MALICIOUS — CRITICAL
orijinalecza.net 피싱 및 보안 점검
orijinalecza[.]
PhishDestroy identifies orijinalecza.net as an active Microsoft brand impersonation domain designed to deceive users through counterfeit Microsoft branding and false seizure notices.
- VirusTotal
- 21/91
- Blocklists
- 1 · CryptoFirewall
- 가용성
- 마지막으로 알려진 활성 · HTTP 302
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
orijinalecza.net — 마지막으로 알려진 활성 (HTTP 302). 브랜드 사칭: Microsoft; 사기 유형: Brand Impersonation. 증거 요약: VirusTotal 21/91 (ADMINUSLabs, alphaMountain.ai, AlphaSOC, Antiy-AVL, BitDefender); URLQuery 3 alerts; PhishStats feed match (24); 1 external blocklist match (CryptoFirewall); PhishDestroy score 100/100. 등록기관: MarkMonitor.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Evidence Analysis
PhishDestroy identifies orijinalecza.net as an active Microsoft brand impersonation domain designed to deceive users through counterfeit Microsoft branding and false seizure notices. The domain (registered June 10, 2024 via MarkMonitor, Inc.) serves a fraudulent page claiming 'This website domain has been seized by Microsoft' while leveraging a fraudulent SSL certificate issued to Microsoft Corporation. This impersonation tactic aims to trick visitors into surrendering credentials or downloading malware under the guise of Microsoft enforcement actions. Technical indicators confirm elevated risk: the domain resolves to IP 40.91.108.115, appears on 1 security blocklist, and is blocked by Maltrail. VirusTotal analysis shows 21 out of 95 security vendors flagging this domain as malicious, indicating significant but not universal detection of the threat. The combination of recent registration (June 2024), spoofed SSL certificates, and Microsoft branding creates a convincing but malicious facade that could evade casual scrutiny. Users who visited this domain should immediately run a full antivirus scan, change any passwords entered on the site, and monitor for unusual account activity. Avoid interacting with prompts for downloads or login credentials on this domain. Report the domain to your security team and consider blocking it at the network perimeter. If financial or sensitive data was entered, contact the appropriate fraud department and monitor accounts for unauthorized transactions.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
데이터 적용 범위13 recorded checks
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | orijinalecza.net |
malicious | Sinkholed |
| DNS4EU | orijinalecza.net |
malicious | Sinkholed |
| Quad9 DNS | orijinalecza.net |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
증거 및 외부 보고서Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.