MALICIOUS — CRITICAL
makeup-fx-shop[.]com
The domain makeup-fx-shop.com, impersonating the 'foundation' brand, is currently down or has been taken down.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Доступность
- Последний известный активный · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@enom.com.
The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
makeup-fx-shop.com — Последний известный активный (HTTP 200). Олицетворение бренда: Foundation; Тип мошенничества: Brand Impersonation. Сводка доказательств: VirusTotal 3/91 (alphaMountain.ai, Chong Lua Dao, Gridinsoft); URLQuery 4 alerts; PhishDestroy score 73/100. Регистратор: ENOM.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
Evidence Analysis
This report analyzes the domain makeup-fx-shop.com, which presents itself as a cosmetics and prosthetics retailer under the title "Makeup-FX Shop wigs, prosthetics, beards, moustaches, mustaches - Makeup-FX Shop." The site is classified as an impersonation scam, specifically targeting the brand foundation. The primary threat posed is brand impersonation, likely used to deceive visitors into believing they are interacting with a legitimate foundation-related business, potentially for phishing, credential theft, or fraudulent transactions.
Technical evidence shows the domain was flagged by 6 out of 95 VirusTotal vendors, with detections from alphaMountain.ai, CyRadar, Gridinsoft, Seclookup, and SOCRadar. It is listed on one blocklist. The domain was registered on 2017-12-05 with registrar ENOM, INC., and resolves to IP address 67.209.117.37 hosted in the Netherlands by AS55293 A2 Hosting, Inc. The SSL certificate is issued by Let's Encrypt (R12), and the nameservers are ns1.a2hosting.com, ns2.a2hosting.com, ns3.a2hosting.com, and ns4.a2hosting.com. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 10.
The domain is currently offline. Based on the low trust rating, high risk score, and multiple security vendor flags, this site poses a significant risk for brand impersonation and associated malicious activities. Users should avoid any interaction with this domain.
Охват данных12 recorded checks
Данные сетевой безопасности
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | makeup-fx-shop.com |
malicious | Sinkholed |
| OpenDNS | makeup-fx-shop.com |
phishing | Phishing Block |
| Hagezi Threat Feed | makeup-fx-shop.com |
malicious | Sinkholed |
| DNS0 Zero | makeup-fx-shop.com |
malicious | Sinkholed |
Процесс реагирования на угрозы
Статус в публичных блок-листах
Сохранённый снимок
Аналитика доменов
Технические сведенияDNS, SAN в протоколе SSL, временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Технологии · 9 identified
CubeCart is a free ecommerce platform that businesses can use to build, manage, and market their online stores.
www.cubecart.com 100% уверенностиZurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.
foundation.zurb.com 100% уверенностиreCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 100% уверенностиModernizr is a JavaScript library that detects the features available in a user's browser.
modernizr.com 100% уверенностиjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% уверенностиHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% уверенностиHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% уверенностиАнализ VirusTotal
Архивные доказательства
Анализ производительности сайта
Google PageSpeed Insights — mobile performance audit of makeup-fx-shop.com · checked Mar 2, 2026
Доказательства и внешние отчетыIndependent lookups and source reports
PD-20260104-94041E Recipient: abuse@enom.com Victim safety and official reportingImmediate actions and verified reporting channels
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.