vh19049[.]vh[.]net[.]pl
“Verification”
vh19049.vh.net.pl — 未验证. 证据摘要: VirusTotal 6/89 (alphaMountain.ai, CRDF, Fortinet, SOCRadar, URLQuery); URLQuery 1 alert; URLScan capture; 1 external blocklist match (OpenPhish); PhishDestroy score 72/100. 注册商: Prociv Sp. z o.o.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
vh19049.vh.net.pl is a subdomain of vh.net.pl. PhishDestroy first observed the hostname on Sep 8, 2026. The captured page title is “Verification”. Current evidence score: 72/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, OpenPhish, and URLQuery. VirusTotal recorded 6 detections among 89 engines: alphaMountain.ai, CRDF, Fortinet, SOCRadar, URLQuery, Webroot on Sep 8, 2026 at 20:52 UTC. OpenPhish listed the hostname in the separate external-blocklist snapshot on Sep 8, 2026 at 14:20 UTC. URLQuery recorded 1 threat-system alert on Sep 8, 2026 at 19:11 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Sep 8, 2026 at 20:52 UTC. URLScan captured the page on Sep 8, 2026 at 19:08 UTC.
The collector marked the hostname reachable on Sep 8, 2026 at 19:08 UTC, but did not retain the HTTP response code. Registration records for the registrable domain vh.net.pl list Prociv Sp. z o.o. as the registrar and May 30, 2019 as the creation date. At collection time, the hostname resolved to 83.168.99.244. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | vh19049.vh.net.pl |
malicious | Sinkholed |
Detection timeline
-
stage4.timeline.first_seen
stage4.timeline.first_value
威胁响应 Pipeline
公共封禁名单状态
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260908-0C9957- Captured page title
- Verification
Blocklist coverage
stage4.blocklist.scope_plural
stage4.blocklist.scope_plural No match
VirusTotal 分析
所用技术
stage4.technology.identified_plural
证据与外部报告
PD-20260908-0C9957 Recipient: abuse@korbank.pl 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。