avocattetouan[.]com

Analysis of avocattetouan.com indicates a high-risk brand impersonation phishing domain active as of July 12, 2026. The domain was registered on April 19, 2024, through a hosting provider and currently resolves to IP address 104.21.13.160. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, LiteSpeed, jQuery, and third-party services including Google Analytics and CookieYes, suggesting a structured web environment often exploited for fraudulent purposes. The domain is flagged on three security blocklists—PhishDestroy, PhishingDB, and BLP-Malware—and appears in 50 threat intelligence pulses on AlienVault OTX, reinforcing its malicious classification. Security vendor assessments further support the threat designation: 16 of 95 engines on VirusTotal detect the domain as malicious. The site presents itself with the page title 'Avocat Tetouan – Avocat Tetouan Mohamed El ISSATI,' which may be used to lend false legitimacy to legal or professional impersonation schemes. The domain holds a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 0/100, both consistent with confirmed fraudulent activity. While the specific brand being impersonated is not explicitly named in available data, the combination of technical indicators, blocklist presence, and low trust scores confirms the domain is actively engaged in deceptive practices. Defenders are advised to block the domain at the DNS or network level, monitor for related infrastructure (e.g., hosting IP, SSL issuer Let’s Encrypt), and alert users to potential phishing attempts originating from this source. Further investigation into associated email addresses, WHOIS details, and hosting provider logs may yield additional indicators of compromise.