server604113[.]nazwa[.]pl
“server604113.nazwa.pl”
Ringkasan bukti
The domain server604113.nazwa.pl is currently classified as a high‑risk impersonation phishing site. Intelligence sources label the activity as generic_phishing with a WordPress impersonation vector. The site returns HTTP 200 and presents a page title identical to the domain name, indicating that no additional branding or target information has been observed. Infrastructure analysis shows the domain resolves to IP 85.128.225.18, hosted in Poland under AS15967 belonging to Nazwa.pl Sp. z o.o. The domain was originally registered on 24 December 1999 through the same registrar, and its authoritative name servers are ns1.nazwa.pl, ns2.nazwa.pl, and ns3.nazwa.pl. The TLS certificate presented is issued to Nazwa.pl Sp. z o.o. (nazwaSSL DV TLS G2 R29 CA), confirming the hosting provider’s involvement but offering no indication of malicious intent. Detection platforms have flagged the domain on multiple blocklists, including PhishDestroy and PhishingDB. VirusTotal scans have resulted in five out of ninety‑five security vendors marking the host as malicious, and Gridinsoft assigns a trust score of zero out of one hundred. The web stack comprises Apache HTTP Server with client‑side libraries such as jQuery, Google Hosted Libraries, and Google Analytics, which are commonly found in compromised or fraudulent sites. Defenders should prioritize the immediate inclusion of server604113.nazwa.pl in network‑level deny lists and email gateway filters, as the domain is actively serving content and is associated with a confirmed phishing campaign. Continuous monitoring of the IP address 85.128.225.18 for any changes in reputation or new indicator sets is advised. Analysts should also watch for future TLS certificate updates or alterations to the hosting infrastructure that could signal a shift in operational tactics.
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 13/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive