orijinalecza[.]net
“This website domain has been seized by Microsoft”
已存储的观测记录
观测到的标题差异
证据摘要
PhishDestroy identifies orijinalecza.net as an active Microsoft brand impersonation domain designed to deceive users through counterfeit Microsoft branding and false seizure notices. The domain (registered June 10, 2024 via MarkMonitor, Inc.) serves a fraudulent page claiming 'This website domain has been seized by Microsoft' while leveraging a fraudulent SSL certificate issued to Microsoft Corporation. This impersonation tactic aims to trick visitors into surrendering credentials or downloading malware under the guise of Microsoft enforcement actions. Technical indicators confirm elevated risk: the domain resolves to IP 40.91.108.115, appears on 1 security blocklist, and is blocked by Maltrail. VirusTotal analysis shows 21 out of 95 security vendors flagging this domain as malicious, indicating significant but not universal detection of the threat. The combination of recent registration (June 2024), spoofed SSL certificates, and Microsoft branding creates a convincing but malicious facade that could evade casual scrutiny. Users who visited this domain should immediately run a full antivirus scan, change any passwords entered on the site, and monitor for unusual account activity. Avoid interacting with prompts for downloads or login credentials on this domain. Report the domain to your security team and consider blocking it at the network perimeter. If financial or sensitive data was entered, contact the appropriate fraud department and monitor accounts for unauthorized transactions.
Data Coverage
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | orijinalecza.net |
malicious | Sinkholed |
| DNS4EU | orijinalecza.net |
malicious | Sinkholed |
| Quad9 DNS | orijinalecza.net |
malicious | Sinkholed |
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控