fennia[.]listanascita[.]shop
“Fennia”
fennia.listanascita.shop — Belum terverifikasi. Peniruan identitas merek: Google; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 12/91 (ADMINUSLabs, BitDefender, Chong Lua Dao, CRDF, CyRadar); PhishDestroy score 86/100. Registrar: Tucows.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis indicates that the domain fennia.listanascita.shop has been taken offline but remains listed on multiple security blocklists. The site was registered on 23 April 2025 through Tucows Domains Inc. and resolves to IP address 62.60.226.175, which is assigned to AS214351 FEMO IT SOLUTIONS LIMITED in Germany. The domain uses Cloudflare’s authoritative nameservers jake.ns.cloudflare.com and ruth.ns.cloudflare.com, a common choice for fast‑flux or short‑lived malicious infrastructure. No TLS certificate is present, meaning any traffic would be unencrypted HTTP.
VirusTotal reports that two of ninety‑five scanning engines flagged the domain, and the domain appears on one public blocklist, confirming its malicious reputation. Gridinsoft assigns a trust score of 0 out of 100, and the page title returned by the server is “Fennia”, which does not correspond to the advertised brand. The intelligence tags the campaign as a Google brand impersonation, consistent with the “brand impersonation” scam type. The domain has been blocked by the PhishDestroy service, further indicating that it was used for phishing‑related activity.
Because the site is currently offline, active probing is not possible, but the infrastructure details—German IP, Cloudflare nameservers, lack of SSL, and low trust score—are typical of short‑lived impersonation campaigns. Defenders should continue to block the IP address and domain at perimeter defenses, add the domain to internal phishing blocklists, and monitor the associated IP range for re‑use. Periodic re‑resolution of the domain is advised in case the actors reactivate the site, and any future HTTP responses should be inspected for credential‑stealing forms or redirects to known Google login endpoints.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: listanascita.shop
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain listanascita.shop behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive