om4qafig[.]sellfy[.]store
“Store Doesn't Exist”
om4qafig.sellfy.store — Non verificato. Riepilogo delle prove: VirusTotal 9/93 (Criminal IP, alphaMountain.ai, CyRadar, ESET, Forcepoint ThreatSeeker); URLQuery 5 alerts; CF Radar malicious; PhishDestroy score 78/100. Registrar: Go Daddy.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of om4qafig.sellfy.store indicates that the domain was registered on February 21 2026 through Go Daddy, LLC and points to the Amazon‑owned IP address 3.214.66.127 (AS14618). The hosting environment serves content via Nginx with OpenResty and includes jQuery, and the site presents a Let’s Encrypt certificate issued under the E7 profile. An HTTP request returns a 404 response and the page title is “Store Doesn’t Exist,” which aligns with the current offline status.
VirusTotal records show that nine of ninety‑three scanning engines have flagged the domain, and the domain is listed on a single external blocklist that has been consumed by PhishDestroy, which is actively blocking it. The domain’s DNS resolves through Cloudflare name servers kara.ns.cloudflare.com and will.ns.cloudflare.com, indicating use of Cloudflare’s DNS proxy. While the evidence confirms that the domain is associated with a generic phishing campaign and has been identified by multiple security vendors, the limited number of blocklist entries and the recent creation date mean that broader detection coverage may still be evolving.
Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑appearance of the site on additional reputation feeds, and consider adding the IP address 3.214.66.127 to any host‑based deny lists. Ongoing verification of the SSL certificate and periodic re‑scans with multi‑engine services are recommended to capture any future changes in malicious behavior.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | om4qafig.sellfy.store |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | om4qafig.sellfy.store |
malicious | Sinkholed |
| OpenPhish | om4qafig.sellfy.store |
phishing | Phishing - BT Group plc |
| DNS0 Zero | om4qafig.sellfy.store |
malicious | Sinkholed |
| OpenPhish | om4qafig.sellfy.store/ |
phishing | Phishing - BT Group plc |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 3 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Confidenza al 100%OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.
openresty.org Confidenza al 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo