Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is whoisrequest@markmonitor.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
healthcarepatientportal[.]com
“404 - Quick Tip | Cofense”
healthcarepatientportal.com — 隐形 · 可达. 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 5/91 (alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); URLQuery 1 alert; cloaking observed; PhishDestroy score 75/100. 注册商: MarkMonitor.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy identifies healthcarepatientportal.com as a domain engaged in generic phishing, targeting users with fake healthcare portal login scams. The domain does not currently impersonate a specific branded healthcare provider but uses generic healthcare terminology to deceive victims into submitting sensitive credentials. No known drainer kits are associated with this domain as of the current intelligence.
The domain healthcarepatientportal.com was created on June 12, 2017, and is registered through MarkMonitor, Inc. It resolves to the IP address 52.204.246.179. Although VirusTotal reports 0 detections out of 95 antivirus engines, indicating no current malware signatures, the domain is actively blocked by three security blocklists: OpenPhish, PhishingArmy, and PhishingDB. The domain has an SSL certificate issued by Let's Encrypt, which may add to its perceived legitimacy. There is no current Google Safe Browsing (GSB) status available, and the risk level remains under investigation.
Currently, healthcarepatientportal.com maintains an active status with ongoing monitoring recommended due to its presence on multiple blocklists and phishing associations. PhishDestroy advises users and organizations to verify questionable communications referencing this domain through trusted phishing intelligence platforms and to avoid entering credentials on any pages under this domain. The risk remains, as the domain has not yet been flagged by VirusTotal engines, which may delay detection in some endpoint protections. Immediate blocking and user awareness are advised until the threat is fully resolved or confirmed benign.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | healthcarepatientportal.com |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of healthcarepatientportal.com · checked Apr 6, 2026
网站配置分析
证据与外部报告
PD-20260406-354AC4 Recipient: whoisrequest@markmonitor.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。