Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@afrihost.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
theprintking[.]co[.]za
“theprintking.co.za/”
theprintking.co.za — 未验证. 诈骗类型:Banking Phishing. 证据摘要: VirusTotal 14/95 (ADMINUSLabs, alphaMountain.ai, Cluster25, CRDF, CyRadar); URLQuery 1 alert; PhishDestroy score 95/100. 注册商: Afrihost.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The site theprintking.co.za is designed as a banking phishing page, impersonating a printing services brand to lure victims into submitting sensitive financial credentials. The threat posed is credential theft, as the page likely captures login details and banking information from unsuspecting users.
Technical analysis reveals the site was flagged by 14 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, alphaMountain.ai, Cluster25, CRDF, and CyRadar. It is listed on 1 blocklist. The domain was created on 2026-02-21 and registered through Afrihost, using nameservers ns.dns1.co.za, ns.dns2.co.za, ns.otherdns.com, and ns.otherdns.net. The IP address is 102.222.124.19, hosted in South Africa under AS37611 AFRIHOST SP (PTY) LTD. SSL encryption is provided by Let's Encrypt (certificate R13). The GridinSoft trust score is 0 out of 100.
The site is currently offline and inaccessible, reducing immediate risk. However, the registration date and active detection history indicate it was recently deployed for malicious purposes. The overall risk level is high due to the confirmed banking phishing classification and widespread vendor flags.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | theprintking.co.za |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 2 identified
High-performance web server compatible with Apache configurations.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
证据与外部报告
PD-20260217-EABCE8 Recipient: abuse@afrihost.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。