raeuten-carda[.]winee[.]cc
“conciergeholding.com”
raeuten-carda.winee.cc — Konten tidak tersedia (HTTP 502). Ringkasan bukti: VirusTotal 15/95 (BitDefender, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker); PhishDestroy score 95/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis indicates that the domain raeuten-carda.winee.cc was registered through Gname.com Pte. Ltd. on December 31, 2024. The domain resolves to the Cloudflare IP address 172.67.218.12, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Both authoritative nameservers, alaric.ns.cloudflare.com and angelina.ns.cloudflare.com, are also Cloudflare‑controlled, suggesting the site was hosted behind Cloudflare’s CDN and WAF services. No TLS certificate was presented during connection attempts, indicating that HTTPS was not configured at the time of investigation. The HTTP response is currently offline, and the site has been taken down, as confirmed by the “taken offline” status in the intelligence feed.
The page title returned by the server is “conciergeholding.com”, a title that does not match the domain name and may have been used to mislead visitors or to obscure the true purpose of the site. The domain has been flagged by multiple security vendors: fifteen of ninety‑five VirusTotal scanners reported it as malicious, and Gridinsoft assigned a trust score of zero out of one hundred. It appears on one external blocklist and has been actively blocked by the PhishDestroy mitigation service. These detections collectively point to the domain being involved in a generic phishing campaign.
Because the site is no longer reachable, a direct content analysis is not possible, leaving the exact phishing kit or targeted brand unknown. Investigators should continue to monitor the associated IP address and Cloudflare nameservers for any re‑activation or similar domains that reuse the same registration patterns. Defensive actions include adding the IP 172.67.218.12 to firewall deny lists, extending existing blocklist rules to cover the domain, and ensuring endpoint protection solutions are updated to reflect the fifteen VirusTotal detections.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive