도메인 보안 및 위협 인텔리전스
energylandia-zator.eu
“TVN24”
위협 평결
심각
98/100 증거 점수
가용성
확인되지 않음
현재 연결 가능성이 확인되지 않았습니다.
위험 신호
VirusTotal 탐지: 16/89
Spamhaus DBL: DBL_PHISH
브랜드 사칭: Unknown
Actions
API
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@korbank.pl.
The latest stored availability evidence still shows the domain reachable; 13 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
13 days
Reports sent
1
Latest case ID
PD-20260906-ED0D28
Current status
Observed active at latest stored check
보고서 요약
energylandia-zator.eu — 확인되지 않음. 브랜드 사칭: Unknown; 사기 유형: Impersonation. 증거 요약: VirusTotal 16/89 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 98/100. 등록기관: LH.pl Sp. z o.o.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
증거 요약
중요
PhishDestroy first observed energylandia-zator.eu on Sep 6, 2026. Stored content metadata identifies Unknown as the apparent target. The captured page title is “TVN24”. Stored page analysis classifies the content as impersonation. Campaign clustering links the hostname to the Unknown kit. Current evidence score: 98/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 16 detections among 89 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Sep 18, 2026 at 02:09 UTC. Spamhaus DBL: DBL_PHISH on Sep 6, 2026 at 22:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the malware category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 5 community pulse references (not vendor detections) on Sep 10, 2026 at 22:48 UTC. The separate external-blocklist snapshot contained no matches on Sep 20, 2026 at 14:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Sep 19, 2026 at 16:00 UTC. URLScan completed without a malicious verdict (score 0) on Sep 6, 2026 at 23:08 UTC.
The collector marked the hostname reachable on Sep 15, 2026 at 22:17 UTC, but did not retain the HTTP response code. Registration records for the domain list LH.pl Sp. z o.o. as the registrar. At collection time, the hostname resolved to 212.127.78.242 on AS35179 (Korbank S. A.). The recorded endpoint location is Wroclaw, PL. The stored server header is nginx. DOM analysis on Sep 6, 2026 at 22:22 UTC returned 98/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Dec 4, 2026; checked Sep 6, 2026 at 22:02 UTC.
The content indicators and 3 positive source findings support the current Unknown-themed impersonation classification.
VirusTotal
16 det.
OTX references
CF 레이더
악성
URLScan
TLS 인증서
Let's Encrypt
관측 상태
확인되지 않음
DestroyList
등재됨
Reports Sent
1
데이터 적용 범위
VirusTotal
16 / 89
URLQuery
source data unavailable
OTX
5 community references
CF 레이더
provider verdict: malicious
URLScan capture
저장된 보고서
URLScan verdict
분석 완료
TLS
valid certificate, 89d
WHOIS
not parsed
스크린샷
2 captures · 2 sources
네트워크 보안 인텔리전스
Forensic History & Detection Timeline
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
-
VirusTotal Detections Update Sep 8, 2026 · 12:19 UTCVirusTotal scanner detections updated from 1 to 16. Added scanner alerts: ADMINUSLabs, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Seclookup, Sophos, VIPRE, Webroot, alphaMountain.ai.
-
VirusTotal Detections Update Sep 8, 2026 · 11:39 UTCVirusTotal scanner detections updated from 0 to 1. Added scanner alerts: SOCRadar.
-
VirusTotal Detections Update Sep 8, 2026 · 01:39 UTCVirusTotal scanner detections updated from 1 to 0. Resolved alerts: SOCRadar.
-
Threat First Observed Sep 6, 2026 · 21:37 UTCDomain ingestion complete. Initial state is marked as alive pointing to IP
212.127.78.242.
위협 대응 Pipeline
발견
Checks
Reports
가용성
16/17
Sent Report Recorded
Stored sent-report record for registrar LH.pl Sp. z o.o., hosting provider, 1 abuse contact
abuse@korbank.pl
공개 차단 목록 상태
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
Scanner note: timeout: raw=timeout; http=0; via=http_proxy; error=HTTPConnectionPool(host='104.253.77.219', port=5641): Read timed out. (read timeout=7)
Live TDS fingerprint check
Seven Keitaro fingerprints plus a crawler-versus-browser comparison, run from the PhishDestroy scanner when this section scrolls into view.
Waiting
저장된 캡처 · 2 sources
도메인 인텔리전스
도메인
URLScan Verdict
분석 완료
score 0 report ↗
서버 / ASN
nginx · AS35179 Korbank S. A.
IP 평판
abuse score 0/100 0 reports checked 2026년 9월 6일
OTX Tags
2026-09activeall-domainsblocklistcontentcrypto도메인drainerfraudlivemonthlyphishdestroyphishingscam
등록기관
LH.pl Sp. z o.o
기술 세부 정보DNS, SSL SAN, 타임스탬프
최초 발견2026년 9월 6일
DOM Analysis
IoC Extraction
Submitted URLhttp://energylandia-zator.eu/
네임서버ns.lh.plns2.lighthosting.netvisitwww.eurid.euformoreinfo
TLS Fingerprint
TLS Observation
TLS SAN Domainswww.energylandia-zator.eu
Favicon Hash
사건 ID
기술 · 1 identified
Nginx
Web servers
Reverse proxies
Detected via Cloudflare Radar · Wappalyzer engine
이 도메인 신고하기
증거를 제출하고 다른 사람들을 보호하는 데 힘을 보태주세요
VirusTotal 분석
16 / 89 보안 공급업체가 이 도메인에 플래그를 지정했습니다.
View on VT
Last analyzed First positive detection Previous stored snapshot: 16 detections
ADMINUSLabs
alphaMountain.ai
BitDefender
CyRadar
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
카스퍼스키
Lionic
Seclookup
SOCRadar
소포스
VIPRE
Webroot
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of energylandia-zator.eu · checked Sep 6, 2026
75
Needs Work
Performance
FCP
2.9s
First Contentful Paint
LCP
2.9s
Largest Contentful Paint
CLS
0.247
Cumulative Layout Shift
TBT
5ms
Total Blocking Time
SI
4.3s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
증거 및 외부 보고서
증권 분석
제출된 증거 스냅샷
Sent: Ledger records: 1
Case ID:
PD-20260906-ED0D28 Recipient: abuse@korbank.pl
PDF notice generated Notice text archived (650 chars)
Abuse notice text as sent to the provider
Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
OSINT 및 정보
DNS 및 네트워크
SEO 및 도메인
이 사이트로 인해 영향을 받으셨나요?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
PhishDestroy listing review 법 집행 보고서가 아님
도메인 이의신청
이 도메인을 소유하고 있고 목록이 잘못되었다고 생각되면 검토를 요청하세요.
회복 사기꾼들을 조심하세요! 범죄자는 수사관, 변호사, 회복요원인 척 하면서 피해자에게 다시 연락할 수도 있습니다. 선불 비용을 지불하거나 자격 증명을 공유하지 마십시오. 회복 관련 사기에 대해 자세히 알아보기 →
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.
97개국 디렉토리
AI 지원 초안 - 사고 세부정보는 AI 제공업체에서 처리됩니다.
직접 검토하고 제출하세요.
관련 인프라 및 보고서
Infrastructure map · energylandia-zator.eu
Each spoke is one reason two domains are linked. Ring size marks VirusTotal detections; dashed nodes are already offline. Full lists below.
Content matches 1
Shared IP 212.127.78.242 2
이 원본 IP는 여러 피싱 도메인을 호스팅합니다. 인프라는 여러 캠페인에서 공유될 수 있습니다.
동일 등록기관: LH.pl Sp. z o.o 4
hr-outsourcing.pl Unknown impersonation 8
These domains also target 알 수 없음 users. View all Unknown threats →
Unknown kit 8
Part of the 알 수 없음 phishing campaign. View all campaign domains →
최근 위협 보고서 6
최근 PhishDestroy 데이터베이스에서 보고서가 추가되었습니다. 이러한 검색 링크는 공유 인프라나 소유권을 의미하지 않습니다.
nuke-lab.com 
maxinvesta.com 
veltrixdelivery.org 
globalsmartassets.org.veltrixdelivery.org 
libertycbk.com.sendriadelivery.com 