MALICIOUS — CRITICAL
angrym[.]com
angrym.com was registered on May 17 2026 through Cloud Yuqu LLC.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- 可用性
- 最后已知的活跃状态 · HTTP 301
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
angrym.com — 最后已知的活跃状态 (HTTP 301). 证据摘要: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 76/100. 注册商: Cloud Yuqu.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Evidence Analysis
angrym.com was registered on May 17 2026 through Cloud Yuqu LLC. The domain is hosted on UltaHost Inc infrastructure in Germany and resolves to IP address 159.100.6.19. All four authoritative name servers (ns1‑ns4.ultahost.com) are operated by the same provider, indicating a single‑host deployment typical for low‑cost web services. The site presents a page titled “Marketz Group | Consultores | Marketing | Representantes Comerciales y Ventas” and returns an HTTP 301 redirect, suggesting the original URL is being forwarded to another location. The TLS certificate is issued by Let’s Encrypt (R13), which provides domain‑validated encryption but does not convey any reputation. The MX record points to the domain itself (priority 0), a configuration often seen in malicious mail setups. Reputation data reinforces a high‑risk assessment. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. VirusTotal reports that 1 of 95 security vendors flagged the domain, and AlienVault OTX includes it in a single threat pulse. The domain appears on one public blocklist and is actively blocked by PhishDestroy, confirming that at least one anti‑phishing service has identified malicious activity. Analysis indicates that angrym.com is currently active and likely being used for generic phishing campaigns, given the combination of a recent registration, low‑cost hosting, a generic marketing landing page, and multiple threat intelligence indicators. Uncertainty remains regarding the specific phishing kits or targeted brands, as no payload or credential‑stealing URLs have been observed. Defenders should block the domain at perimeter filters, monitor DNS queries for the associated IP and name servers, and enforce email security controls such as DMARC and SPF for the domain. Continuous monitoring of threat feeds for additional indicators is advised.
数据覆盖范围12 recorded checks
威胁响应 Pipeline
公共封禁名单状态
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
证据与外部报告Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。