troepsjy[.]shop
“Messenger”
troepsjy.shop — 服务器错误 (HTTP 502). 证据摘要: VirusTotal 9/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, G-Data); Spamhaus DBL_SPAM; PhishDestroy score 78/100. 注册商: Nicenic.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis indicates that the domain troepsjy.shop is active and has been identified as a generic phishing site. The domain appears on one security blocklist, and it is specifically blocked by the PhishDestroy service, confirming that threat‑mitigation providers have taken action against it. VirusTotal scans show that three of ninety‑one security vendors have flagged the domain, providing additional corroboration of malicious intent. No public page title, SSL certificate details, IP address, hosting information, or registrar data have been disclosed in the available intelligence, leaving the underlying infrastructure largely opaque.
Consequently, defenders lack concrete indicators such as server location, certificate fingerprints, or HTTP response codes that could be used for precise network‑level filtering. Given the limited visibility, the prudent defensive posture is to treat troepsjy.shop as hostile. Organizations should ensure the domain is blocked at perimeter firewalls, DNS resolvers, and endpoint protection solutions.
Continuous monitoring of reputation feeds for any newly reported indicators—such as changes in detection counts, additional blocklist listings, or emerging SSL certificates—will help maintain an up‑to‑date defensive posture. Where possible, security teams should incorporate the domain into internal threat‑intel platforms to correlate any observed traffic with broader phishing campaigns. Until further detail becomes available, the recommendation is to maintain a deny‑by‑default rule for troepsjy.shop and to alert users about potential phishing attempts that may originate from this address.
网络安全情报 Registrar context
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-13 03:52:44 UTC
VirusTotal 分析
存档证据
证据与外部报告
PD-20260802-C653AB Recipient: abuse@ctgserver.net 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。