156[.]67[.]218[.]149[.]sslip[.]io
“Apple”
156.67.218.149.sslip.io — 内容不可用. 品牌冒充:Apple; 诈骗类型:Tech Support Scam. 证据摘要: VirusTotal 20/95 (alphaMountain.ai, BitDefender, Certego, CRDF, CyRadar); Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 100/100. 注册商: NameCheap.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, 156.67.218.149.sslip.io, poses a significant risk as a brand impersonation threat targeting Apple users. The site was designed to mimic legitimate Apple web properties, potentially tricking visitors into entering sensitive credentials, financial details, or personal information under false pretenses. Such impersonation campaigns often exploit brand trust to facilitate unauthorized access to accounts, financial fraud, or identity theft. The domain's page title, 'Apple,' further reinforces its deceptive intent by presenting itself as an official Apple platform. Analysis indicates that this domain was flagged by 20 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on August 15, 2015, and resolves to the IP address 156.67.218.149, hosted by AS47583 (Hostinger International Limited) in Singapore. The domain appears on two security blocklists and lacks an SSL certificate, which is atypical for legitimate brand properties. These technical indicators collectively highlight the domain's fraudulent infrastructure and intent. Users who may have visited 156.67.218.149.sslip.io should take immediate action to mitigate potential risks. First, cease all interaction with the domain and avoid entering any credentials or personal information. If any login details were submitted, change passwords for Apple accounts and any other platforms where the same credentials may have been reused. Enable multi-factor authentication where available to add an additional layer of security. Monitor financial statements and account activity for unauthorized transactions, and report any suspicious activity to the relevant financial institutions or service providers. Additionally, consider running a security scan on devices used to access the domain to detect potential malware or unauthorized access.
安全信号
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。