VirusTotal
5 / 90
“Jackson Template”
brightonbitcore.digital — Контент недоступен. Олицетворение бренда: Google; Тип мошенничества: Impersonation. Сводка доказательств: VirusTotal 5/90 (alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); Spamhaus DBL_PHISH; cloaking observed; PhishDestroy score 86/100. Регистратор: Hosting Concepts.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
The domain brightonbitcore.digital was registered on July 22, 2025 through Hosting Concepts B.V. d/b/a Registrar.eu and is hosted on a single authoritative nameserver. It resolves to IPv4 address 45.9.148.217, which is announced by AS49447 (Nice IT Services Group Inc.) and geolocated to the Netherlands. The site presents a valid‑looking TLS certificate issued by Google Trust Services with the WE1 intermediate, providing a credible HTTPS appearance. An HTTP request returns status code 200 and the page title reported is “Jackson Template,” but the page content has not been disclosed in the current intelligence.
Infrastructure analysis indicates the domain is fronted by Cloudflare and negotiates HTTP/3, suggesting CDN use for traffic concealment. The domain is listed on one security blocklist and has been flagged by PhishDestroy as still active. VirusTotal scans show 2 of 95 security vendors flagging the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high‑risk classification.
The domain is explicitly categorized as a brand‑impersonation of Google. No further details about credential‑harvesting pages or payloads are available, leaving the exact malicious behavior uncertain.
Defenders should block or sinkhole DNS queries for brightonbitcore.digital and any traffic to 45.9.148.217, add the domain to URL filtering and email security policies, and monitor for new domains registered with the same registrar or hosting provider. Ongoing re‑scanning with multi‑engine services is recommended to capture any evolving malicious components.
Страница выдавала один ответ посетителю, действующему как браузер, и другой — поисковому роботу или сканеру безопасности. Маскировка используется исключительно для того, чтобы не допустить рецензентов к реальной целевой странице.
content_divergenceПримечание к сканированию: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='brightonbitcore.digital', port=80): Max retries exceeded with url: / (Caused by NewConnect
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
1Location describes the IP network.
b4962f140d9dedb9595c2367603295a74627c9b2c77634e7912ef2fb9c466995Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of brightonbitcore.digital · checked Mar 2, 2026
14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Сообщил 1 участник сообщества; впервые замечено 02.08.2025
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Template-based draft · optional AI wording assistance requires separate consent
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасДобавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьНедавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьОтслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание