MALICIOUS — CRITICAL
call96-au[.]com
PhishDestroy identifies call96-au.com as an active phishing domain masquerading as legitimate Australian government services, likely targeting citizens seeking official documentation or assistance.
- VirusTotal
- 4/91
- Blocklists
- No stored match
- Kullanılabilirlik
- Gizlenmiş · ulaşılabilir · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@trustname.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
call96-au.com — Gizlenmiş · ulaşılabilir (HTTP 200). Dolandırıcılık türü: Brand Impersonation. Kanıt özeti: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); cloaking observed; PhishDestroy score 78/100. Kayıt kuruluşu: Fewmoretaps OU d/b/a T….
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
call96-au.com Fake Government Services Scam Alert
PhishDestroy identifies call96-au.com as a malicious domain impersonating Australian government services. VirusTotal detected 0/95 security engines.
PhishDestroy identifies call96-au.com as an active phishing domain masquerading as legitimate Australian government services, likely targeting citizens seeking official documentation or assistance. This domain leverages deceptive branding to trick users into submitting sensitive personal or financial information under false pretenses, posing significant risks of identity theft and fraud. This domain was flagged by PhishDestroy with zero detections on VirusTotal (0/95 security engines as of January 23, 2025), indicating it remains undetected by many antivirus solutions. It was registered through Fewmoretaps OU d/b/a Trustname.com on January 22, 2025, and resolves to IP address 172.67.165.29, a hosting infrastructure associated with malicious activity. The recent creation date and low detection rate suggest this is an emerging threat actively evading traditional defenses. Users who visited call96-au.com should immediately cease any interaction with the site, avoid entering personal or financial details, and scan their devices for malware. Report the domain to your local cybercrime unit and consider updating passwords for critical accounts. Monitor financial statements and credit reports for signs of fraud. If you submitted sensitive information, contact relevant authorities (e.g., Australian Cyber Security Centre) to mitigate potential harm.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Ağ Güvenliği İstihbaratı Registrar context
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 10 identified
Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.
strapi.io %100 güvenNode.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org %100 güvenReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org %100 güvenNext.js is a React framework for developing single page Javascript applications.
nextjs.org %100 güvenExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com %100 güvenHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org %100 güvenCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com %100 güvenCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
PD-20260428-D80842 Recipient: abuse@trustname.com Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.