Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@korbank.pl.
The latest stored availability evidence still shows the domain reachable; 28 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
vh18568[.]vh[.]net[.]pl
“Verifizierung”
vh18568.vh.net.pl — 未验证. 证据摘要: VirusTotal 5/91 (alphaMountain.ai, CRDF, Fortinet, MalwareURL, SOCRadar); PhishDestroy score 78/100. 注册商: Prociv Sp. z o.o.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
vh18568.vh.net.pl is a subdomain of vh.net.pl. PhishDestroy first observed the hostname on Aug 22, 2026. The captured page title is “Verifizierung”. Current evidence score: 78/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, CRDF, Fortinet, MalwareURL, SOCRadar on Aug 23, 2026 at 04:41 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 23, 2026 at 14:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 23, 2026 at 15:54 UTC. URLScan completed without a malicious verdict (score 0) on Aug 22, 2026 at 17:08 UTC.
The collector marked the hostname reachable on Aug 22, 2026 at 12:40 UTC, but did not retain the HTTP response code. Registration records for the registrable domain vh.net.pl list Prociv Sp. z o.o. as the registrar and May 30, 2019 as the creation date. At collection time, the hostname resolved to 83.168.99.244 on AS214349 (NODEA SPOLKA Z OGRANICZONA ODPOWIEDZIALNOSCIA). The recorded endpoint location is Warsaw, PL. The stored server header is LiteSpeed. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Nov 17, 2026; checked Aug 22, 2026 at 13:02 UTC.
Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
PD-20260822-00A9C1 Recipient: abuse@korbank.pl 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。