laranovakit[.]com

The domain laranovakit.com is currently listed as an active brand‑impersonation site targeting Facebook. Created on 23 April 2025, the domain hosts a page titled “Laranova Kit – Premium WordPress Template Kit Marketplace”. Although the page title references a template marketplace, the intelligence indicates that the site is being used to masquerade as Facebook‑related content, satisfying the high‑risk classification. Registration data shows the domain was obtained through NameSilo, LLC and is served from a single nameserver configuration. Network analysis maps the address 172.245.14.133 to a US location within AS36352, operated by HostPapa. The site is fronted by Cloudflare, employing Cloudflare Browser Insights and HTTP/3, and presents a TLS certificate issued by Google Trust Services under the WE1 root, confirming a valid HTTPS endpoint. Detection metrics reinforce the malicious posture: the domain is present on one security blocklist and has been flagged by PhishDestroy, yet it remains reachable with HTTP status 200. The Gridinsoft trust score of 0 out of 100 reflects an extremely low reputation. VirusTotal scans report that 3 of 95 security vendors classify the site as malicious, providing additional corroboration of its threat level. Defenders should prioritize immediate containment of traffic to laranovakit.com. Network firewalls and DNS filtering can be updated to block resolution and HTTP(S) connections. Continuous monitoring of outbound requests for the IP 172.245.14.133 is advised, as is periodic re‑evaluation of the domain’s status on blocklists and VirusTotal, to capture any changes in its operational characteristics.