ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
域安全和威胁情报
qasralhosn[.]sbs
“Document Portal | Secure Access”
威胁判定
关键
95/100 证据评分
可用性
内容不可用
最新观察中的内容不可用
风险信号
病毒检测总数：16/91
品牌冒充：Microsoft
报告概览
qasralhosn.sbs — 内容不可用 (HTTP 502). 品牌冒充：Microsoft. 证据摘要: VirusTotal 16/91 (alphaMountain.ai, BitDefender, CRDF, ESET, Emsisoft); URLQuery 2 det.; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 95/100. 注册商: Spaceship.
为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
重要
Analysis indicates qasralhosn.sbs serves generic phishing operations through a fabricated document access portal. No specific brand impersonation or drainer kit signatures were identified in the available data. The domain title Document Portal | Secure Access directly supports credential capture attempts against visitors.
Infrastructure analysis reveals a VirusTotal detection rate of 6/95, registration via Spaceship, Inc., and resolution to IP 45.159.189.49. The domain was created June 30, 2026, uses a Let's Encrypt SSL certificate, and maintains active status with no Google Safe Browsing flags recorded. Blocklist presence remains limited to the six vendor detections.
Current status shows the domain still active and accessible. Response actions include immediate DNS and network blocking of qasralhosn.sbs together with the associated IP 45.159.189.49. Remaining risk stays elevated given the high-risk classification and ongoing operational state, requiring continued monitoring for similar patterns in future registrations.
VirusTotal
16 det.
URLQuery
2 det.
CF雷达
恶意
URLScan
TLS 证书
Let's Encrypt / YR1
年龄
2 mo New
观测状态
内容不可用 502
DestroyList
已列入
Reports Sent
1
数据覆盖范围
VirusTotal
16 / 91
URLQuery
2 det.
PhishStats
未检查
OTX
no community references
CF雷达
provider verdict: malicious
URLScan capture
存储的报告
URLScan verdict
malicious
DNS 阻断
未检查
TLS
valid certificate, 40d
WHOIS
2 mo old
屏幕截图
2 captures · 2 sources
重定向链
未探查
网络安全情报
威胁响应 Pipeline
发现
Checks
Reports
可用性
15/15
Sent Report Recorded
Stored sent-report record for registrar Spaceship, Inc., hosting provider, 2 abuse contacts
abuse@king-servers.comabuse@spaceship.com
公共封禁名单状态
已保存的截图
域名情报
域名
URLScan Verdict
恶意
score 100 Phishing brand: Microsoft report ↗
服务器 / ASN
nginx · AS14576 HOSTING-SOLUTIONS - Hosting Solution Ltd., US
IP 信誉
abuse score 0/100 0 reports checked 2026年7月3日
注册商
Spaceship
(US)
(US)
IP 地址
45.159.189.49
注册信息创建 2026年6月30日 (49d · New) — Expires 2027年6月30日
HTTP 状态码502 Error
技术细节DNS、SSL SAN、时间戳
首次发现2026年7月3日
DOM Analysisanalyzed 2026年7月3日score 0/100
IoC Extractionscanned 2026年7月29日0 wallet · 0 Telegram IoCs
Submitted URLhttp://qasralhosn.sbs/
域名服务器launch1.spaceship.netlaunch2.spaceship.net
TLS Fingerprint
TLS Observationvalid from 2026年6月30日scanned 2026年7月3日
TLS SAN Domainswww.qasralhosn.sbs
Case ID
SHORTDOT 域名区 · 公开证据
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ShortDot SA · Luxembourg 7 个域名区 · 全区证据每日更新
打开 ShortDot 证据库
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 2 identified
P
PHP
Programming languages
N
Nginx
Web servers
Reverse proxies
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 置信度 100%
Detected via Cloudflare Radar · Wappalyzer engine
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
16 / 91 安全供应商标记了该域
View on VT
Last analyzed
alphaMountain.ai
BitDefender
CRDF
ESET
Emsisoft
Fortinet
G-Data
Gridinsoft
卡巴斯基
Lionic
Netcraft
OpenPhish
SafeToOpen
SOCRadar
Sophos
Webroot
存档证据
Wayback Machine Snapshot
历史快照可供证据审查
网站性能分析
Google PageSpeed Insights — mobile performance audit of qasralhosn.sbs · checked Jul 3, 2026
86
Needs Work
Performance
FCP
3.22s
First Contentful Paint
LCP
3.37s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
14ms
Total Blocking Time
SI
3.22s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
证据与外部报告
证券分析
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-20260703-02EBFE Recipient: abuse@king-servers.com Page title stored with report: Document Portal | Secure Access
OSINT与情报分析
DNS 与网络
SEO 与域名
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
相关基础设施与报告
同一注册商: Spaceship 6
secure-swap.app 
seastonecapital.info 
nextradextra.com Microsoft impersonation 8
These domains also target Microsoft users. View all Microsoft threats →
最近的威胁报告 6
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。
bscbox.xyz 