safe-connect[.]zapto[.]org
“View File || Online Reader”
safe-connect.zapto.org — 未验证. 品牌冒充:Adobe; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 16/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET); CF Radar malicious; PhishDestroy score 95/100. 注册商: "Vitalwerks Internet S….
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report analyzes the domain safe-connect.zapto.org, which was configured as a phishing and cryptocurrency scam site. The page title "View File || Online Reader" and the impersonation of the Adobe brand indicate the site was designed to appear as a legitimate document viewing service. The threat posed is credential theft or cryptocurrency fraud, as the scam type is cryptocurrency.
Technical evidence from the provided data shows the site had 16 detections out of 95 VirusTotal vendors. It was flagged by alphaMountain.ai, BitDefender, CRDF, CyRadar, and ESET. The domain is registered with Vitalwerks Internet Solutions, LLC DBA No-IP, created on 2001-08-09, and resolves to IP 23.111.174.26 (US) under AS29802 HIVELOCITY, Inc. The SSL certificate is associated with PhishDestroy and botadmin.destroy.tools. Nameservers are nf1.no-ip.com, nf2.no-ip.com, nf3.no-ip.com, and nf4.no-ip.com. The domain is on 2 blocklists.
As of the report, the site is down or offline. The GridinSoft trust rating is 0 out of 100, and the DOM risk score is 15, indicating a moderate risk level. The domain's long creation date and current inactive status suggest it may be reactivated for future malicious campaigns.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。