gov-nillion[.]xyz
gov-nillion.xyz — Konten tidak tersedia. Ringkasan bukti: VirusTotal 10/95 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 80/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
gov-nillion.xyz is currently listed as an offline generic phishing site. The domain was registered through Dynadot LLC on 5 December 2025 and resolves to the Cloudflare edge address 188.114.97.3, which is assigned to ASN 13335 (Cloudflare, Inc.) located in the United States. No TLS certificate is presented for the domain, indicating that HTTPS connections are not available. The infrastructure uses Cloudflare’s default nameservers alexa.ns.cloudflare.com and randall.ns.cloudflare.com, a common configuration for malicious actors seeking rapid deployment.
Reputation services have assigned a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has already taken the domain offline and reports it as blocked. VirusTotal analysis shows that 10 of 95 scanned security vendors flagged the domain, confirming malicious classification despite the relatively low detection ratio. The limited detection count and single blocklist entry suggest that the campaign may have been short‑lived or narrowly targeted.
Defenders should add 188.114.97.3 and the domain name to deny‑list rules across firewalls, DNS filters, and proxy solutions, and monitor for any resurgence of similar Cloudflare‑hosted infrastructure. Ongoing observation of Dynadot‑registered domains created after December 2025 that resolve to the same IP range is recommended to catch potential re‑use. Because the site is offline, active mitigation is limited to preventive blocking, but future requests to the domain should be logged and investigated for possible credential harvesting attempts. The evidence set, while concise, provides sufficient confidence to treat gov-nillion.xyz as a confirmed phishing host.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive