medical-kolbe[.]de
“Home - Physio Kolbe Medicaltraining”
medical-kolbe.de — Não verificado. Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 12/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, Forcepoint ThreatSeeker); URLQuery 3 alerts; PhishDestroy score 91/100.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain medical-kolbe.de indicates active credential phishing activity with a high-risk classification. The domain was registered on April 15, 2026, and resolves to IP address 92.205.170.212, hosted by Host Europe GmbH in Germany. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Yoast SEO, Apache HTTP Server, jQuery Migrate, and jQuery, suggesting a standard but potentially vulnerable web stack commonly exploited for phishing. The page title, 'Home - Physio Kolbe Medicaltraining,' implies a focus on medical or physiotherapy services, which may be used to deceive users in the healthcare sector. The domain is flagged by six of ninety-four security vendors on VirusTotal, and it appears on one security blocklist. A Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100 further corroborate its malicious classification. The domain is actively blocked by PhishDestroy, a phishing-specific detection system, and is categorized as a credential phishing threat. SSL certification is provided by Let's Encrypt (R12), a common but not inherently trustworthy issuer in phishing campaigns. Nameservers ns71.domaincontrol.com and ns72.domaincontrol.com are associated with the domain registrar, which is consistent with legitimate and malicious domains alike. The HTTP status code 200 confirms the site is currently accessible, though this does not validate its legitimacy. Defenders should treat this domain as hostile. Blocking the domain and its resolving IP (92.205.170.212) at the perimeter is recommended. Further investigation into associated email addresses, WHOIS details, and hosting infrastructure may reveal additional indicators of compromise. The exact content of the phishing page remains unanalyzed, but the combination of low trust scores, vendor detections, and phishing-specific blocking justifies immediate containment actions.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | medical-kolbe.de |
malicious | Sinkholed |
| DNS4EU | medical-kolbe.de |
malicious | Sinkholed |
| Quad9 DNS | medical-kolbe.de |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 7 identified
Open-source CMS powering over 40% of websites worldwide.
Open-source relational database management system.
Server-side scripting language designed for web development.
Most widely used open-source HTTP server software.
Plugin to detect and restore deprecated jQuery features.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Análise do VirusTotal
Evidências arquivadas
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of medical-kolbe.de · checked Apr 15, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo