n[.]blsq[.]at
“Blacksprut”
n.blsq.at — 未验证. 证据摘要: VirusTotal 6/89 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); URLQuery 1 alert; PhishDestroy score 78/100. 注册商: Key-Systems.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
n.blsq.at is a subdomain of blsq.at. PhishDestroy first observed the hostname on Sep 8, 2026. The captured page title is “Blacksprut”. Current evidence score: 78/100 (critical).
Positive findings are stored from 2 sources: VirusTotal and URLQuery. VirusTotal recorded 6 detections among 89 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar on Sep 8, 2026 at 19:41 UTC. URLQuery recorded 1 threat-system alert on Sep 8, 2026 at 01:25 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Sep 8, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Sep 8, 2026 at 19:41 UTC. URLScan completed without a malicious verdict (score 0) on Sep 8, 2026 at 05:08 UTC.
The collector marked the hostname reachable on Sep 8, 2026 at 01:22 UTC, but did not retain the HTTP response code. Registration records for the registrable domain blsq.at list Key-Systems GmbH ( https://nic.at/registrar/404 ) as the registrar. At collection time, the hostname resolved to 38.180.84.62 on AS51852 (PLI-AS Private Layer INC, PA). The recorded endpoint location is Bellinzona, CH. The stored server header is nginx/1.18.0 (Ubuntu). DOM analysis on Sep 8, 2026 at 02:22 UTC returned 78/100. The evidence archive retains 4 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 8, 2026; checked Sep 8, 2026 at 04:02 UTC.
The content indicators and 2 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | n.blsq.at |
malicious | Sinkholed |
Detection timeline
-
VirusTotal
stage4.timeline.transition (+1) (Added: Gridinsoft)
-
VirusTotal
stage4.timeline.transition (+1) (Added: SOCRadar)
-
VirusTotal
stage4.timeline.transition (+1) (Added: Forcepoint ThreatSeeker)
-
stage4.timeline.first_seen
stage4.timeline.first_value
威胁响应 Pipeline
公共封禁名单状态
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260908-41448F- Captured page title
- Blacksprut
Blocklist coverage
stage4.blocklist.scope_plural
所用技术 · 2 identified
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com 置信度 100%Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of n.blsq.at · checked Sep 8, 2026
所用技术
stage4.technology.identified_plural
证据与外部报告
PD-20260908-41448F Recipient: abuse@3nt.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。