Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
vo[.]la
“단축URL 서비스 - VOLA”
साक्ष्य सारांश
Analysis of the domain vo.la, created on 10 March 2026, shows a high‑risk profile consistent with a generic phishing operation. The site resolves to the IPv4 address 49.247.197.182, which is announced by AS38700 SMILESERV and geolocated to South Korea. Registration is handled by TLD Registrar Solutions Ltd, and the authoritative name servers are ns1.iwinv.kr and ns2.iwinv.kr. The web server returns HTTP 200 responses and advertises a DigiCert Inc / RapidSSL TLS RSA CA G1 certificate, indicating that TLS termination is in place, but the certificate does not mitigate the underlying malicious intent. The page title, extracted from the HTML header, reads "단축URL 서비스 - VOLA", suggesting a Korean URL‑shortening service, yet no further content analysis is available.
Technical fingerprints include Bootstrap, Nginx, OpenResty, and Clipboard.js, all common components for legitimate sites and therefore not discriminative. Reputation scoring is extremely low: Gridinsoft assigns a trust score of 1 / 100, and VirusTotal reports that 4 of 91 scanning engines flag the domain as malicious. The domain appears on two public blocklists and is specifically listed by PhishDestroy and OpenPhish, reinforcing the phishing classification.
Defenders should treat any traffic to vo.la as hostile. Immediate actions include adding the domain and its IP address to network‑level deny lists, updating web‑proxy and DNS filtering policies to block the host, and monitoring outbound connections for possible data exfiltration attempts. Because the underlying payload or credential‑harvesting page has not been publicly dissected, deeper examination of the site’s content, redirection behavior, and any associated phishing kits is recommended if safe browsing environments permit. Continuous re‑evaluation is advised, as the domain remains active and could evolve its attack vectors.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260310-97DF39- कैप्चर किए गए पेज का शीर्षक
- 단축URL 서비스 - VOLA
- PDF दस्तावेज़
- PDF प्रमाण
कानूनी आधार
प्रमाण का पूरा पाठ
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | vo.la |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
पहचान समयरेखा
-
VirusTotal
0 → 4
-
VirusTotal
3 → 4
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of vo.la · checked Mar 10, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।