asjksakjl32[.]xyz
“DHL - Tracking”
asjksakjl32.xyz — 内容不可用 (HTTP 502). 品牌冒充:Dhl. 证据摘要: VirusTotal 20/93 (Criminal IP, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 4 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 95/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain asjksakjl32.xyz was configured as a phishing site impersonating the DHL brand, using a page title of "DHL - Tracking" to deceive users into believing they were accessing a legitimate parcel tracking service. This site posed a credential theft and data harvesting threat, likely designed to collect sensitive personal or financial information from victims expecting tracking updates.
Technical analysis confirms the site was flagged by 20 out of 95 VirusTotal vendors, including Criminal IP, alphaMountain.ai, BitDefender, CRDF, and CyRadar. The domain was created on 2026-02-21 and hosted on IP 104.168.101.24, located in the United States under AS36352 HostPapa. SSL certificate R12 was issued, and the domain was listed on 2 blocklists.
The site is currently offline with a DOM risk score of 83, indicating a high-risk threat. Its recent creation date and high detection rate confirm its malicious intent, though its offline status prevents active exploitation.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | asjksakjl32.xyz |
malicious | Sinkholed |
| DNS0 Zero | asjksakjl32.xyz |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | asjksakjl32.xyz |
malicious | Sinkholed |
| DNS4EU | asjksakjl32.xyz |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。