llossamall[.]com

Analysis of llossamall.com indicates that the domain was registered through InterNetX GmbH on March 20 2025 and is currently taken offline. The site resolves to IP 172.67.144.212, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate is presented, leaving the HTTP service unencrypted. The authoritative nameservers are A2.SHARE‑DNS.COM and B2.SHARE‑DNS.NET.

The page title returned from the live host, before takedown, was “TK-Store | buy, sell and discover on TK”, suggesting a marketplace‑style landing page. Google Safe Browsing has classified the domain as a social‑engineering threat, and PhishDestroy has listed it on its blocklist; overall the domain appears on one security blocklist. VirusTotal scans show that 16 of 93 antivirus engines flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. AlienVault OTX includes the domain in a single threat‑intel pulse.

The listed scam type is “Brand Impersonation” targeting the generic brand “across”, although the page title does not reference that brand, leaving the exact impersonated content unverified. Defenders should continue to block the domain at perimeter filters, update DNS blacklists with the observed IP and nameserver pairs, and monitor for any re‑registration attempts. Because the site is offline, active exploitation is unlikely, but threat‑intel feeds should retain the indicator for correlation with future campaigns that may reuse the same infrastructure or branding cues.