server604113[.]nazwa[.]pl
“server604113.nazwa.pl”
Riepilogo delle prove
The domain server604113.nazwa.pl is currently classified as a high‑risk impersonation phishing site. Intelligence sources label the activity as generic_phishing with a WordPress impersonation vector. The site returns HTTP 200 and presents a page title identical to the domain name, indicating that no additional branding or target information has been observed. Infrastructure analysis shows the domain resolves to IP 85.128.225.18, hosted in Poland under AS15967 belonging to Nazwa.pl Sp. z o.o. The domain was originally registered on 24 December 1999 through the same registrar, and its authoritative name servers are ns1.nazwa.pl, ns2.nazwa.pl, and ns3.nazwa.pl. The TLS certificate presented is issued to Nazwa.pl Sp. z o.o. (nazwaSSL DV TLS G2 R29 CA), confirming the hosting provider’s involvement but offering no indication of malicious intent. Detection platforms have flagged the domain on multiple blocklists, including PhishDestroy and PhishingDB. VirusTotal scans have resulted in five out of ninety‑five security vendors marking the host as malicious, and Gridinsoft assigns a trust score of zero out of one hundred. The web stack comprises Apache HTTP Server with client‑side libraries such as jQuery, Google Hosted Libraries, and Google Analytics, which are commonly found in compromised or fraudulent sites. Defenders should prioritize the immediate inclusion of server604113.nazwa.pl in network‑level deny lists and email gateway filters, as the domain is actively serving content and is associated with a confirmed phishing campaign. Continuous monitoring of the IP address 85.128.225.18 for any changes in reputation or new indicator sets is advised. Analysts should also watch for future TLS certificate updates or alterations to the hosting infrastructure that could signal a shift in operational tactics.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo