log-gradient.network
“Index of /”
log-gradient.network — 内容不可用. 证据摘要: VirusTotal 6/91 (alphaMountain.ai, Chong Lua Dao, CRDF, Fortinet, Gridinsoft); cloaking observed; PhishDestroy score 78/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
The domain log-gradient.network is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, log-gradient.network has been taken offline, reducing immediate risk but not eliminating potential residual threats.
Technical indicators confirm log-gradient.network as a phishing domain with elevated risk. VirusTotal reports 2 of 95 security vendors flagging the domain, including Fortinet and SOCRadar. The domain was registered through NiceNIC International Group Co., Limited on December 01, 2025, and resolves to the IP address 109.176.207.224, hosted in the Netherlands under AS214036 (Ultahost, Inc.). It appears on 1 security blocklist, specifically PhishDestroy, and lacks an SSL certificate, as indicated by the absence of an issuer. The observed page title was 'Index of /', and the HTTP status returned was 429. Nameservers are ns1.ultahost.com and ns2.ultahost.com, with a Gridinsoft trust score of 0/100.
Users who may have interacted with log-gradient.network should take immediate safety steps. Since this is a generic phishing site, change any passwords entered on the site and enable two-factor authentication (2FA) on all critical accounts. Monitor financial and personal accounts for unauthorized activity. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org or local cybercrime units. Additionally, notify the registrar, NiceNIC International Group Co., Limited, to aid in further investigation and mitigation.
网络安全情报 Registrar context
Forensic History & Detection Timeline
-
Cloudflare Radar Scan Mar 7, 2026 · 13:05 UTCCloudflare Radar scan registered: View Radar report.
威胁响应 Pipeline
公共封禁名单状态
Evasion evidence
Cloaking confirmed: scanners and victims see different content
The page served one response to a browser-like visitor and another to a crawler or security scanner. Cloaking exists only to keep reviewers away from the real landing page.
- Stored cloaking flag
- Observed
- 伪装类型
status_split- 伪装评分
- 3/6
- Last cloaking scan
Scanner note: dns_error: raw=dns_error; via=local_dns_prefilter
已保存的截图 · 2 sources
域名情报
技术详情DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-09-20 02:33:18 UTC
VirusTotal 分析
社区报告
由 1 名社区成员报告;首次发现于 2025年12月1日
- 已存储报告
- 1
- 已报告的唯一 URL
- 1
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。