dasainfra.com — Ultimo attivo conosciuto (HTTP 200). Simulazione del marchio: Irs; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25); URLQuery 3 alerts; URLScan malicious verdict; PhishDestroy score 100/100. Registrar: CV. Rumahweb Indonesia.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Facts
PhishDestroy first observed dasainfra.com on May 19, 2026. Stored content metadata identifies Irs as the apparent target. The captured page title is “Internal Revenue Service | An official website of the United States government”. Evidence score: 100/100 (critical).
4 independent sources recorded positive findings: VirusTotal, DNS security resolvers, URLQuery, and URLScan. VirusTotal recorded 17 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25, CyRadar, ESET, Fortinet on Jul 27, 2026 at 03:43 UTC. DNS security checks returned 3 blocking results across 14 tested policies: Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. URLQuery recorded 3 threat-system alerts on May 19, 2026 at 18:30 UTC. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Irs and assigned phishing as its category on Jul 29, 2026 at 02:37 UTC.
HTTP 200 was recorded on Aug 9, 2026 at 10:12 UTC. Registration records for the domain list CV. Rumahweb Indonesia as the registrar and May 19, 2026 as the creation date. At collection time, the hostname resolved to 202.10.43.28 on AS58487 (CV. Rumahweb Indonesia). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
Copertura dei dati14 recorded checks
Indicatori di sicurezza
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 2 identified
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com Confidenza al 100%Apache is a free and open-source cross-platform web server software.
httpd.apache.org Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.