VirusTotal
13 / 91
“Energen - Free Bootstrap 4 Template by Colorlib”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse-contact@sav.com.
The latest stored availability evidence still shows the domain reachable; 9 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
templuz.digital — Letzter bekanntermaßen aktiv (HTTP 200). Betrugstyp: Impersonation. Zusammenfassung der Beweislage: VirusTotal 13/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET); URLQuery 8 alerts; Spamhaus DBL_SPAM; CF Radar malicious; PhishDestroy score 100/100. Registrar: Sav.com.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
13 / 91
8 threat-system alerts
Meldenprovider verdict: malicious
MeldenDBL_SPAM
checked — no match recorded
24 community references
Meldengespeicherter Bericht
Melden Analyse abgeschlossen
MeldenChecked; no threat flag recorded
Melden| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | maps.googleapis.com/maps-api-v3/api/js/63/5d/common.js |
audit | Hunting_JS_WebAssembly |
| Cloudflare DNS | templuz.digital |
malicious | Sinkholed |
| OpenDNS | templuz.digital |
phishing | Phishing Block |
| DigiCert UltraDNS | templuz.digital |
malicious | Sinkholed |
| Hagezi Threat Feed | templuz.digital |
malicious | Sinkholed |
| DNS4EU | templuz.digital |
malicious | Sinkholed |
| Quad9 DNS | templuz.digital |
malicious | Sinkholed |
| DNS0 Zero | templuz.digital |
malicious | Sinkholed |
The domain templuz.digital, registered with Sav.com, LLC, presents itself as a generic phishing operation and has a critical threat score of 95/100. The site is currently down, indicating it may have been taken down due to malicious activity. VirusTotal reports that 15 out of 95 security vendors, including ESET and Sophos, have flagged this domain as malicious, with one public blocklist entry recorded.
The domain was created on October 31, 2025, and first detected on January 7, 2026. The hosting IP is 66.85.46.254. No registrar data is available beyond the registrar name, suggesting potential use of privacy protection or recent scrubbing. Block the domain at the perimeter and submit an abuse report to the registrar.
Gespeicherte Beobachtungen zum Vergleich zwischen Crawler und Browser für diesen Host sowie eine Echtzeit-Fingerabdruckprüfung für Verkehrsverteilungssysteme im Keitaro-Stil.
CaddyAnmerkung des Scanners: alive_content: raw=ok; http=200; via=https_proxy; server=Caddy
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns2.all-harmless.domainsLocation describes the IP network.
16 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Von 1 Community-Mitglied gemeldet; erstmals gesehen am 07.01.2026
PD-20260107-BB8878 Recipient: abuse-contact@sav.com Policy Violations: Acceptable Use Policy (AUP): The domain templuz.digital is engaged in phishing activities, which are strictly prohibited under your AUP. This includes the use of deceptive practices to obtain sensitive information from users. Terms of Service (TOS): The continued operation of this domain constitutes a violation of your TOS, which reserves the right to suspend or terminate services for any illegal activities, including fraud and deception. Applicable Laws (Unknown): Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which encompasses phishing schemes that aim to deceive users into providing personal information. Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, which is applicable to the phishing activities associated with this domain. CAN-SPAM Act: This U.S. law regulates commercial email and prohibits misleading headers and deceptive subject lines, both of which are utilized in phishing attacks. Regulatory Note: Failure to take immediate action against templuz.digital may expose your organization to legal liability and regulatory scrutiny. Non-compliance with your own policies and applicable laws could result in severe penalties.
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Template-based draft · optional AI wording assistance requires separate consent
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenMelden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenAktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBeobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt