ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.

Notification and current-status evidence

The sent-report ledger records the first outgoing report at 2026-07-14 12:40:51 UTC. The recorded recipient is abuse@hetzner.com. The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report

1 month

Reports sent

Latest case ID

PD-20260714-CC704D

Current status

Observed active at latest stored check

Seguridad de dominio e inteligencia sobre amenazas

pmpaket[.]eu

“PMPaket — доставка посылок и документов из Европы в Россию и СНГ”

Veredicto de amenaza Crítico Puntuación de evidencia 71/100

Disponibilidad No verificado La accesibilidad actual no está verificada

Señales de riesgo

VirusTotal detecciones: 4/91

14/07/2026 1 Report Sent

Resumen del informe

pmpaket.eu — No verificado. Resumen de las pruebas: VirusTotal 4/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Registrador: domainfactory.

El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.

Resumen de las pruebas

CRÍTICO

Analysis of pmpaket.eu shows an active generic_phishing campaign under investigation. The domain was registered through domainfactory GmbH and resolves to the IPv4 address 167.235.121.74. Authoritative name servers are ns39.domaincontrol.com and ns40.domaincontrol.com, indicating reliance on a well-known DNS provider. The MX record points to smtp.google.com, a configuration commonly used to facilitate email-based credential harvesting. VirusTotal reports that the domain has been scanned by 91 security vendors, with none currently flagging it; this absence of detections does not constitute evidence of safety. The infrastructure details suggest a low‑profile hosting setup, but the presence of a legitimate‑looking mail server may increase the likelihood of successful phishing attempts. Uncertainties remain regarding the content hosted on the site, as no page analysis is available. Defensive actions should include adding the domain and its resolving IP to blocklists, monitoring DNS queries for the associated name servers, and inspecting email traffic for outbound messages to smtp.google.com originating from internal users. Continuous re‑scanning on VirusTotal and similar platforms is advised to capture any future detections.

VirusTotal

4 det.

URLScan

Denunciar ↗

Certificado TLS

Let's Encrypt / YR2

Estado observado

No verificado

DestroyList

En lista

Reports Sent

Cobertura de los datos VirusTotal 4 / 91 URLQuery checked — no detections recorded PhishStats no comprobado OTX no community references CF Radar scan completed URLScan capture informe almacenado URLScan verdict Análisis finalizado Bloqueos de DNS no comprobado TLS valid certificate, 40d WHOIS not parsed Captura de pantalla 3 captures · 3 sources Cadena de redireccionamientos no sondeado

Proceso de respuesta ante amenazas Pipeline

Descubrimiento

Checks

Reports

Disponibilidad

10/11

Sent Report Recorded

Stored sent-report record for registrar domainfactory GmbH, hosting provider, 1 abuse contact

abuse@hetzner.com

14/07/2026

Estado de la lista de bloqueados pública

Captura guardada

Screenshot of pmpaket.eu — **URLScan capture**2026-07-14 10:18 UTC 2 / 3

Ver a tamaño completo Informe de origen Wayback Descargar

Inteligencia de dominios

Dominio

URLScan Verdict Análisis finalizado score 0 report ↗

Telegram IoCs 2 extracted https://t.me/sergey_pmpaket https://t.me/pmpaket

Servidor / ASN HTTP Server · AS24940 Hetzner Online GmbH

Reputación de IP abuse score 0/100 0 reports checked 15/07/2026

Registrador domainfactory

Contacto de abusoabuse@hetzner.com

Registro de la ICANNRegistradores oficiales acreditados por la ICANN →

Búsqueda en WHOISRDAP de ICANN para pmpaket.eu →

Dirección IP 167.235.121.74

Ubicación

Nuremberg, DE

RedAS24940 · Hetzner Online GmbH

IP inversaviewdns.info → rapiddns.io →

Detalles técnicosDNS, SAN de SSL, marcas de tiempo

Primera detección14/07/2026

DOM Analysisanalyzed 14/07/2026score 71/100

IoC Extractionscanned 29/07/20260 wallet · 2 Telegram IoCs

Submitted URLhttps://pmpaket.eu/

Servidores de nombresns39.domaincontrol.comvisitwww.eurid.euformoreinfons40.domaincontrol.com

MX Records1 smtp.google.com

TLS Fingerprint

TLS Observationvalid from 25/06/2026scanned 14/07/2026

Favicon Hash

Case ID

Título de la página

PMPaket — доставка посылок и документов из Европы в Россию и СНГ

Certificado TLS

Valid transport encryption · Emitido por Let's Encrypt / YR2 · valid for 40 days

Tecnologías · 11 identified

1C-Bitrix

CMS Ecommerce

1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.

www.1c-bitrix.ru 100 % de confianza

PHP

Programming languages

PHP is a general-purpose scripting language used for web development.

php.net 100 % de confianza

Yandex.Metrika

Analytics

Yandex.Metrica is a free web analytics service that tracks and reports website traffic.

metrika.yandex.com 100 % de confianza

reCAPTCHA

Seguridad

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

www.google.com 100 % de confianza

jQuery UI

JavaScript libraries

jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.

jqueryui.com 100 % de confianza

jQuery CDN

CDN

jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.

code.jquery.com 100 % de confianza

jQuery

JavaScript libraries

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jquery.com 100 % de confianza

Google Tag Manager

Tag managers

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

www.google.com 100 % de confianza

Google Hosted Libraries

CDN

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

developers.google.com 100 % de confianza

Google Analytics

Analytics

Google Analytics is a free web analytics service that tracks and reports website traffic.

google.com 100 % de confianza

Facebook Pixel

Analytics

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

facebook.com 100 % de confianza

Detected via Cloudflare Radar · Wappalyzer engine

Denunciar este dominio Envía pruebas y ayuda a proteger a los demás

Análisis de VirusTotal

4 / Los proveedores de seguridad de 91 marcaron este dominio

View on VT

Last analyzed 2026-07-27 04:01:23 UTC Previous stored snapshot: 4 detections

alphaMountain.ai

Forcepoint ThreatSeeker

Gridinsoft

SOCRadar

Datos y informes externos

Análisis de seguridad

URLScan Analyzed VirusTotal 4 det. ChainPatrol URLQuery Analyzed Gridinsoft SSL Laboratorios Stored TLS valid CF Radar Open report WOT ScamAdviser Comprobador de listas negras URL nula Sucuri SiteCheck Observatorio MDN

Submitted Evidence Snapshot

Sent: 2026-07-14 12:40:51 UTC Ledger records: 1 Case ID: PD-20260714-CC704D Recipient: abuse@hetzner.com

Page title stored with report: PMPaket — доставка посылок и документов из Европы в Россию и СНГ

URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 140.3 KB

OSINT e inteligencia

Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Rock Sign-in search IntelX crt.sh Certificados WHOIS Wayback

DNS y redes

nslookup.io DNS bgp.tools ASN /Ruta

SEO y dominios

SpyFu Moz DA/PA Ahrefs Enlaces entrantes Análisis en profundidad

¿Te ha afectado esta página web?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.

IC3 del FBI

Denunciar delitos cometidos a través de Internet en los Estados Unidos

Federal tips line1-800-CALL-FBI

Europol

Encuentre el canal de denuncia oficial para su país de la UE

National police directory

Action Fraud

Denunciar fraudes y delitos cibernéticos en Inglaterra, Gales e Irlanda del Norte

Contact centre0300 123 2040

PhishDestroy listing review No es un informe policial

Recurso sobre el dominio

Solicite una revisión si es propietario de este dominio y cree que el listado es incorrecto

¡Cuidado con los estafadores que se hacen pasar por empresas de recuperación de datos! Los delincuentes pueden volver a contactar a las víctimas haciéndose pasar por investigadores, abogados o agentes de recuperación. No pague tarifas por adelantado ni comparta credenciales. Más información sobre el fraude en las ayudas de recuperación →

Informa a las autoridades locales

Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.

directorio de 97 países

Borrador asistido por IA: el proveedor de IA procesa los detalles del incidente Revíselo y envíelo usted mismo

Mantente informado, mantente a salvo

Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.

Flujo de amenazas en tiempo real Reclamar este anuncio

HTML · IFRAME

Incrustar este informe

Comparte esta información sobre amenazas en tu página web o blog

embed.html

<iframe
  src="https://phishdestroy.io/es/embed/domain/pmpaket.eu"
  title="PhishDestroy threat report for pmpaket.eu"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

pmpaket[.]eu

Proceso de respuesta ante amenazas Pipeline

Estado de la lista de bloqueados pública

Captura guardada

Inteligencia de dominios

Análisis de VirusTotal