pravegaaeducation[.]com

Analysis of pravegaaeducation.com confirms its classification as a brand-impersonation phishing domain, operational since February 21, 2026. The domain is currently offline, returning an HTTP 200 status with the page title 'This Page Does Not Exist,' which may indicate a placeholder or post-compromise state. Infrastructure review shows the domain was registered through HOSTINGER operations, UAB, and resolves to IP 88.222.210.233, hosted on AS47583 (Hostinger International Limited) in India. Nameservers are set to ns1.dns-parking.com and ns2.dns-parking.com, a configuration often associated with low-cost or automated hosting environments used in phishing campaigns.

Detection data is limited but consistent with malicious activity: one of 93 security vendors on VirusTotal flagged the domain, and it appears on a single security blocklist (PhishDestroy). The SSL certificate is issued by R13, a common low-assurance provider. Gridinsoft assigns a trust score of 0/100, reinforcing the domain's high-risk profile. No specific brand target or phishing kit is identified in the available data, though the 'brand impersonation' classification suggests the site likely mimicked a legitimate entity, possibly in the education or training sector based on the domain name.

Defenders should treat this domain as confirmed malicious infrastructure. Recommended actions include blocking the domain and IP at perimeter controls, monitoring for related subdomains or newly registered lookalike domains, and reviewing logs for connections to 88.222.210.233 or the dns-parking.com nameserver infrastructure. Given the domain's offline status, further forensic evidence may be unavailable, but the existing indicators justify proactive mitigation.