consumertestconnect[.]com
“ConsumerTestConnect - Paypal”
Pengamatan tersimpan
Perbedaan judul yang diamati
Ringkasan bukti
Consumertestconnect.com was observed on July 12, 2026 as an active brand‑impersonation campaign targeting PayPal users. The site presents a page titled “ConsumerTestConnect - Paypal” and mimics the visual layout of the legitimate PayPal checkout flow. The campaign is classified with a high risk level and is currently listed as active in threat‑intel feeds. Infrastructure analysis shows the domain was registered on March 06, 2026 through NameCheap, Inc. The authoritative name servers are ns-1338.awsdns-39.org, ns-1998.awsdns-57.co.uk, and ns-364.awsdns-45.com. DNS resolution points to IP address 100.30.61.232, which belongs to AS14618 Amazon.com, Inc., located in the United States. The site serves an SSL certificate issued by Amazon with the RSA 2048 M02 profile, indicating the use of a standard Amazon‑provided certificate. Detection metrics reveal limited but notable security vendor coverage: VirusTotal reports three of ninety‑five scanners flagging the domain, and Gridinsoft assigns a trust score of 1 out of 100. The domain appears on a single public blocklist and is actively blocked by PhishDestroy. HTTP response code 200 confirms that the server delivers content without redirection, consistent with a credential‑harvesting landing page. Defenders should add 100.30.61.232 to network blocklists and ensure that consumertestconnect.com is included in URL filtering rules. Continuous monitoring of NameCheap registrations for newly created domains referencing PayPal can provide early warning. Where possible, sinkholing the associated Amazon DNS zones or collaborating with the registrar to seize the domain may disrupt the campaign. End‑user education campaigns should emphasize verification of PayPal URLs and caution against unsolicited login prompts.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | consumertestconnect.com |
malicious | Sinkholed |
| DNS4EU | consumertestconnect.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Linimasa deteksi
-
VirusTotal
0 → 3
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive