eczakozmetik[.]net
“This website domain has been seized by Microsoft”
eczakozmetik.net — Belum terverifikasi. Peniruan identitas merek: Microsoft; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 21/91 (ADMINUSLabs, alphaMountain.ai, AlphaSOC, Antiy-AVL, BitDefender); URLQuery 4 alerts; 1 external blocklist match (CryptoFirewall); PhishDestroy score 100/100. Registrar: MarkMonitor.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain eczakozmetik.net is currently active and has been classified as a high‑risk brand‑impersonation site targeting Microsoft. Infrastructure analysis shows the domain was registered on May 22, 2024 through MarkMonitor, Inc., and resolves to IP address 40.91.108.115, which is hosted in a United States cloud environment (westus2 region). The domain uses nameservers ns001.microsoftinternetsafety.net, ns002.microsoftinternetsafety.net, and ns911a.micro, further linking it to Microsoft‑related infrastructure. An SSL certificate issued to Microsoft Corporation by a Microsoft‑affiliated Certificate Authority validates the connection, and HTTP requests receive a 302 redirect to a page titled "This website domain has been seized by Microsoft". Reputation services indicate severe distrust: Gridinsoft assigns a score of 0/100, Scamadviser 1/100, and 21 of 91 security vendors on VirusTotal flag the domain. It is listed on two blocklists (PhishDestroy and CryptoFirewall). While the exact page content beyond the title has not been examined, the observed indicators collectively confirm a deliberate attempt to impersonate Microsoft and to deceive users. Defenders should immediately block eczakozmetik.net at network and endpoint layers, monitor DNS queries for the associated nameservers, and incorporate the IP address and certificate details into threat‑intel feeds. Continuous re‑evaluation is advised to detect any changes in hosting or payload delivery.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | www.noticeofpleadings.net |
malicious | Sinkholed |
| Hagezi Threat Feed | eczakozmetik.net |
malicious | Sinkholed |
| DNS4EU | eczakozmetik.net |
malicious | Sinkholed |
| Quad9 DNS | eczakozmetik.net |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive