lineastationeryco[.]com

Analysis of lineastationeryco.com, observed on 24 July 2026, shows an active brand‑impersonation infrastructure targeting the Linea brand. The domain was registered on 18 August 2025 through GoDaddy.com, LLC and is hosted on Amazon’s AS16509 network (IP 13.248.243.5, United States). DNS resolution points to GoDaddy’s default nameservers ns15.domaincontrol.com and ns16.domaincontrol.com, and the domain resolves to a single A record. The site delivers an HTTP 200 response and presents a TLS certificate issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2, confirming the use of a legitimate‑looking SSL chain.

Content analysis reveals the page title “Linea Stationery & Co.” and the presence of GoDaddy Website Builder, RequireJS, reCAPTCHA, Re:amaze, and HTTP Strict Transport Security (HSTS). The MX record points to lineastationeryco-com.mail.protection.outlook.com, suggesting the use of Microsoft’s email protection service for outbound mail. The domain appears on one security blocklist and has been flagged by PhishDestroy, indicating that threat‑intelligence feeds have already identified it as malicious. Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports two detections out of ninety‑five scanners, reinforcing the malicious classification.

While the public page content has not been captured, the combination of a recent registration, Amazon hosting, legitimate‑sounding SSL, and the explicit brand‑impersonation label constitute strong evidence of a phishing campaign. Uncertainty remains regarding the exact payload delivered to victims, the extent of compromised accounts, and any secondary infrastructure that may be leveraged for credential harvesting. Defenders should block DNS resolution to 13.248.243.5, add the domain to email and web filtering rules, monitor for outbound traffic to the associated MX host, and continue to track any new detections from sandbox or endpoint solutions.