域安全和威胁情报

ww19.hiring9.com

Name: ww19.hiring9.com — PhishDestroy evidence record
Published: 2026-10-25
License: https://creativecommons.org/licenses/by/4.0/

查看证据

注册商: Tucows
Resolved IP: 208.91.196.145
注册时间: 2025年2月22日

PhishDestroy评估高

63/100

证据评分

可用性 最后已知的活跃状态 最新存储的可达性观察观测时间 2026年10月25日 · 23:00 UTCHTTP 探测

风险信号

存储的 PhishDestroy 威胁列表

VirusTotal

0 / 92

发动机检测 · 2026-10-25

OTX

社区参考资料

Cloudflare Radar

无异常

源代码判定

页面快照

打开图库

域名年龄

610 days

已发送举报

—

无已发送记录

报告概览

ww19.hiring9.com — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 0/92; PhishDestroy score 63/100. 注册商: Tucows.

为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。

分析

PhishDestroy威胁报告2026-10-25 17:35:25 UTC

Overview

PhishDestroy added ww19.hiring9.com to its internal blocklist on 2026-10-25 based on a trusted intake. The prior assessment on the same date noted minimal page content and insufficient information to determine intent. An HTTP 200 response was recorded on 2026-10-25, but no further behavior was observed.

How the scam works

The listing does not establish a specific fraudulent mechanism for this domain. Suspicious domains may be used for phishing, credential harvesting, or social-engineering attacks, but no such activity was observed here.

证据

VirusTotal scanned the domain on 2026-10-20 with 92 engines and reported zero detections and zero suspicious results. Google Safe Browsing checked the site on 2026-10-25 and did not flag it. URLScan’s machine-learning engine assigned a malicious score of 78 on 2026-10-19, though its overall verdict was non-malicious. PhishDestroy’s internal list marks the domain as blocked, while external blocklists showed no entries as of 2026-10-25, and OTX reported zero pulses.

基础设施

The domain ww19.hiring9.com was seven days old on the observation date, while its apex hiring9.com was 1,458 days old. Recorded DNS data on 2026-10-20 showed the domain pointing to IP 208.91.196.145 and a CNAME record to 9145.searchmagnified.com; the IP was observed behind Cloudflare. The IP belonged to ASN 40034 (Confluence Networks Inc) and was geolocated to Road Town, British Virgin Islands.

What to do

Do not submit credentials, personal data, or cryptocurrency information to this site, as no malicious intent has been proven but the domain is flagged as suspicious. Administrators should monitor access logs for any requests to ww19.hiring9.com and consider blocking the exact hostname in web filters. Users who may have entered sensitive information should change affected passwords and review account activity.

来源证据VirusTotal 0 / 92 8 sources

URLScan

恶意 · 引擎判定 · 评分 78

2026-10-19 15:39 UTC

打开报告

URLScan来源原始记录观测时间: 2026-10-19 15:39:20 UTC21 个字段

观测时间: 2026-10-19T15:39:20Z · 检索到: 2026-10-25T17:32:06Z

报告 ID

01a154d1-1581-75e1-90a0-a92e2fad9feb

最终网址

http://ww19.hiring9.com/

HTTP 响应

200

重定向类型

off-domain

重定向

目标
https://amaizingnetjobs3580.pages.dev/
来源
http://amaizingnetjobs3580.pages.dev/
状态
307
目标
https://www.fb.hiring9.com/
来源
https://amaizingnetjobs3580.pages.dev/
目标
http://ww19.hiring9.com/
来源
https://www.fb.hiring9.com/
状态
302
目标
https://ww19.hiring9.com/
来源
http://ww19.hiring9.com/
状态
307
目标
http://ww19.hiring9.com/
来源
https://ww19.hiring9.com/
状态
307

IP 地址

208.91.196.145

已联系的域名

l.cdn-fileserver.com
d.delivery.consentmanager.net
s.cdn-fileserver.com
cdn.consentmanager.net
amaizingnetjobs3580.pages.dev
s.yimg.com
msadsscale.microsoft.com
scripts.clarity.ms
searchresultsworld.com
www.fb.hiring9.com

已联系的 IP 地址

172.67.181.210
69.147.92.11
150.171.109.72
150.171.109.113
104.21.26.182
89.187.167.38
85.9.207.144
104.21.31.250
208.91.196.145
185.150.189.29
172.66.44.93

自治系统（ASN）

13335
14777
8075
60068
202053
40034
23470

服务器所在国家/地区

关联域名

findsearchresults.com
skenzo.com

文档哈希值

9dca5128b9b6ef243254c35151d332e842ffb61070f75261566ce64f3b444a84

JavaScript 全局变量

cmp_id
cmp_cdid
cmp_params
cmp_host
cmp_cdn
cmp_proto
cmp_codesrc
cmp_getsupportedLangs
cmp_getRTLLangs
cmp_getlang
cmp_addFrame
cmp_rc
cmp_stub
cmp_gpp_ping
cmp_gppstub
cmp_msghandler
cmp_setStub
cmp_setGppStub
__cmp
__uspapi
__gpp
olaSyncCount
__bdata
checkDNS
cmp_utillities
cmp_gppmanifest
cmp_fibo
cmp_reader
cmp_writer
cmp_cs
cmp_lang
cmp_purpose
cmp_getFeatureTextSignature
cmp_hasNonStandardFeatureTexts
cmp_feature
cmp_stack
cmp_vendor
cmp_snapshot
cmp_storage
cmp_gpp_helper

Cookie

sid
visitor-id
__cmpcc
__cmpcccx175795

浏览器存储键

cmp_gpcConsentModeEligible.40679ccc92462
__cmpcccx175795_ww19.hiring9.com
__cmpcccx175795_expire_ww19.hiring9.com

TLS 会话与证书

使用者备用名称（SAN）: amaizingnetjobs3580.pages.dev
*.amaizingnetjobs3580.pages.dev
加密套件: AES_128_GCM
签发者: WE1
使用者（Subject）: amaizingnetjobs3580.pages.dev
协议: QUIC
到期时间: 2026-12-27 15:38:01 UTC
生效时间: 2026-09-28 14:38:22 UTC

域名年龄（天）

注册域名年龄（天）

1458

页面请求数

服务提供商评定结果

引擎判定

标签: urlscan-ml
urlscan-ml-60c5e22
评分: 78
恶意: 是

总体判定

评分: 0
恶意: 否

HTTP 头

服务器: cloudflare
Content-type: text/html; charset=utf-8
X-content-type-options: nosniff
Referrer-policy: strict-origin-when-cross-origin

来源原始字段 · JSON

Uuid	01a154d1-1581-75e1-90a0-a92e2fad9feb
Final url	http://ww19.hiring9.com/
状态	200
已重定向	off-domain
重定向	[ { "to": "https://amaizingnetjobs3580.pages.dev/", "from": "http://amaizingnetjobs3580.pages.dev/", "status": 307 }, { "to": "https://www.fb.hiring9.com/", "from": "https://amaizingnetjobs3580.pages.dev/" }, { "to": "http://ww19.hiring9.com/", "from": "https://www.fb.hiring9.com/", "status": 302 }, { "to": "https://ww19.hiring9.com/", "from": "http://ww19.hiring9.com/", "status": 307 }, { "to": "http://ww19.hiring9.com/", "from": "https://ww19.hiring9.com/", "status": 307 } ]
Ip	208.91.196.145
已联系的域名	[ "l.cdn-fileserver.com", "d.delivery.consentmanager.net", "s.cdn-fileserver.com", "cdn.consentmanager.net", "amaizingnetjobs3580.pages.dev", "s.yimg.com", "msadsscale.microsoft.com", "scripts.clarity.ms", "searchresultsworld.com", "www.fb.hiring9.com" ]
已联系的 IP 地址	[ "172.67.181.210", "69.147.92.11", "150.171.109.72", "150.171.109.113", "104.21.26.182", "89.187.167.38", "85.9.207.144", "104.21.31.250", "208.91.196.145", "185.150.189.29", "172.66.44.93" ]
Asns	[ "13335", "14777", "8075", "60068", "202053", "40034", "23470" ]
Countries	[ "US", "GB", "DE", "VG" ]
关联域名	[ "findsearchresults.com", "skenzo.com" ]
文档哈希值	9dca5128b9b6ef243254c35151d332e842ffb61070f75261566ce64f3b444a84
Globals	[ "cmp_id", "cmp_cdid", "cmp_params", "cmp_host", "cmp_cdn", "cmp_proto", "cmp_codesrc", "cmp_getsupportedLangs", "cmp_getRTLLangs", "cmp_getlang", "cmp_addFrame", "cmp_rc", "cmp_stub", "cmp_gpp_ping", "cmp_gppstub", "cmp_msghandler", "cmp_setStub", "cmp_setGppStub", "__cmp", "__uspapi", "__gpp", "olaSyncCount", "__bdata", "checkDNS", "cmp_utillities", "cmp_gppmanifest", "cmp_fibo", "cmp_reader", "cmp_writer", "cmp_cs", "cmp_lang", "cmp_purpose", "cmp_getFeatureTextSignature", "cmp_hasNonStandardFeatureTexts", "cmp_feature", "cmp_stack", "cmp_vendor", "cmp_snapshot", "cmp_storage", "cmp_gpp_helper" ]
Cookie	[ "sid", "visitor-id", "__cmpcc", "__cmpcccx175795" ]
Storage keys	[ "cmp_gpcConsentModeEligible.40679ccc92462", "__cmpcccx175795_ww19.hiring9.com", "__cmpcccx175795_expire_ww19.hiring9.com" ]
Tls	{ "san": [ "amaizingnetjobs3580.pages.dev", "*.amaizingnetjobs3580.pages.dev" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "amaizingnetjobs3580.pages.dev", "protocol": "QUIC", "valid_to": "2026-12-27T15:38:01Z", "valid_from": "2026-09-28T14:38:22Z" }
域名年龄（天）	7
Apex age days	1458
请求	21
服务提供商评定结果	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 78, "malicious": true }, "overall": { "score": 0, "malicious": false } }
HTTP 头	{ "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" }

单独的监视器记录 · 2026-10-26 04:30 UTC

单独存储的监控快照；不会替换主报告记录，也不会确定当前的可用性。

record_source: domain_monitor.urlscan
uuid: 01a154d1-1581-75e1-90a0-a92e2fad9feb
report_url: https://urlscan.io/result/01a154d1-1581-75e1-90a0-a92e2fad9feb/
评分: 0
malicious: false
result_at: 2026-10-26T04:30:20Z
enriched_at: null
source_timestamps: {"urlscan_result_at":"2026-10-26 05:30:20","urlscan_enriched_at":null}
timestamp_basis: Europe/Berlin，与现有报告中使用的格式一致；源时间戳按原样保留

VirusTotal

0 / 92 发动机检测 · 存储的摘要

2026-10-25 17:32 UTC

打开报告

VirusTotal来源原始记录观测时间: 2026-10-20 01:16:57 UTC10 个字段

观测时间: 2026-10-20T01:16:57Z · 检索到: 2026-10-25T17:32:33Z

供应商结果计数

超时: 0
无害: 55
恶意: 0
可疑的: 0
未检测到: 37

信誉评分

注册商

Tucows Domains Inc.

创建

2025-02-22 18:18:42 UTC

有效期至

2027-02-22 18:18:42 UTC

已更新

2026-01-30 17:18:10 UTC

首次发现

2026-10-20 01:16:57 UTC

DNS 记录

TTL（秒）
300
类型
TXT
值
v=spf1 a -all
TTL（秒）
300
类型
SOA
负责人邮箱
abuse.confluence-networks.com
值
ns1.cnomy.com
TTL（秒）
300
类型
MX
值
~
优先级
300
TTL（秒）
900
类型
NS
值
ns2.cnomy.com
TTL（秒）
300
类型
CNAME
值
9145.searchmagnified.com
TTL（秒）
900
类型
NS
值
ns1.cnomy.com
TTL（秒）
822
类型
A
值
208.91.196.145

DNS 记录获取时间

2026-10-20 01:30:38 UTC

注册记录

注册商: Tucows Domains Inc.
注册商 IANA ID: 69
注册商 URL: http://www.tucows.com
注册时间: 2025-02-22 18:18:42 UTC
已更新: 2026-01-30 17:18:10 UTC
有效期至: 2027-02-22 18:18:42 UTC
状态: ok
域名服务器: ns15.abovedomains.com
ns16.abovedomains.com
DNSSEC: unsigned

来源原始字段 · JSON

供应商结果计数	{ "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }
声誉	0
注册商	Tucows Domains Inc.
创建	2025-02-22T18:18:42Z
有效期至	2027-02-22T18:18:42Z
已更新	2026-01-30T17:18:10Z
首次发现	2026-10-20T01:16:57Z
DNS 记录	[ { "ttl": 300, "type": "TXT", "value": "v=spf1 a -all" }, { "ttl": 300, "type": "SOA", "rname": "abuse.confluence-networks.com", "value": "ns1.cnomy.com" }, { "ttl": 300, "type": "MX", "value": "~", "priority": 300 }, { "ttl": 900, "type": "NS", "value": "ns2.cnomy.com" }, { "ttl": 300, "type": "CNAME", "value": "9145.searchmagnified.com" }, { "ttl": 900, "type": "NS", "value": "ns1.cnomy.com" }, { "ttl": 822, "type": "A", "value": "208.91.196.145" } ]
Dns at	2026-10-20T01:30:38Z
注册记录	{ "registrar": "Tucows Domains Inc.", "registrar_iana_id": "69", "registrar_url": "http://www.tucows.com", "created": "2025-02-22T18:18:42Z", "updated": "2026-01-30T17:18:10Z", "expires": "2027-02-22T18:18:42Z", "status": [ "ok" ], "nameservers": [ "ns15.abovedomains.com", "ns16.abovedomains.com" ], "dnssec": "unsigned" }

单独的源记录 · 0 malicious + 0 suspicious / 92 · 2026-10-20 01:16:57 UTC

上述摘要和此服务提供商记录是在不同时间收集的。两者均仍可查阅；恶意和可疑的分类结果分别显示。

record_source: collected_observations.vt
analysis_at: 2026-10-20T01:16:57Z
fetched_at: 2026-10-25T17:32:33Z
stats: {"timeout":0,"harmless":55,"malicious":0,"suspicious":0,"undetected":37}

OTX

无社区引用

2026-10-25 17:33 UTC

打开报告