alluvi[.]info
“geg inc.”
Ringkasan bukti
The domain alluvi.info was registered on April 21 2026 through Fewmoretaps OU d/b/a Trustname.com and currently resolves to the IP address 83.217.214.144 located in RU. Its nameservers are configured as zeus.trustname.com and ares.trustname.com while the certificate was issued by Let's Encrypt under serial E7. The site returns HTTP status 200 and displays the page title geg inc. The domain remains active as of July 12 2026 and has been classified under the generic_phishing threat type with risk level under_investigation.
Infrastructure analysis reveals the domain appears on one security blocklist and is referenced in a single AlienVault OTX pulse. Gridinsoft assigns it a trust score of 0/100. VirusTotal reports 0/95 detections for the domain at the time of review. The registrar and hosting provider details are consistent with the observed nameserver delegation yet no additional ASN or geolocation attributes beyond the stated RU location have been confirmed in the available records.
Uncertainty persists regarding the precise payload or targeting mechanism because the threat type is recorded only as generic_phishing and the low detection count on public scanners leaves the full scope of distribution unknown. The single blocklist appearance and OTX pulse provide concrete indicators of malicious use but do not yet establish widespread campaign attribution or victim volume.
Defenders should block the IP 83.217.214.144 and the domain alluvi.info at network and endpoint layers while monitoring for new resolutions from the listed nameservers. Continued observation of the domain status is recommended given its active state and the under_investigation classification to capture any evolution in infrastructure or content.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 13/08/2026
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive