跳转到安全报告
域安全和威胁情报
ze-onlinedelivery.netlify.app 的网站图标

ze-onlinedelivery.netlify.app

简要

ze-onlinedelivery.netlify.app:冒充 Zedelivery,PhishDestroy 于 2026-10-24 检测到。风险:高(68/100)。注册商:Netlify。状态:内容不可用。托管:Amazon.com, Inc。请勿输入登录凭据,也不要连接钱包。

“Zé Delivery - Link Exclusivo”

注册商
Netlify
Resolved IP
35.157.26.135
PhishDestroy assessment 高
可用性 内容不可用 最新观察中的内容不可用 观察到 · HTTP probe
Record details & risk signals
2026年10月24日 CDN
自动品牌标签:Zedelivery
URLScan
页面快照
打开图库
API
该域名已被标记为恶意域名
PhishDestroy 取证分析标记了该域。 请格外小心——不要输入凭据或个人信息。
报告概览

冒充 Zedelivery: ze-onlinedelivery.netlify.app — 内容不可用 (HTTP 404). 证据摘要: URLScan malicious verdict; PhishDestroy score 68/100. 注册商: Netlify.

The evidence summary below uses retained observations. Each source keeps its own collection date.

来源证据 1 sources
来源ResultRecorded · UTCEvidence

URLScan

恶意

打开报告

结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。

关于 ze-onlinedelivery.netlify.app 的问题

ze-onlinedelivery.netlify.app 是正规网站吗?

不是。PhishDestroy 将 ze-onlinedelivery.netlify.app 归类为“冒充 Zedelivery”(风险:高,68/100),首次检测于 2026-10-24。请将该网站视为不安全。

在 ze-onlinedelivery.netlify.app 连接钱包安全吗?

不安全。请勿在 ze-onlinedelivery.netlify.app 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。

如果我使用过 ze-onlinedelivery.netlify.app,该怎么办?

更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。

延伸阅读

Blocklist matchesPhishDestroy 1
PhishDestroy PhishDestroy list 查看来源

已保存的截图 · 5 张截图

域名详情

域名
URLScan verdict 恶意 score 100 Phishing brand: Zedelivery report ↗
IP Context Netlify shared edge origin IP hidden Edge-IP 声誉不属于此域。
平台提供商 Netlify US(US)
滥用举报联系方式abuse@netlify.com
HTTP 状态码404 Not Found
技术详情Provenance & timestamps
首次发现2026年10月24日
DOM Analysisanalyzed 2026年10月24日score 68/100
Submitted URLhttp://ze-onlinedelivery.netlify.app/
Favicon Hash
Observed page title
Zé Delivery - Link Exclusivo
TLS 证书
颁发者 DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1 · 存储的有效期将在 146 天后结束

网络 & 证书

已存档技术证据

网络 & DNS

Shared CDN edge
Resolved IP
35.157.26.135
网络 ASN
AS16509
Organization
Amazon.com, Inc.
Observed location
Frankfurt am Main, DE
Server header
Netlify

Edge-IP 声誉不属于此域。

位置信息描述的是 IP 网络。

TLS 证书

Issuer
DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1
生效时间
2026-02-16 00:00:00
到期时间
2027-03-19 23:59:59
Hostname coverage
已存档证书日期有效
Validity
在存档的有效期内
采集来源
PhishDestroy collector
证书指纹bc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478
证书名称 · 2 个 SAN
  • *.netlify.app
  • netlify.app

已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。

Latest Classified Outcome 2026-10-24 10:56:50 UTC

Primary outcome 非活动 reason: Http No Content 70% confidence
Attribution source: Current Http Probe
Evidence layers Availability: Root path has no content Content: Absent At Root DNS: Stale Registration: Unknown
Latest HTTP observation 非活动 Http No Content 70% 2026-10-24 10:56:50 UTC
RDAP registration 未知
Observed timeline last reachable: 2026-10-24 00:27:29 UTC current episode first observed: 2026-10-24 10:56:50 UTC observed RIP window: 2026-10-24 00:27:29 UTC → 2026-10-24 10:56:50 UTC · 10.49h midpoint estimate ≈ 2026-10-24 05:42:09 UTC · precision medium · basis bounded
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
举报此域名 提交证据,帮助保护他人

存档证据

Wayback Machine Snapshot
查看存档
已存档快照证据 1 snapshot

由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。

Archived HTTP response HTTP 200
Requested URL: http://ze-onlinedelivery.netlify.app/
Final URL: https://ze-onlinedelivery.netlify.app/
Zé Delivery - Link Exclusivo
响应
HTTP 200
HTML body
29.4 KB
Compressed
5.8 KB
Links
28 internal · 2 external
Selected response headers
Cache-Control: public,max-age=0,must-revalidate
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Server: Netlify
Security headers present
Strict-Transport-Security
HSTS: observed DNSSEC:未观测到 WAF / firewall: observed 伪装标记:未观测到
Saved response-header values · 13
Accept-Ranges
bytes
年龄
21202
Cache-Control
public,max-age=0,must-revalidate
Cache-Status
"Netlify Edge"; hit; ttl=31514799
Content-Encoding
gzip
Content-Length
5986
Content-Type
text/html; charset=UTF-8
Date
Sat, 24 Oct 2026 00:15:08 GMT
Etag
"b6309b4cec14737c955a39c55454aa87-ssl-df"
Server
Netlify
Strict-Transport-Security
max-age=31536000; includeSubDomains; preload
Vary
Accept-Encoding
X-Nf-Request-Id
01M5NM5SD88B3KNQ4XSK18NJTY

由采集器保留的数值;较长的值可能在采集时被截短。

Registration & observation details8

Availability observations

最近一次可访问观测
首次观测到结果
Observation window starts
Observation window ends
Estimated change time
Observation window · hours
10.49
Estimate basis
以观测时间为界
Estimate precision
中等

估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。

已采集的来源详情

已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。

Every stored field, with its source and date
URLScan · 2026-10-24T00:25:50Z

观察到: · Retrieved:

Uuid
01a16b4c-9a83-75d9-b631-a491bd024f94
Final url
https://ze-onlinedelivery.netlify.app/
状态
200
已重定向
https-only
Redirects
[
    {
        "to": "https://ze-onlinedelivery.netlify.app/",
        "from": "http://ze-onlinedelivery.netlify.app/",
        "status": 307
    }
]
Ip
2a05:d014:58f:6200::258
Contacted domains
[
    "fonts.gstatic.com",
    "cdnjs.cloudflare.com",
    "tracking.utmify.com.br",
    "connect.facebook.net",
    "cdn.jsdelivr.net",
    "cdn.utmify.com.br",
    "fonts.googleapis.com",
    "api6.ipify.org",
    "api.ipify.org"
]
Contacted IP addresses
[
    "2606:4700:20::ac43:44dd",
    "142.251.20.94",
    "2a00:1450:4001:c13::5f",
    "2607:f2d8:1:3c::4",
    "172.67.74.152",
    "157.240.0.6",
    "2a04:4e42:400::485",
    "104.17.24.14",
    "2606:4700:20::681a:bcd",
    "2a05:d014:58f:6200::258"
]
Asns
[
    "13335",
    "15169",
    "18450",
    "32934",
    "54113",
    "16509"
]
Countries
[
    "US",
    "DE"
]
Linked domains
[
    "www.facebook.com",
    "www.instagram.com"
]
Social
[
    "https://www.facebook.com",
    "https://www.instagram.com"
]
Document hash
f21cfb77e7b5898affd9698e291ba40e55cc1feea89fe81d2be8d1ad898ddf68
Script hashes
[
    "5d20fee9006bb3113fd7f1466cdff28c655e6e1c79843a66918b912aa9b18192",
    "efed556064472792be4fbc0ee9cf8fc68bb847b913c0fc450a8d11d6f1425c60",
    "126d1187b44babd873e9c6396d88f3be1808bb51c2bfcb1a7ba9cb90b73f5434",
    "11d49095a4125d05147916f5de0aefa1eca7c4cd5af42579b4e9dbf4fc6a8e63"
]
Globals
[
    "fbq",
    "_fbq",
    "a",
    "pixelId",
    "paramsList",
    "itemExpInDays",
    "__utmifyTrackers",
    "Sweetalert2",
    "SweetAlert",
    "Swal",
    "sweetAlert",
    "swal",
    "PRODUTOS",
    "estadosInput",
    "cidadesPorEstado",
    "CarrinhoData",
    "IMG",
    "ZE_OWNER_CPF",
    "gerarEmailPedido",
    "setCookie",
    "getCookie",
    "fetchLocation",
    "estadosNomeParaUF",
    "uf",
    "atualizarLocalizacao",
    "verificarIdade",
    "acessoNegado",
    "buildEnderecoForm",
    "modalEndereco",
    "modalContato",
    "distanciaPorCep",
    "escolherLocalizacao",
    "pixAtualCodigo",
    "abrirCheckoutPix",
    "mostrarPixModal",
    "verificarPagamento",
    "copiarPix",
    "fallbackCopiar",
    "carrinhoUrl",
    "updateCartBar"
]
Cookies
[
    "_fbp"
]
Storage keys
[
    "countdownEndTime",
    "lastExternalReferrer",
    "lastExternalReferrerTime"
]
Tls
{
    "san": [
        "*.netlify.app",
        "netlify.app"
    ],
    "cipher": "AES_128_GCM",
    "issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
    "subject": "*.netlify.app",
    "protocol": "TLS 1.3",
    "valid_to": "2027-03-19T23:59:59Z",
    "valid_from": "2026-02-16T00:00:00Z"
}
域名年龄(天)
149
Apex age days
149
Tls age days
250
TLS 有效天数
396
Requests
44
Provider verdicts
{
    "engines": {
        "tags": [
            "urlscan-ml",
            "urlscan-ml-60c5e22"
        ],
        "score": 95,
        "malicious": true
    },
    "overall": {
        "tags": [
            "phishing"
        ],
        "score": 100,
        "brands": [
            "zedelivery"
        ],
        "malicious": true,
        "categories": [
            "phishing"
        ]
    },
    "urlscan": {
        "tags": [
            "phishing"
        ],
        "score": 100,
        "brands": [
            "Zé Delivery"
        ],
        "malicious": true,
        "categories": [
            "phishing"
        ]
    }
}
HTTP headers
{
    "server": "Netlify",
    "content-type": "text/html; charset=UTF-8",
    "strict-transport-security": "max-age=31536000; includeSubDomains; preload"
}
VirusTotal · 2026-10-24T00:09:10Z

观察到: · Retrieved:

Vendor result counts
{
    "timeout": 0,
    "harmless": 0,
    "malicious": 0,
    "suspicious": 0,
    "undetected": 92
}
Reputation
0
注册商
Name.com, Inc.
创建
2018-05-08T22:48:05Z
Expires
2025-05-08T22:48:05Z
Updated
2024-04-11T16:00:14Z
首次发现
2026-10-23T12:48:03Z
DNS 记录
[
    {
        "ttl": 311,
        "type": "AAAA",
        "value": "2600:1f18:16e:df01::259"
    },
    {
        "ttl": 311,
        "type": "AAAA",
        "value": "2600:1f18:16e:df01::258"
    },
    {
        "ttl": 120,
        "type": "A",
        "value": "98.84.224.111"
    },
    {
        "ttl": 120,
        "type": "A",
        "value": "18.208.88.157"
    }
]
Dns at
2026-10-24T00:10:07Z
Jarm
40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319
Certificate
{
    "san": [
        "*.netlify.app",
        "netlify.app"
    ],
    "issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1",
    "serial": "cd5d0afb0611b5bd9d692535c0ca7c4",
    "sha256": "bc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478",
    "subject": "*.netlify.app",
    "valid_to": "2027-03-19T23:59:59Z",
    "valid_from": "2026-02-16T00:00:00Z"
}
注册记录
{
    "registrar": "Name.com, Inc.",
    "registrar_iana_id": "625",
    "registrar_url": "http://www.name.com",
    "created": "2018-05-08T22:48:05Z",
    "updated": "2024-04-11T16:00:14Z",
    "expires": "2025-05-08T22:48:05Z",
    "status": [
        "clientTransferProhibited"
    ],
    "nameservers": [
        "dns1.p01.nsone.net",
        "dns2.p01.nsone.net",
        "dns3.p01.nsone.net",
        "dns4.p01.nsone.net"
    ],
    "dnssec": "unsigned"
}
Website checks · 2026-10-24T00:50:55Z
Mail configuration
{
    "spf_lookups": 0
}
CAA 记录
{
    "count": 2,
    "domain": "netlify.app",
    "issuers": [
        "digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226"
    ]
}
Protective DNS results
{
    "resolvers": 12,
    "blocked_by": [
        "CloudFlare Family"
    ],
    "blocked_count": 1
}
Web archive observations
{
    "last": "2026-10-24T00:15:42Z",
    "first": "2026-10-24T00:15:42Z",
    "changes": 0,
    "days_archived": 1,
    "avg_page_bytes": 7191
}
页面标题与元数据
{
    "title": "Zé Delivery - Link Exclusivo"
}
Trackers
{
    "requests": 44,
    "trackers": [
        {
            "name": "Facebook",
            "company": "Meta",
            "country": "US",
            "category": "Advertising",
            "requests": 3
        },
        {
            "name": "Facebook Custom Audience",
            "company": "Meta",
            "country": "US",
            "category": "Advertising",
            "requests": 1
        },
        {
            "name": "Cloudflare",
            "company": "Cloudflare",
            "country": "US",
            "category": "Hosting",
            "requests": 5
        },
        {
            "name": "Google Fonts",
            "company": "Google",
            "country": "US",
            "category": "Hosting",
            "requests": 1
        },
        {
            "name": "Google Static",
            "company": "Google",
            "country": "US",
            "category": "Hosting",
            "requests": 3
        },
        {
            "name": "jsDelivr",
            "company": "jsDelivr",
            "category": "Hosting",
            "requests": 2
        },
        {
            "name": "ipify",
            "company": "ipify",
            "category": "Misc",
            "requests": 2
        },
        {
            "name": "Facebook Connect",
            "company": "Meta",
            "country": "US",
            "category": "Site Analytics",
            "requests": 2
        }
    ]
}
表单与混合内容
{
    "no_sri": [
        "https://cdn.utmify.com.br/scripts/utms/latest.js",
        "https://cdn.jsdelivr.net/npm/sweetalert2@11"
    ],
    "third_party_scripts": 2
}
状态
{
    "up": true,
    "code": 200,
    "timings": {
        "dns": 1,
        "tls": 14,
        "wait": 27,
        "connect": 8,
        "download": 10
    },
    "response_ms": 60
}
TLS connection
{
    "alpn": "h2",
    "cipher": "TLS_AES_128_GCM_SHA256",
    "protocol": "TLSv1.3",
    "versions": [
        "TLSv1.2",
        "TLSv1.3"
    ],
    "authorized": true,
    "forward_secrecy": true
}
Ports
{
    "open": [
        80,
        443
    ]
}
Carbon
{
    "bytes": 30413,
    "co2_grams": 0.0011,
    "cleaner_than": 48
}
Dns server
{
    "ns": [
        {
            "ip": "198.51.45.65",
            "host": "dns4.p01.nsone.net"
        },
        {
            "ip": "198.51.44.1",
            "host": "dns1.p01.nsone.net"
        },
        {
            "ip": "198.51.45.1",
            "host": "dns2.p01.nsone.net"
        },
        {
            "ip": "198.51.44.65",
            "host": "dns3.p01.nsone.net"
        }
    ],
    "zone": "netlify.app"
}
Cookies
{
    "cookies": [
        {
            "name": "_fbp",
            "same_site": "Lax"
        }
    ]
}
Location
{
    "ip": "2a05:d014:58f:6200::259",
    "asn": "16509",
    "org": "Amazon.com, Inc.",
    "city": "Frankfurt am Main",
    "country": "DE"
}
Ssl
{
    "issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1",
    "subject": "*.netlify.app"
}
DNS 记录
{
    "A": [
        "35.157.26.135",
        "63.176.8.218"
    ],
    "AAAA": [
        "2a05:d014:58f:6200::258",
        "2a05:d014:58f:6200::259"
    ]
}
Dnssec
{
    "ds": false,
    "rrsig": false,
    "dnskey": false
}
Hsts
{
    "header": "max-age=31536000; includeSubDomains; preload",
    "message": "Site is compatible with the HSTS preload list!",
    "compatible": true
}
HTTP security policies
{
    "xFrameOptions": false,
    "referrerPolicy": false,
    "xXSSProtection": false,
    "permissionsPolicy": false,
    "xContentTypeOptions": false,
    "contentSecurityPolicy": false,
    "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
    "crossOriginOpenerPolicy": false,
    "crossOriginEmbedderPolicy": false,
    "crossOriginResourcePolicy": false
}
Get ip
{
    "ip": "2a05:d014:58f:6200::259",
    "family": 6
}
Redirects
{
    "chain": [
        "https://ze-onlinedelivery.netlify.app"
    ]
}
Page links
{
    "external": [
        "https://www.facebook.com/",
        "https://www.instagram.com/"
    ],
    "external_count": 2,
    "internal_count": 24
}
HTTP headers
{
    "headers": {
        "server": "Netlify",
        "content-type": "text/html; charset=UTF-8",
        "strict-transport-security": "max-age=31536000; includeSubDomains; preload"
    }
}
已存档的观测历史2

由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。

  1. 可用性监测 · 记录状态

    未知→inactive

    http_no_content

  2. 可用性监测 · 首次采集记录

    可访问

已记录的活动

3 entries
  1. 已添加至 PhishDestroy

    ze-onlinedelivery.netlify.app

    查看来源
  2. URLScan

    Page captured

    查看来源
  3. 互联网档案馆

    Page archived

    查看来源

伪装检测

比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。

ze-onlinedelivery.netlify.app

证据与外部报告

深度分析
Help & reporting

您是否受到本网站的影响?

3 个证据信号组已关联 内容不可用
如果凭据已泄露,请立即报告。 切勿理会声称可追回资金的诈骗者。

如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。

Official reporting routes

警惕“数据恢复”诈骗! 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →

向当地主管部门报告

选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。

97个国家目录

Template-based draft · optional AI wording assistance requires separate consent

AI辅助草稿——事件详细信息由AI提供商处理 · 自行审核并提交
After a phishing incident

针对受害者的建议与指导

请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。

我应该立即采取什么措施?

紧急

停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。

  • 更改所有密码 — 电子邮件、Exchange 账户,以及任何使用同一密码的账户
  • 启用双因素认证 使用身份验证器应用(而非短信)。禁用基于短信的恢复功能
  • 冻结卡片 如果您在钓鱼网站上输入了银行信息

我应该为报告收集哪些信息?

联邦调查局(FBI)指南

请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗

  • 付款记录 — 如果已付款,请保存收据、金额、日期、支付服务商和收款方信息。
  • 确切日期和时间 — 每笔交易的详情以及与诈骗者的首次接触
  • 屏幕截图 — 诈骗网站、聊天消息、电子邮件、钱包交易、社交媒体
  • 所有网址和域名 诈骗者使用的(包括 ze-onlinedelivery.netlify.app)
  • 通信 — 诈骗者使用的电子邮件、短信、电话号码、用户名

即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。

我应该向哪里举报这起诈骗?

  • 联邦调查局(FBI)IC3 — 互联网犯罪投诉中心(美国联邦举报渠道)
  • 欧洲刑警组织 — 欧洲网络犯罪报告(欧盟)
  • Your bank or payment provider — 如果资金或银行卡信息已泄露,请通过官方联系方式尽快联系其反欺诈团队。
  • 当地警方 — 即使无法立即采取行动,也能留下正式记录

举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。

How do phishing scams typically work?

  • 虚假网站 — 与正规网站完全一致的克隆网站,仅域名略有改动
  • 猪的屠宰 — 通过Telegram/WhatsApp/交友软件花数周时间建立信任,随后钱被骗走
  • 退款诈骗 — 诈骗者冒充资金追回机构并索要预付费用。在独立核实服务方之前,切勿分享助记词或付款
  • 利用人工智能实施的诈骗 — 深度伪造、自动化网络钓鱼以及人工智能生成的网站,使得欺诈行为更难被察觉

将来我该如何保护自己?

  • 将官方网站添加到书签 — 切勿点击来自电子邮件、私信或广告中的链接
  • 验证域名 — 查看 PhishDestroy 在进行互动之前,请检查HTTPS、拼写和域名注册时间。
  • “好得令人难以置信”=骗局 — 保证收益、名人代言、紧迫的截止日期

Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams

随时掌握最新信息,确保安全

请实时监控威胁,或者如果您认为这是误报,请对该条目提出异议

实时威胁动态 对该列表提出异议
关于本报告来源、观测日期与更正

本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。

快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。

嵌入此报告附带证据链接的紧凑型小组件
HTML · IFRAME

嵌入此报告

在您的网站或博客上分享此威胁情报

embed.html
<iframe
  src="https://phishdestroy.io/zh/embed/domain/ze-onlinedelivery.netlify.app"
  title="PhishDestroy threat report for ze-onlinedelivery.netlify.app"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>