VirusTotal
3 / 91
“Packers and Movers Bhagalpur | Call +91-8877777793”
www.redrosepackers.com impersonates a legitimate moving service in Bhagalpur, luring victims via fake contact details.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
This domain, www.redrosepackers.com, poses as a legitimate packers and movers service operating in Bhagalpur, India, using the phone number +91-8877777793 to establish false credibility. Analysis indicates the site is designed to deceive users into disclosing sensitive information, such as personal identification details, financial credentials, or advance payments for fraudulent services. The domain mimics a trusted local business, increasing the likelihood of successful social engineering attacks against individuals seeking relocation assistance. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain is flagged by 3 out of 95 security vendors on VirusTotal, while AlienVault OTX lists it in two distinct threat intelligence pulses. It resolves to the IP address 185.131.55.234 and appears on one security blocklist. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com on December 14, 2013, the domain employs a Let’s Encrypt SSL certificate to feign legitimacy. Detected technologies include Bootstrap, Apache HTTP Server, jQuery, and Google Analytics, which are commonly used in both legitimate and malicious websites to enhance functionality and tracking. Users who visited www.redrosepackers.com or interacted with the listed contact number should take immediate remedial actions. If personal or financial information was submitted, monitor accounts for unauthorized transactions and consider placing fraud alerts with credit bureaus. Reset passwords for any accounts using similar credentials, particularly if reused across platforms. Scan local devices for malware using updated security tools, as phishing sites may redirect to exploit kits or distribute malicious payloads. Report the incident to local cybercrime authorities and relevant financial institutions to mitigate potential fraud. Exercise caution with unsolicited communications claiming affiliation with moving or logistics services.
Gespeicherte Beobachtungen zum Vergleich zwischen Crawler und Browser für diesen Host sowie eine Echtzeit-Fingerabdruckprüfung für Verkehrsverteilungssysteme im Keitaro-Stil.
Anmerkung des Scanners: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-235972.invalid', port=80): Max retries exceeded with url: / (Caused by
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns90.dnshostserver.inns91.dnshostserver.inredrosepackers.compriority 10Location describes the IP network.
39654c73fb2161657e70530da10f672e30aecf6fd246ce15a4de1e0b0af33c64redrosepackers.comSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-235972.invalid · checked Jun 26, 2026
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Template-based draft · optional AI wording assistance requires separate consent
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenMelden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenAktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBeobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt