Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@cosmotown.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
digital-grownt[.]com
Analyse phishing et sécurité de digital-grownt.com
“Problem loading page”
digital-grownt.com — Dernier actif connu (HTTP 200). Usurpation de l'identité de la marque : Genericscam; Type d'arnaque : Credential Phishing. Résumé des preuves: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); URLScan malicious verdict; PhishDestroy score 81/100. Bureau d’enregistrement: TuringSign.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
This domain is flagged as a high-risk credential harvesting phishing site, designed to deceive users into submitting sensitive login credentials. Analysis indicates the infrastructure is actively targeting individuals through deceptive landing pages, with the site currently displaying a 'Problem loading page' error, a common tactic to evade automated detection while maintaining operational readiness for targeted attacks.
Infrastructure analysis reveals the domain digital-grownt.com is registered through TuringSign Inc. d/b/a Cosmotown and resolves to the IP address 37.49.229.75. The domain appears on one security blocklist and is flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but confirmed malicious activity. The SSL certificate is issued by Let's Encrypt (YR2), a frequently abused certificate authority in phishing campaigns due to its low-cost and automated issuance process. The domain remains active, with no evidence of takedown or remediation efforts.
To mitigate risks associated with this credential harvesting phishing site, organizations should immediately block the domain and its resolving IP address (37.49.229.75) at the network perimeter. Security teams are advised to monitor for any outbound connections to this infrastructure, particularly from endpoints with access to sensitive systems. End-user education should emphasize the risks of credential submission on unverified sites, and multi-factor authentication should be enforced to reduce the impact of stolen credentials. Additionally, domain registrars and hosting providers should be notified to initiate takedown procedures under applicable abuse policies.
Couverture des données12 recorded checks
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 12 identified
YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
www.youtube.com Confiance à 100 %Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com Confiance à 100 %Smartsupp is a live chat tool that offers visitor recording feature.
www.smartsupp.com Confiance à 100 %OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.
owlcarousel2.github.io Confiance à 100 %jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.
code.jquery.com Confiance à 100 %jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confiance à 100 %Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com Confiance à 100 %Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com Confiance à 100 %Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Confiance à 100 %HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confiance à 100 %Analyse VirusTotal
Données factuelles et rapports externesIndependent lookups and source reports
PD-20260607-971C6A Recipient: abuse@cosmotown.com Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.