letsvpn-ai.com 
tronoscan.org 
dfximpact.live 
ethguanfangweiyilianjie.com 
域安全和威胁情报
craxsrat[.]win
“没ææ¾å°ç«ç¹”
威胁判定
关键
100/100 证据评分
可用性
最后已知的活跃状态
最新存储的可达性观察
风险信号
病毒检测总数：14/91
最后已知的活跃状态
已存储的观测记录
观测到的标题差异
向扫描器显示的标题Redirecting...
向访客显示的标题没ææ¾å°ç«ç¹
证据摘要
重要
This report analyzes the domain craxsrat.win, which is associated with a remote access trojan (RAT) known as CraxsRAT. The domain's page title, "没ææ¾å°ç«ç¹" (translated as "site not found"), indicates no active web content, but the domain registration and threat intelligence suggest it is a command-and-control or distribution infrastructure. The primary threat is enabling unauthorized remote access to infected systems, leading to data theft, surveillance, and potential ransomware deployment.
Technical evidence shows the domain has a VirusTotal detection rate of 8 out of 95 vendors, with flagged alerts from ADMINUSLabs, alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, and Fortinet. It is listed on 1 blocklist. The domain was registered on 2026-02-21 via registrar Gname.com Pte. Ltd., hosted on IP address 38.76.202.197 (IN) under JOY SERVICES. No SSL certificate is present. Nameservers are b9.share-dns.net and a9.share-dns.com. GridinSoft trust score is 0 out of 100, and the domain risk score is 63.
Currently, craxsrat.win is offline and inaccessible. The risk level is elevated, as indicated by the domain risk score of 63 and the zero trust score. Despite being down, the domain remains a potential threat if reactivated, given its association with CraxsRAT infrastructure.
VirusTotal
14 det.
TLS 证书
38.76.202.197
年龄
6 mo
观测状态
最后已知的活跃状态 HTTP 302
DestroyList
已列入
Data Coverage
VirusTotal
14 / 91
URLQuery
未检查
PhishStats
未检查
OTX
no community references
CF雷达
no data
URLScan capture
not submitted
URLScan verdict
无可用判定
DNS 阻断
未检查
TLS
valid certificate, 3608d
WHOIS
6 mo old
屏幕截图
未捕获
重定向链
未探查
威胁响应 Pipeline
发现
Checks
Reports
可用性
5/7
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
域名情报
域名
服务器 / ASN
nginx · AS401701 cognetcloud INC
IP 信誉
IP abuse confidence 0/100 0 reports checked 2026年7月15日
注册商
Gname
(SG)
(SG)
注册信息创建 2026年2月21日 (172d)
HTTP 状态码302 Found (Temporary)
技术详情DNS、TLS 名称和时间戳
首次发现2026年2月26日
域名服务器a9.share-dns.com
TLS 指纹
TLS 观测自 2026年7月2日 起有效扫描于 2026年7月9日
TLS 主体备用名称911kjdx.cnlocalhostqydade.top
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
14 / 91 安全供应商标记了该域
View on VT
Last analyzed Previous stored snapshot: 8 detections
ADMINUSLabs
alphaMountain.ai
BitDefender
Chong Lua Dao
CRDF
CyRadar
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Lionic
SOCRadar
Sophos
VIPRE
相关基础设施与报告
Content matches 4
同一注册商: Gname 6
最近的威胁报告 4
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控
