secureonlineaccount[.]zya[.]me
“Domain Suspended”
secureonlineaccount.zya.me — 未验证. 品牌冒充:Linea; 诈骗类型:Account Takeover. 证据摘要: VirusTotal 13/91 (AILabs (MONITORAPP), BitDefender, Chong Lua Dao, CyRadar, ESET); Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 89/100. 注册商: Porkbun.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The site secureonlineaccount.zya.me, with the page title "Domain Suspended," was configured to impersonate the brand Linea as part of an Account Takeover scam. This type of threat attempts to trick users into providing login credentials or other sensitive account information, which can then be used to compromise legitimate accounts.
Technical analysis shows the domain was flagged by 11 out of 95 VirusTotal vendors, including BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, and G-Data. It appeared on two blocklists. The domain was registered through Porkbun LLC and created on 2021-09-01. It resolved to IP address 77.72.1.44, hosted on AS12488 Krystal Hosting Ltd in Great Britain. The SSL certificate was issued by ZeroSSL / ZeroSSL ECC Domain Secure Site CA. Nameservers were ns1.byet.org through ns5.byet.org.
As of the analysis, the domain is offline. The risk level is assessed as high based on the impersonation of a known brand, the account takeover scam type, and the 11/95 detection rate by security vendors. GridinSoft trust rating is 0/100, indicating no trust.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。