vpass-jp[.]boyanzhixing[.]com
“boyanzhixing.com | 502: Bad gateway”
vpass-jp.boyanzhixing.com — 内容不可用. 诈骗类型:Banking Phishing. 证据摘要: VirusTotal 15/95 (BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet); Spamhaus DBL_SPAM; PhishDestroy score 95/100. 注册商: Gname.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain vpass-jp.boyanzhixing.com was registered on July 03, 2023 through Gname.com Pte. Ltd. and is currently pointed to the Cloudflare edge address 172.67.147.113, an IP owned by AS13335 Cloudflare, Inc. in the United States. Its authoritative nameservers are gina.ns.cloudflare.com and rex.ns.cloudflare.com. The site returns an HTTP 503 response and the page title observed is "boyanzhixing.com | 502: Bad gateway", indicating that the service is presently unavailable. No TLS certificate was detected for the host, meaning traffic is not encrypted.
Threat intelligence classifies the activity as a banking phishing operation that employs an Airdrop Scam kit. Fifteen of ninety‑five VirusTotal scanners flagged the domain, and it appears on a single external blocklist. PhishDestroy has already taken the domain offline, and the Gridinsoft trust score is recorded as 0 out of 100, reflecting a high confidence of malicious intent.
While the infrastructure details, such as the Cloudflare fronting, are confirmed, the exact payload or mimicry used by the phishing kit remains unknown because the site is offline and no page content is available. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration attempts, and add the IP address 172.67.147.113 to network‑wide deny lists. Additional scrutiny of related subdomains hosted on the same Cloudflare account is advisable, as threat actors frequently reuse the same edge infrastructure for multiple campaigns.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: boyanzhixing.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain boyanzhixing.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。