natcsc[.]com
Pemeriksaan phishing dan keamanan natcsc.com
“National Cyber Security Centre â Premium Asset Recovery Service”
natcsc.com — Belum terverifikasi. Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 2/92 (Fortinet, Webroot); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 61/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
A newly identified threat actor operates natcsc.com, a counterfeit login portal currently under active investigation for credential harvesting. The domain mimics legitimate services to trick visitors into surrendering sensitive account details, which are then weaponized for financial fraud or identity theft. Security teams advise treating this domain as hostile and blocking access immediately to prevent potential compromise.
PhishDestroy’s analysis confirms the following technical indicators: the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 12, 2026, and currently resolves to the IP address 188.114.96.3. VirusTotal scanning (2 out of 95 detection engines) shows this infrastructure remains under the radar, with no detections recorded to date. The site utilizes a Let’s Encrypt SSL certificate—common among malicious actors—to lend false legitimacy to its fraudulent activities.
If you or anyone in your organization visited natcsc.com, do not enter any credentials or sensitive information. Disconnect from the network immediately and run a full antivirus scan. Report the incident to your security team and consider rotating passwords for any accounts that may have been exposed. Avoid interacting with the domain further, and block both the domain and IP at your firewall and email gateway to prevent follow-on attacks. PhishDestroy continues to monitor this threat and will update advisories as new intelligence emerges.
Intelijen Keamanan Jaringan Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | natcsc.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:53:54 UTC
Teknologi · 4 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org Keyakinan 100%Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of natcsc.com · checked May 18, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive