rowerowywybor.shop
rowerowywybor.shop — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 15/89 (alphaMountain.ai, BitDefender, Chong Lua Dao, ESET, Forcepoint ThreatSeeker); URLQuery 2 det.; URLScan capture; CF Radar malicious; PhishDestroy score 100/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
PhishDestroy first observed rowerowywybor.shop on Sep 21, 2026. Current evidence score: 100/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, Cloudflare Radar, and URLQuery. VirusTotal recorded 15 detections among 89 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Sep 21, 2026 at 10:24 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and malware; its verdict timestamp was not retained. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Sep 21, 2026 at 10:25 UTC. On Sep 21, 2026 at 10:20 UTC, the separate external-blocklist snapshot contained no matches; URLScan captured the page. Google Safe Browsing returned no flag on Sep 21, 2026 at 10:24 UTC.
HTTP 200 was recorded on Sep 21, 2026 at 10:20 UTC. At collection time, the hostname resolved to 94.154.172.92 on AS209101 (IP Vendetta Inc.). The recorded endpoint location is Victoria, SC. DOM analysis on Sep 21, 2026 at 10:20 UTC returned 98/100. The evidence archive retains 3 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance.
The record contains 3 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.
网络安全情报
Forensic History & Detection Timeline
-
Threat First Observed Sep 21, 2026 · 11:53 UTCDomain ingestion complete. Initial state is marked as unknown pointing to IP
94.154.172.92.
威胁响应 Pipeline
公共封禁名单状态
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
nginx
Scanner note: alive_content: raw=ok; http=200; via=https_proxy; server=nginx
已保存的截图 · 3 sources
域名情报
技术详情DNS、SSL SAN、时间戳
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of rowerowywybor.shop · checked Sep 21, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。