appdkbne[.]ddns[.]net
“Apache2 Ubuntu Default Page: It works”
appdkbne.ddns.net — 未验证. 证据摘要: VirusTotal 13/93 (ADMINUSLabs, Criminal IP, alphaMountain.ai, CyRadar, Emsisoft); URLQuery 5 alerts; Google Safe Browsing flagged; PhishDestroy score 98/100. 注册商: DynDNS.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, appdkbne.ddns.net, is identified as a high-risk credential phishing endpoint. Analysis indicates it operates as a generic phishing site, likely designed to harvest user login credentials through deceptive login portals. No specific brand impersonation or drainer kit affiliation has been confirmed, though the use of dynamic DNS suggests rapid deployment and evasion tactics typical of credential theft campaigns. Technical indicators reveal the domain was registered through a dynamic DNS provider on February 21, 2026, with no historical resolution data available. VirusTotal detection metrics show 13 out of 95 security vendors flagging the domain as malicious. Google Safe Browsing classifies it explicitly as phishing, and the domain appears on one security blocklist. Infrastructure analysis reveals no associated IP addresses or hosting patterns, likely due to its recent creation and offline status. The domain is currently offline, reducing immediate exposure risk. However, the infrastructure remains registered and could be reactivated. Response actions include continued monitoring for re-emergence and validation of blocklist coverage. Organizations should ensure endpoint protection and email filtering systems are configured to block dynamic DNS-based phishing domains, particularly those with recent creation dates and minimal detection history. Users are advised to verify domain legitimacy before entering credentials, especially on sites using dynamic DNS services.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| PhishTank | appdkbne.ddns.net/dkb/login.php |
phishing | Phishing - Other |
| Quad9 DNS | appdkbne.ddns.net |
malicious | Sinkholed |
| DNS4EU | appdkbne.ddns.net |
malicious | Sinkholed |
| Hagezi Threat Feed | appdkbne.ddns.net |
malicious | Sinkholed |
| Cloudflare DNS | appdkbne.ddns.net |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。