salfordcib.com — 未验证. 证据摘要: VirusTotal 12/89 (alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Certego, ESET); URLScan capture; PhishDestroy score 86/100. 注册商: Hosting Concepts.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
PhishDestroy first observed salfordcib.com on Sep 20, 2026. Current evidence score: 86/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 12 detections among 89 engines: alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Certego, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Lionic, Netcraft, Sophos, VIPRE on Sep 20, 2026 at 20:52 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Sep 20, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Sep 20, 2026 at 20:53 UTC. A URLScan capture is available, but no capture timestamp was recorded.
No conclusive timestamped HTTP response is stored. Registration records for the domain list Hosting Concepts B.V. d/b/a Registrar.eu as the registrar and Apr 2, 2026 as the creation date. At collection time, the hostname resolved to 23.153.104.17. The evidence archive retains 1 visual capture from PhishDestroy; no page title was retained, so the captures preserve the landing-page appearance.
Only one source contains a positive finding; no second positive source is stored. The stored fields do not identify an impersonated brand or victim interaction.
Forensic History & Detection Timeline
-
Threat First Observed Sep 20, 2026 · 22:52 UTCDomain ingestion complete. Initial state is marked as unknown pointing to IP
23.153.104.17.
威胁响应 Pipeline
公共封禁名单状态
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
已保存的截图 · 1 source
域名情报
技术详情DNS、SSL SAN、时间戳
技术 · 6 identified
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of salfordcib.com · checked Sep 20, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。