Cloudflare Family Cloudflare Security Controld Adblock Controld Family Quad9 Secure
Cloudflare Radar Verdict악성
Malware Malware Security threats
SSL CertificateInvalid
SSL certificate is invalid or expired. Issuer:
증거 요약
심각
VirusTotal
13/89
OTX
22 community refs
URLScan
Stored capture
The domain gogoschip.online has been identified as a fake login phishing site designed to harvest user credentials. Analysis indicates this infrastructure is currently offline, though it previously operated as an active credential theft endpoint. No specific brand impersonation has been confirmed, but the site mimics generic login portals to deceive visitors into submitting sensitive information. Infrastructure analysis reveals the domain was created on February 03, 2026, and registered through HOSTINGER operations, UAB. It resolved to the IP address 45.61.129.29 and has been flagged by 18 of 95 security vendors on VirusTotal. Additional threat intelligence sources show the domain appears in 6 AlienVault OTX pulses and is listed on 2 security blocklists. The Gridinsoft trust score for this domain is 0 out of 100, further confirming its malicious classification. Detection systems such as PhishDestroy and Maltrail have actively blocked access to this domain. At present, gogoschip.online is offline, reducing immediate exposure risk. However, the infrastructure may resurface under a different domain or IP configuration. Users who accessed this site should immediately reset credentials for any accounts entered, enable multi-factor authentication where available, and monitor financial or sensitive accounts for unauthorized activity. Organizations should update security controls to block the domain and associated IP address, while reviewing logs for prior connections to this infrastructure. Proactive monitoring of newly registered domains with similar characteristics is recommended to detect potential resurgence.
탐지 회피 분석
클로킹 및 트래픽 분산 점검
관찰되지 않음저장된 스캔 결과에서는 클로킹 현상이 관찰되지 않았습니다.
이 호스트에 대해 저장된 크롤러 대 브라우저 관측 데이터와, 케이타로 스타일의 트래픽 분배 시스템을 위한 실시간 지문 확인 정보.
저장된 은신 플래그
관찰되지 않음
클로킹 점수
0/6
마지막 은폐 스캔
스캐너 메모:timeout: raw=timeout; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='gogoschip.online', port=80): Max retries exceeded with url: / (Caused by ConnectTimeoutErr
TDS 지문 인식 실시간 확인
이 패널이 열려 있을 때 PhishDestroy 스캐너에서 실행되는 7개의 케이타로 지문과 크롤러 대 브라우저 비교 결과.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest HTTP observation알 수 없음Probe Inconclusive20%2026-10-11 10:14:50 UTC
RDAP registration알 수 없음
Observed timelinelast reachable: 2026-09-15 22:17:58 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Last analyzed Previous stored snapshot: 12 detections
alphaMountain.ai
BitDefender
CyRadar
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
카스퍼스키
Lionic
SOCRadar
소포스
VIPRE
Forensic History & Detection Timeline
ThreatLifecycleTelemetry
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
VirusTotal Detections Update2026-06-26 00:36:19 UTC
VirusTotal scanner detections updated from 16 to 18. Added scanner alerts: ESET, Seclookup.
위협 대응 Pipeline
발견
Analysis
Monitoring
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups+
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels+
Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
(LT)
