域安全和威胁情报
di-bat[.]com
“Trade Smarter with Desjardins Online Brokerage | Disnat”
威胁判定
关键
95/100 证据评分
可用性
内容不可用
最新观察中的内容不可用
风险信号
病毒检测总数：15/93
URLQuery threat systems: 1 alert
证据摘要
重要
Analysis of di-bat.com indicates a phishing domain targeting Desjardins Online Brokerage, as evidenced by the page title 'Trade Smarter with Desjardins Online Brokerage | Disnat'. The domain was registered on February 21, 2026, through Hello Internet Corp and is currently offline. Infrastructure analysis reveals the domain resolves to IP address 124.198.131.119, hosted on AS210558 (1337 Services GmbH) in the United States, a network frequently associated with malicious activity. The domain lacks an SSL certificate, increasing the risk of credential interception.
Nameservers are configured under Google Cloud (ns-cloud-e1.googledomains.com and similar), a common but not exclusive setup for both legitimate and malicious domains. Detection data shows 15 of 93 security vendors on VirusTotal flagged di-bat.com as malicious, and it appears on one security blocklist, corroborating its classification as a phishing threat. The domain's Gridinsoft trust score of 0/100 further supports its elevated risk profile.
Defenders should treat this domain as compromised and block it at the network level. While the exact phishing kit or payload is not yet analysed, the combination of a targeted brand, recent registration, lack of encryption, and detection by multiple security vendors provides sufficient evidence to classify di-bat.com as a confirmed phishing site. No further details about the attack chain or victim demographics are available at this time.
已提交证据快照
- 已发送
- 台账记录
- 1
- 案件 ID
PD-20260207-D1E70B- PDF 文件
- PDF 证据
完整证据文本
Policy Violations:
Acceptable Use Policy (AUP): The domain di-bat.com is engaged in phishing activities, which constitutes a direct violation of your AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The use of this domain for fraudulent purposes is a clear breach of your TOS, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which includes phishing schemes.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, including phishing.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading information, which is often a component of phishing attacks.
Regulatory Note: Failure to take appropriate action against this domain may expose your organization to liability under applicable laws and regulations. Immediate compliance is advised to mitigate potential legal repercussions.
Acceptable Use Policy (AUP): The domain di-bat.com is engaged in phishing activities, which constitutes a direct violation of your AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The use of this domain for fraudulent purposes is a clear breach of your TOS, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which includes phishing schemes.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, including phishing.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading information, which is often a component of phishing attacks.
Regulatory Note: Failure to take appropriate action against this domain may expose your organization to liability under applicable laws and regulations. Immediate compliance is advised to mitigate potential legal repercussions.
VirusTotal
15 det.
URLQuery
1 threat alert
观测状态
内容不可用 HTTP 502
DestroyList
已列入
Reports Sent
1
Data Coverage
VirusTotal
15 / 93
URLQuery
1 threat-system alert
PhishStats
checked — no match recorded
OTX
no community references
CF雷达
scan completed
URLScan capture
存储的报告
URLScan verdict
分析完成
DNS 阻断
未检查
TLS
无证书数据
WHOIS
not parsed
屏幕截图
3 captures · 3 sources
重定向链
未探查
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | di-bat.com |
phishing | Phishing Block |
威胁响应 Pipeline
发现
Checks
Reports
可用性
12/12
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
检测时间线
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
已保存的截图
域名情报
域名
URLScan Verdict
分析完成
score 0 report ↗
服务器 / ASN
nginx/1.24.0 (Ubuntu) · AS210558 1337 Services GmbH
IP 信誉
IP abuse confidence 17/100 6 reports checked 2026年6月16日
注册商
Hello Internet
(US)
(US)
IP 地址
124.198.131.119
注册信息Expires 2027年2月5日
HTTP 状态码502 Error
技术详情DNS、TLS 名称和时间戳
首次发现2026年2月7日
DOM Analysisanalyzed 2026年4月23日DOM analysis score 35/100
Submitted URLhttp://di-bat.com/
域名服务器ns-cloud-e1.googledomains.comns-cloud-e2.googledomains.comns-cloud-e3.googledomains.comns-cloud-e4.googledomains.com
TLS 观测扫描于 2026年6月16日
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
15 / 93 安全供应商标记了该域
View on VT
Last analyzed
ADMINUSLabs
alphaMountain.ai
CRDF
CyRadar
Ermes
ESET
Forcepoint ThreatSeeker
Fortinet
Gridinsoft
Lionic
Seclookup
SOCRadar
Sophos
VIPRE
Webroot
相关基础设施与报告
Content matches 4
Shared IP 124.198.131.119 4
该源 IP 托管多个网络钓鱼域 - 基础设施可以在各个活动之间共享。
同一注册商: Hello Internet 6
最近的威胁报告 4
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控
