trustlayersfix[.]netlify[.]app
“Password Protection”
Ringkasan bukti
Analysis of trustlayersfix.netlify.app indicates that the site was hosted on Amazon’s infrastructure (AS14618) and resolved to the IP 98.84.224.111 located in the United States. The domain, created on 9 May 2018 and registered through Netlify, was serving a page titled “Password Protection” before being taken offline, as evidenced by an HTTP 404 response at the time of scanning. The TLS certificate presented was issued by DigiCert Inc., specifically a DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate, and the site employed HSTS, confirming the use of standard security headers despite its malicious purpose.
Five of ninety‑three VirusTotal scanners flagged the domain, and it appears on four independent blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The authoritative name servers are dns1.p01.nsone.net through dns4.p01.nsone.net, consistent with Netlify‑hosted deployments. The combination of a password‑related page title, the presence on multiple phishing‑focused blocklists, and the modest detection rate on VirusTotal strongly suggest that the site was being used for credential‑harvesting activities, likely targeting users who were directed to a “Password Protection” prompt.
While the site is currently offline, the infrastructure footprint remains observable. Defenders should continue to block the domain and its associated IP address at network perimeter devices, update URL filtering feeds with the listed blocklist identifiers, and monitor for any re‑registration of the same domain or similar Netlify‑hosted subdomains that reuse the “Password Protection” title. Further analysis of any residual DNS queries or TLS handshake logs could reveal additional campaign infrastructure or victim interaction attempts.
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 10/08/2026
7 sumber eksternal dipantau Tidak cocok
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Teknologi
3 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive