malwarebytes-bytes[.]us
malwarebytes-bytes.us 网络钓鱼与安全检查
“Malwarebytes Download - Malwarebytes Antivirus Download”
malwarebytes-bytes.us — 内容不可用 (HTTP 502). 品牌冒充:Facebook; 诈骗类型:Tech Support Scam. 证据摘要: VT 4/93 (alphaMountain.ai, Gridinsoft, Seclookup, SOCRadar); URLQuery 1 alert; URLScan no malicious verdict; GSB no flag; BL 2 (MetaMask, SEAL); PD 71/100. 注册商: ENOM.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
malwarebytes-bytes.us entered the PhishDestroy evidence set on Feb 2, 2026. Stored content metadata identifies Facebook as the apparent target. Content analysis also recorded brand signals for Instagram, LinkedIn, WhatsApp, and YouTube. The stored content classification is tech support scam. The assembled evidence scores 71/100 (high).
Four independent sources are positive: VirusTotal, MetaMask, SEAL, and URLQuery. VirusTotal recorded 4 detections among 93 engines: alphaMountain.ai, Gridinsoft, Seclookup, SOCRadar on Jun 13, 2026 at 22:36 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. URLQuery recorded 1 threat-system alert on Feb 2, 2026 at 15:34 UTC. The evidence is not unanimous. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Mar 26, 2026 at 12:13 UTC.
HTTP 502 was recorded on Aug 7, 2026 at 01:20 UTC; content was unavailable. Registration records for the domain list ENOM, INC. as the registrar. At collection time, the hostname resolved to 23.254.217.66 on AS54290 (HOSTWINDS - Hostwinds LLC., US). The associated network metadata labels the endpoint as AS54290 Hostwinds LLC. in Dallas, US. The stored server header is Apache. Captured page title: “Malwarebytes Download - Malwarebytes Antivirus Download”. DOM analysis completed on Apr 23, 2026 at 03:22 UTC; stored DOM score 10/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Aug 2, 2026 at 04:14 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.
Taken together, the page content and independent findings support classifying this hostname as Facebook-themed tech support scam.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | malwarebytes-bytes.us |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。