cayugacollection[.]com
cayugacollection.com için kimlik avı ve güvenlik kontrolü
“Sustainable Luxury Hotels, Central America | Cayuga Collection”
cayugacollection.com — Ulaşılabilir · oran sınırlı (HTTP 429). Dolandırıcılık türü: Brand Impersonation. Kanıt özeti: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); URLQuery 2 alerts; PhishDestroy score 71/100. Kayıt kuruluşu: Tucows.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Analysis indicates that cayugacollection.com is an active generic phishing site employing brand impersonation tactics. The domain was registered on April 30, 2026 through Tucows Domains Inc. and resolves to the Cloudflare‑owned IP address 172.67.181.204 (location: CA). Authoritative nameservers are david.ns.cloudflare.com and venus.ns.cloudflare.com. The web server returns HTTP 403, suggesting that direct access is restricted or deliberately cloaked. The page title retrieved is "Sustainable Luxury Hotels, Central America | Cayuga Collection," and the site runs a WordPress stack with MySQL, PHP, Yoast SEO, jQuery, and related libraries, indicating a typical content‑management system rather than a custom phishing kit. Email infrastructure includes MX records pointing to mx10.mailspamprotection.com (priority 10) and an additional MX entry with priority 20. Security scoring is extremely low, with a Gridinsoft trust score of 0/100, and two of ninety‑one VirusTotal scanners have flagged the domain. The site is already blocked by PhishDestroy and appears on one additional blocklist. Defenders should add cayugacollection.com to DNS and URL filtering rules, monitor for related C2 activity, and consider sinkholing the associated Cloudflare IP range if feasible. Ongoing observation is advised to capture any future payload changes, as the current evidence suggests a high‑risk impersonation campaign targeting travelers or hospitality customers.
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube-nocookie.com/s/player/0980151a/player_embed_es6_tcc.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | www.youtube.com/s/player/0980151a/player_embed_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 13 identified
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
wordpress.org %100 güvenYouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
www.youtube.com %100 güvenYoast SEO is a search engine optimisation plugin for WordPress and other platforms.
yoast.com %100 güvenOWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.
owlcarousel2.github.io %100 güvenQuery Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.
github.com %100 güvenjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com %100 güvenGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com %100 güvenCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com %100 güvenCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of cayugacollection.com · checked May 28, 2026
Kanıtlar ve Dış Raporlar
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin