allegrolokalnie.oferta-574168.cfd
allegrolokalnie.oferta-574168.cfd — 확인되지 않음. 브랜드 사칭: Unknown. 증거 요약: VirusTotal 6/90 (CRDF, ESET, G-Data, LevelBlue, SOCRadar); URLQuery 2 det.; URLScan capture; 2 external blocklist matches (OpenPhish, Phishunt); PhishDestroy score 90/100. 등록기관: Spaceship.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
증거 요약
allegrolokalnie.oferta-574168.cfd is a subdomain of oferta-574168.cfd. PhishDestroy first observed the hostname on Sep 23, 2026. Stored content metadata identifies Unknown as the apparent target. Current evidence score: 90/100 (critical).
Positive findings are stored from 4 sources: VirusTotal, OpenPhish, Phishunt, and URLQuery. VirusTotal recorded 6 detections among 90 engines: CRDF, ESET, G-Data, LevelBlue, SOCRadar, Sophos on Sep 23, 2026 at 10:27 UTC. OpenPhish and Phishunt listed the hostname in the separate external-blocklist snapshot on Sep 23, 2026 at 10:20 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: Google Safe Browsing returned no flag on Sep 23, 2026 at 10:28 UTC. URLScan captured the page on Sep 23, 2026 at 08:23 UTC.
The collector marked the hostname reachable on Sep 23, 2026 at 08:23 UTC, but did not retain the HTTP response code. Registration records for the registrable domain oferta-574168.cfd list Spaceship, Inc. as the registrar and Sep 21, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 130.12.181.25 (AS197769 VPS Dedicated LLC). The recorded endpoint location is Thyrnau, DE. DOM analysis on Sep 23, 2026 at 10:20 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 3 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance.
The content indicators and 4 positive source findings support the current Unknown impersonation and phishing classification. The target field identifies Unknown, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.
Forensic History & Detection Timeline
-
Threat First Observed Sep 23, 2026 · 10:13 UTCDomain ingestion complete. Initial state is marked as alive pointing to IP
130.12.181.25.
위협 대응 Pipeline
공개 차단 목록 상태
탐지 회피 분석
클로킹 및 트래픽 분산 점검
아직 스캔되지 않았습니다
크롤러와 브라우저 간의 차이는 아직 보고된 바가 없습니다.
이 호스트에 대해 저장된 크롤러 대 브라우저 관측 데이터와, 케이타로 스타일의 트래픽 분배 시스템을 위한 실시간 지문 확인 정보.
- 저장된 은신 플래그
- 아직 스캔되지 않았습니다
저장된 캡처 · 3 sources
도메인 인텔리전스
기술 세부 정보DNS, SSL SAN, 타임스탬프
SHORTDOT 영역 · 공개 증거
.cfd
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Registration: oferta-574168.cfd
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For the registrable domain oferta-574168.cfd behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
증거 및 외부 보고서
PD-20260923-F4A819 Recipient: abuse@spaceship.com Abuse notice text as sent to the provider
Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.