reallocation-pharos[.]com
reallocation-pharos.com 网络钓鱼与安全检查
reallocation-pharos.com — 可达 · 访问受限 (HTTP 403). 诈骗类型:Credential Phishing. 证据摘要: VT 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); URLQuery 1 alert; URLScan no malicious verdict; GSB no flag; BL 2 (MetaMask, SEAL); PD 78/100. 注册商: PDR.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
reallocation-pharos.com entered the PhishDestroy evidence set on Jun 25, 2026. The stored content classification is credential phishing. The assembled evidence scores 78/100 (high).
Four independent sources are positive: VirusTotal, MetaMask, SEAL, and URLQuery. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar on Aug 5, 2026 at 02:13 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. URLQuery recorded 1 threat-system alert on Jun 25, 2026 at 17:39 UTC. The evidence is not unanimous. Google Safe Browsing returned no flag on Jun 25, 2026 at 17:45 UTC. URLScan completed without a malicious verdict (score 0) on Jun 26, 2026 at 08:10 UTC.
An access-restricted HTTP 403 response was recorded on Aug 7, 2026 at 10:23 UTC. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Apr 28, 2026 as the creation date. At collection time, the hostname resolved to 172.67.152.62 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. DOM analysis completed on Jun 25, 2026 at 18:20 UTC; stored DOM score 78/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 01:58 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jul 27, 2026; checked Jun 25, 2026 at 19:00 UTC.
No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as credential phishing.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | reallocation-pharos.com |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
ICANN 收到了钱。问责却没有到来。
对于这个 gTLD,上述注册商依据与 ICANN 签订的合同运营。ICANN 收取与注册、续费和转移相关的年度费用、浮动费用及按交易计收的费用。
认证:已变现。问责:请稍后再来查看。
接着,魔法开始了:ICANN 写下 RAA §3.18,注册商调查自身客户群体内部的滥用行为,受害者免费提交证据,而每一层都在等待其他人采取行动。如果这能让受害者觉得更安全,那真是太好了——看来账单确实起作用了。
所用技术 · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of reallocation-pharos.com · checked Jun 25, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。