https://klopick-gay-nenatural.work/HTTP 403
40 B
60 B
0 internal · 0 external
Content-Type: text/plain; charset=utf-8All stored response-header names (5)
Content-TypeContent-Lengthx-edge-actionDatealt-svc
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@omegatech.sc.
The latest stored availability evidence still shows the domain reachable; 20 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
klopick-gay-nenatural.work — 未検証. 証拠の概要: VirusTotal 5/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar); URLQuery 1 alert; Spamhaus DBL_SPAM; PhishDestroy score 78/100. レジストラ: PDR.
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
klopick-gay-nenatural.work was registered on 15 June 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IPv4 address 158.94.211.169 and uses the authoritative name servers a.dnspod.com, b.dnspod.com and c.dnspod.com. The domain is currently active and has been listed by the PhishDestroy blocklist; it also appears on a single additional security blocklist. VirusTotal has recorded 91 vendor scans, none of which returned a detection at the time of analysis.
The absence of detections does not constitute evidence of benign behavior, and the lack of publicly available page metadata means the phishing payload, target brand, or credential‑capture technique remain unverified. Infrastructure analysis shows no publicly disclosed ASN or geographic attribution beyond the IP address, and no SSL certificate details were observed. No HTTP response codes or Safe Browsing verdicts are presently available.
Because the domain is newly created, actively resolves, and is already referenced by a known anti‑phishing feed, it should be treated as a high‑confidence indicator of compromise. Defensive recommendations include adding the domain and its resolving IP to outbound and inbound deny lists, monitoring DNS queries for the associated name servers, and performing periodic re‑scans with VirusTotal or similar services to capture any future detections. Organizations should also consider alerting users about potential credential‑stealing attempts that may reference this domain, even though the specific campaign content has not yet been published.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | klopick-gay-nenatural.work |
malicious | Sinkholed |
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
https://klopick-gay-nenatural.work/Content-Type: text/plain; charset=utf-8Content-TypeContent-Lengthx-edge-actionDatealt-svcPD-20260731-3CB06E Recipient: abuse@omegatech.sc アカウント資格情報、個人情報、支払い情報を入力した場合、またはこのドメインからファイルをダウンロードした場合は、すぐに対処してください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャン不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポート最近のフィッシングレポートと観察された可用性の変化
監視リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください