tubeyou[.]plugsnotarlos[.]fr
“p”
tubeyou.plugsnotarlos.fr — 内容不可用 (HTTP 502). 证据摘要: VirusTotal 17 detections (engine total unavailable) (ADMINUSLabs, BitDefender, CRDF, Cluster25, CyRadar); URLQuery 4 alerts; CF Radar malicious; PhishDestroy score 95/100. 注册商: NETIM.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain tubeyou.plugsnotarlos.fr presents a fraudulent website impersonating the YouTube brand. The page title "p" indicates an incomplete or placeholder site, suggesting a phishing or credential-harvesting threat designed to capture user login details under the guise of a legitimate video platform.
Technical evidence from the available data shows the site was flagged by 17 of 95 VirusTotal vendors, including ADMINUSLabs, BitDefender, CRDF, Cluster25, and CyRadar. It is registered with NETIM, created on 2026-02-26, and resolves to IP 185.26.106.234 hosted by AS24935 Eurofiber France SAS in France. The domain uses nameservers ns1.netim.net, ns2.netim.net, and ns3.netim.net, has no SSL certificate, and is listed on 1 blocklist.
The site is currently offline or down. Based on the high detection rate, low GridinSoft trust score of 0/100, and impersonation of a known brand, the risk level is assessed as high for users who may have visited the site before it became unavailable.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| CIRA Canadian Shield DNS | plum-garlic-jpl8.squarespace.com |
malicious | Sinkholed |
| OpenDNS | tubeyou.plugsnotarlos.fr |
phishing | Phishing Block |
| Cloudflare DNS | tubeyou.plugsnotarlos.fr |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | tubeyou.plugsnotarlos.fr |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
存档证据
证据与外部报告
PD-20260226-282754 Recipient: abuse@netim.net 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。