Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@support.gandi.net.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
staging[.]toshiba[.]professorflapjacks[.]com
“Valo.taxi - नकद और सवारी”
staging.toshiba.professorflapjacks.com — असत्यापित. घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 14/91 (ADMINUSLabs, BitDefender, CRDF, CyRadar, ESET); URLQuery 2 alerts; PhishDestroy score 95/100. रजिस्ट्रार: Gandi SAS.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, staging.toshiba.professorflapjacks.com, is flagged at an elevated risk level for credential phishing activity targeting users through deceptive login interfaces. The infrastructure presents itself under the guise of a legitimate service (Valo.taxi - नकद और सवारी) but operates as a fraudulent endpoint designed to harvest authentication details or financial information. Analysis indicates this is not a broad-spectrum phishing campaign but a targeted credential theft operation, likely leveraging social engineering tactics to exploit users seeking taxi or cash-based services.
Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on July 3, 2016, through Gandi SAS and currently resolves to the IP address 185.149.120.183. It appears on two security blocklists (PhishDestroy and OISD) and is flagged by 15 out of 95 security vendors on VirusTotal. The site employs a Let's Encrypt SSL certificate and utilizes modern web technologies, including Node.js, Bootstrap, Vue.js, Nuxt.js, HSTS, and DDoS-Guard, which may be used to obfuscate its true intent. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious classification. The page title, Valo.taxi - नकद और सवारी, suggests a localized or region-specific targeting strategy, possibly aimed at Hindi-speaking users.
Mitigation against this credential phishing threat requires immediate action from network administrators and end-users. Organizations should enforce DNS-level blocking for staging.toshiba.professorflapjacks.com and its associated IP, 185.149.120.183, across all security gateways and endpoint protection systems. Users should be educated to recognize phishing indicators, such as mismatched URLs, unsolicited login prompts, and requests for sensitive information. Given the domain's use of HSTS, browser-based warnings may be suppressed, making manual verification of domain legitimacy critical. Security teams are advised to monitor for related IOCs, including the unique seed 4461e3, and correlate this activity with other known phishing campaigns leveraging similar infrastructure. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for all potentially compromised accounts.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | staging.toshiba.professorflapjacks.com |
malicious | Sinkholed |
| DNS4EU | staging.toshiba.professorflapjacks.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: professorflapjacks.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain professorflapjacks.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासBootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% विश्वासVue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासDDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.
ddos-guard.net 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of staging.toshiba.professorflapjacks.com · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260503-43D9C7 Recipient: abuse@support.gandi.net क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।