verticalstudio-registers[.]xyz
“Vertical | The No-Code Platform for AI model Fine-tuning.”
verticalstudio-registers.xyz — 内容不可用 (HTTP 502). 品牌冒充:Google; 诈骗类型:Tech Support Scam. 证据摘要: VirusTotal 5/93 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, G-Data, Webroot); 1 external blocklist match (ScamSniffer); PhishDestroy score 70/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, verticalstudio-registers.xyz, was registered on 21 February 2026 and resolves to the Cloudflare edge address 104.21.48.1 belonging to AS13335 (Cloudflare, Inc.) in the United States. The site presented the page title “Vertical | The No‑Code Platform for AI model Fine‑tuning.” Although the title does not reference the targeted brand, the intelligence indicates that the domain impersonates Google and is classified as a Tech Support Scam. The SSL certificate is a Cloudflare TLS Issuing ECC CA 1 certificate, confirming the use of Cloudflare’s default TLS termination. Reputation checks show a Gridinsoft trust score of 0 / 100, and the domain is listed on two public blocklists—PhishDestroy and ScamSniffer.
VirusTotal analysis recorded five detections out of ninety‑three scanning engines, confirming that multiple security products flag the domain as malicious. The site is currently taken offline, and no further HTTP response details are available. Evidence suggests the infrastructure relies on a shared Cloudflare front‑end, which can obscure the true backend host.
Defenders should block the domain at DNS and proxy layers, monitor for any future redeployment of the same FQDN or similar‑looking subdomains, and consider adding the IP address 104.21.48.1 to deny‑list rules while noting that the address is a shared Cloudflare node and may host benign services. Additional investigation is needed to capture the exact content served before takedown, as the page title alone does not reveal the malicious payload or user‑interaction flow. Until the site is confirmed clean, the recommendation is to treat verticalstudio‑registers.xyz as a confirmed Google‑impersonating tech‑support scam and maintain existing protection controls.
威胁响应 Pipeline
公共封禁名单状态
取证情报
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。