optionsxpress-1104052[.]vip
“Options Xpress”
optionsxpress-1104052.vip — 内容不可用 (HTTP 502). 证据摘要: VirusTotal 2/93 (Gridinsoft, Trustwave); PhishDestroy score 56/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain optionsxpress-1104052.vip is associated with a generic phishing operation and has a high threat score of 70/100. The site is currently down, indicating it has likely been taken down due to its malicious activities. VirusTotal reports that 2 out of 95 security vendors, including Gridinsoft and Trustwave, have flagged this domain as malicious, and it is listed on one public blocklist, although Google Safe Browsing has not flagged it.
No registrar information is available, suggesting the domain may utilize privacy protection. The hosting IP is 34.94.84.231, with the domain created on February 21, 2026, and first seen on February 26, 2026. Given the high threat level, block the domain at the perimeter and flag the IP as an indicator of compromise.
威胁响应 Pipeline
公共封禁名单状态
取证情报
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。