kindergarten-weltentdecker[.]de
“froxlor - Default page”
kindergarten-weltentdecker.de — 未验证. 证据摘要: VirusTotal 5/91 (alphaMountain.ai, ESET, Fortinet, Gridinsoft, SOCRadar); URLQuery 1 alert; PhishDestroy score 83/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain kindergarten-weltentdecker.de was registered on 21 February 2026 and currently resolves to the IPv4 address 142.132.211.104, which belongs to the Hetzner Online GmbH network (AS24940) in Germany. DNS resolution uses the SchlundTech name servers nsb9.schlundtech.de, nsa9.schlundtech.de, nsc9.schlundtech.de, and nsd9.schlundtech.de. An HTTP request returns status code 200 and serves a page titled “froxlor - Default page” powered by Apache HTTP Server; the site presents a Let’s Encrypt certificate (R12). Threat intelligence indicates that ten of ninety‑three VirusTotal scanners have flagged the domain, and it appears in a single security blocklist as well as an AlienVault OTX pulse, suggesting active abuse. The domain is currently listed as blocked by PhishDestroy and receives a Gridinsoft trust score of 0 out of 100, reinforcing the high‑risk assessment. While the exact phishing payload or targeted brand has not been observed, the presence of a default hosting panel page implies the infrastructure may be used to host credential‑stealing pages. Defenders should block the domain and its associated IP at perimeter defenses, monitor DNS queries for the listed name servers, and consider updating detection rules to include the observed TLS certificate fingerprint and HTTP response characteristics.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | kindergarten-weltentdecker.de |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 1 identified
Most widely used open-source HTTP server software.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of kindergarten-weltentdecker.de · checked Mar 2, 2026
网站配置分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。