Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@microsoft.com.
The latest stored availability evidence still shows the domain reachable; 4 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
drpbxlgn92q[.]alert-notifications[.]app
“Problem loading page”
drpbxlgn92q.alert-notifications.app — 未验证. 品牌冒充:Apple; 诈骗类型:Impersonation. 证据摘要: VirusTotal 20/90 (Criminal IP, alphaMountain.ai, AlphaSOC, BitDefender, CyRadar); URLQuery 4 alerts; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 98/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
drpbxlgn92q.alert-notifications.app is a subdomain of alert-notifications.app. PhishDestroy first observed the hostname on Sep 4, 2026. Stored content metadata identifies Apple as the apparent target. The captured page title is “Problem loading page”. Page analysis recorded additional brand references to Dropbox and Google. Stored page analysis classifies the content as impersonation. Current evidence score: 98/100 (critical).
Positive findings are stored from 4 sources: VirusTotal, Google Safe Browsing, Cloudflare Radar, and URLQuery. VirusTotal recorded 20 detections among 90 engines: Criminal IP, alphaMountain.ai, AlphaSOC, BitDefender, CyRadar, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safe Browsing, Gridinsoft, Kaspersky, Lionic, Netcraft, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Sep 6, 2026 at 02:39 UTC. Google Safe Browsing flagged the domain: Social Engineering on Sep 6, 2026 at 02:40 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLQuery recorded 4 threat-system alerts on Sep 4, 2026 at 19:17 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Sep 8, 2026 at 22:20 UTC. URLScan completed without a malicious verdict (score 0) on Sep 4, 2026 at 23:08 UTC.
The collector marked the hostname reachable on Sep 8, 2026 at 22:16 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 172.174.53.244 on AS8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US). The recorded endpoint location is Dulles Town Center, US. The stored server header is Microsoft-IIS/10.0. DOM analysis on Sep 4, 2026 at 22:22 UTC returned 98/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 14, 2026; checked Sep 4, 2026 at 22:02 UTC.
The content indicators and 4 positive source findings support the current Apple-themed impersonation classification.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | drpbxlgn92q.alert-notifications.app |
malicious | Sinkholed |
| OpenDNS | drpbxlgn92q.alert-notifications.app |
phishing | Phishing Block |
| DNS4EU | drpbxlgn92q.alert-notifications.app |
malicious | Sinkholed |
| Quad9 DNS | drpbxlgn92q.alert-notifications.app |
malicious | Sinkholed |
Detection timeline
-
VirusTotal
stage4.timeline.transition (+1) (Added: SOCRadar)
-
Google Safe Browsing
stage4.timeline.transition
-
stage4.timeline.first_seen
stage4.timeline.first_value
威胁响应 Pipeline
公共封禁名单状态
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260904-D1394B- Captured page title
- Problem loading page
Blocklist coverage
stage4.blocklist.scope_plural
所用技术 · 3 identified
ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.
www.asp.net 置信度 100%Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.
www.iis.net 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of drpbxlgn92q.alert-notifications.app · checked Sep 4, 2026
所用技术
stage4.technology.identified_plural
证据与外部报告
PD-20260904-D1394B Recipient: abuse@microsoft.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。