MALICIOUS — CRITICAL
immigrationfrauds.org için kimlik avı ve güvenlik kontrolü
immigrationfrauds[.]
This domain, immigrationfrauds.org, is currently flagged as a high-risk generic phishing domain.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Kullanılabilirlik
- Gizlenmiş · ulaşılabilir · HTTP 301
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
immigrationfrauds.org — Gizlenmiş · ulaşılabilir (HTTP 301). Kanıt özeti: VirusTotal 3/91; cloaking observed; PhishDestroy score 91/100. Kayıt kuruluşu: Hostinger.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
This domain, immigrationfrauds.org, is currently flagged as a high-risk generic phishing domain. Created on April 29, 2026, and registered through HOSTINGER operations, UAB, the domain has been observed in one threat intelligence pulse on AlienVault OTX, which suggests it has been linked to malicious activities. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trustworthiness. The domain resolves to an IP address located in Germany (92.113.16.87) and is associated with the nameservers ns1.dns-parking.com and ns2.dns-parking.com, both of which are commonly used for parking domains or low-reputation hosting. The SSL certificate for the domain is issued by Google Trust Services, but the presence of an SSL certificate does not guarantee safety, as legitimate certificates can be obtained by malicious actors to lend credibility to their operations. The HTTP status code of 403 suggests that the domain may be actively blocking certain types of traffic, possibly to evade detection or to selectively target specific users. This domain is also included on the PhishDestroy blocklist, which further reinforces the suspicion of its involvement in phishing activities. Despite the HTTP status code, the domain remains active, and it is advisable for defenders to monitor and block traffic to this domain to prevent potential phishing attacks. Analysis indicates that the domain's infrastructure and reputation align with characteristics commonly observed in phishing operations, and the low trust score and inclusion in threat intelligence pulses serve as strong indicators of its malicious intent. Defenders should consider implementing additional security measures, such as email filtering and user education, to mitigate the risk posed by this domain.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analizi
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.