securitypc[.]world

Analysis as of July 24, 2026 shows that securitypc[.]world is currently offline, having been taken down after detection. The domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited and resolves to the IPv4 address 204.11.58.71, which is assigned to AS46606 Unified Layer in the United States. DNS records list ns1.md-94.webhostbox.net and ns2.md-94.webhostbox.net as authoritative name servers, and an MX record points to mail.securitypc[.]world with priority 0. The web service, when reachable, presented the page title “Privatsphäre-Scan — Cyber Neon” and was served by Apache HTTP Server with Yandex.Metrika analytics detected. TLS was provided by a Let's Encrypt R12 certificate, indicating a valid HTTPS configuration at the time of capture.

Reputation signals are strongly negative. The domain appears on one security blocklist and is explicitly blocked by the PhishDestroy service. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating. VirusTotal recorded detections from 2 of 93 scanning engines, confirming that at least two vendors have identified malicious behavior. The site is also flagged by a generic phishing classification, consistent with the observed page title and the presence of a privacy‑scan label that may be used to lure victims.

Uncertainty remains around the exact payload or credential‑harvesting mechanism, as no content analysis beyond the title is available. The limited detection count suggests that the malicious infrastructure may be newly deployed or low‑profile, but the combination of a freshly created domain, low trust score, blocklist inclusion, and vendor detections indicates a high likelihood of phishing intent. Defenders should continue to block securitypc[.]world at perimeter and DNS layers, monitor for any resurgence of the IP address 204.11.58.71, and update detection signatures to include the observed TLS fingerprint and the specific page title string.