed |
| DNS4EU | diffuculttan.xyz |
malicious | Sinkholed |
| Quad9 DNS | diffuculttan.xyz |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.