assistance-funeraire[.]tn

This domain, assistance-funeraire.tn, is flagged as an active phishing infrastructure targeting users under the guise of funeral services in Tunisia. Registered on August 4, 2022, through OVH and hosted on IP 2.57.91.130 (Lithuania, Hostinger International Limited), the site resolves with a 200 HTTP status and uses a Let's Encrypt SSL certificate (R13). Infrastructure analysis reveals the use of nameservers ns1.dns-parking.com and ns2.dns-parking.com, a pattern commonly observed in low-reputation hosting environments associated with phishing campaigns. The page title, 'Comprehensive funeral services in Tunisia - Limem Services,' suggests an attempt to impersonate a legitimate service provider, though no confirmed brand impersonation has been documented beyond this title. Defenders should note that the domain is currently active and appears on at least one security blocklist, with PhishDestroy marking it as malicious. VirusTotal data indicates that 2 out of 91 security vendors flag the domain, though this alone does not confirm the full scope of its threat. Detected technologies include WordPress, MySQL, PHP, Yoast SEO, reCAPTCHA, jQuery, and Hostinger CDN, which are consistent with both legitimate and malicious sites but provide no definitive evidence of intent. The Gridinsoft trust score of 0/100 further aligns with high-risk classifications. Given the domain's age, hosting provider, and blocklist presence, defenders should treat this as a confirmed phishing threat. Recommended actions include blocking the domain at the DNS or network level, monitoring for related infrastructure (e.g., subdomains or linked IPs), and alerting users to avoid interaction. The exact phishing mechanism—whether credential harvesting, payment fraud, or another vector—remains unconfirmed due to limited content analysis. Additional investigation into the site's backend or user reports may clarify its specific tactics.