ghklweb[.]ru
ghklweb.ru 网络钓鱼与安全检查
“Работа сайта приостановлена”
ghklweb.ru — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 6/91 (alphaMountain.ai, Chong Lua Dao, CRDF, Forcepoint ThreatSeeker, Fortinet); 4 external blocklist matches; PhishDestroy score 92/100. 注册商: REGRU-RU.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Based on the page title "Работа сайта приостановлена" (Site operation suspended), this domain does not host active content but is in a suspended state. The site poses a low immediate threat as it is offline and non-functional. However, its presence on multiple security blocklists indicates prior association with malicious activity, potentially serving as a placeholder for future phishing or malware distribution.
Technical analysis shows the domain was flagged by 6 out of 95 VirusTotal vendors, including alphaMountain.ai, Certego, Ermes, Gridinsoft, and Seclookup. It appears on 7 blocklists. The domain was registered on 2026-02-21 through registrar REGRU-RU, hosted on IP 31.31.198.39 (Russia) under AS197695 "Domain names registrar REG.RU", Ltd. SSL certificate is issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020). Nameservers are ns1.hosting.reg.ru and ns2.hosting.reg.ru. GridinSoft trust rating is 0/100.
The domain is currently offline and inaccessible. The combination of a very recent creation date, low trust score, and blocklist presence indicates a high-risk domain historically, though its current suspended status reduces immediate danger. Monitoring for reactivation is recommended.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 1 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of ghklweb.ru · checked Apr 27, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。