laguerriere[.]net

PhishDestroy identifies laguerriere.net as a high-risk phishing domain leveraging a generic news-themed lure to deceive visitors. The domain mimics legitimate news content under the title 'La Guerriere - Berita Terbaru dan Analisis Mendalam dari Dunia Global,' suggesting a focus on global news analysis. No specific drainer kit or brand impersonation was detected in this campaign, but the phishing mechanism likely involves credential harvesting or malicious redirects to compromise user data.

Technical indicators confirm this domain’s malicious nature. VirusTotal flags 8 out of 95 security vendors, while the SSL certificate is issued by Google Trust Services, a tactic often used to appear legitimate. Registered through NAMECHEAP INC on July 10, 2024, the domain resolves to IP 188.114.97.3 and is currently blocked by MetaMask and SEAL. Additionally, it appears on 2 security blocklists, indicating widespread distrust. Despite its recent creation, laguerriere.net exhibits high-risk characteristics commonly associated with active phishing campaigns.

As of the latest assessment, laguerriere.net remains active and poses a significant threat to unsuspecting users. Immediate response actions include blacklisting by MetaMask and SEAL, though the domain continues to evade broader detection due to its short lifespan. The remaining risk is high, given the absence of takedown actions and the domain’s potential to evolve into more sophisticated phishing schemes. Users are strongly advised to avoid interaction and report any suspicious encounters with this domain.