enjscaffolding[.]co[.]uk

The domain enjscaffolding.co.uk is assessed as a high-risk fake login phishing site. Analysis indicates that the domain was designed to impersonate Raiffeisen, a financial institution, to trick users into providing sensitive credentials.

This domain is flagged by 11 out of 95 security vendors on VirusTotal, indicating a moderate level of recognition among security tools. The domain was registered through IP6net Ltd on March 18, 2000, and resolves to the IP address 192.124.249.120. The website uses technologies such as WordPress, MySQL, PHP, Bootstrap, Cloudflare, Sucuri, Slick, and jQuery Migrate. The Gridinsoft trust score for this domain is 0/100, reflecting a complete lack of trust. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. The SSL certificate is issued by Starfield Technologies, Inc., which does not inherently indicate malicious intent but can be used to lend credibility to phishing sites. Google Safe Browsing flags this domain for social engineering, further corroborating its malicious nature.

To mitigate the risks associated with this fake login phishing site, users should avoid clicking on any links or entering credentials on pages that do not display the official Raiffeisen domain. Organizations should update their security policies to include specific guidelines on verifying the authenticity of login pages, particularly those related to financial institutions. Network administrators should implement DNS filtering and block the IP address 192.124.249.120 to prevent access to the site. Additionally, regular security awareness training and phishing simulations can help employees recognize and report such phishing attempts.