This domain, promociongarena.online, poses a phishing threat by impersonating Garena, a known digital entertainment platform. Visitors to this site may be tricked into entering sensitive credentials, such as login details or personal information, under the false pretense of accessing Garena-related content or promotions. The site mimics legitimate branding to deceive users, increasing the likelihood of credential theft or other fraudulent activities. Given its offline status, the immediate risk of interaction is reduced, but historical exposure remains a concern for those who may have engaged with it prior to takedown.
Analysis indicates this domain was flagged by 3 out of 95 security vendors on VirusTotal, suggesting moderate detection but not universal recognition as malicious. The domain was registered on March 09, 2026, through HOSTINGER operations, UAB, a registrar frequently associated with both legitimate and fraudulent activities. Additional technical indicators include its presence on two security blocklists and resolution to the IP address 147.93.42.21. The site employed LiteSpeed and HTTP/3 technologies, which are not inherently malicious but are commonly used in both legitimate and phishing infrastructures. The page title, Garena's Blog, further confirms the intent to impersonate the legitimate Garena brand.
If you visited promociongarena.online or entered any information on the site, immediate action is recommended. First, change passwords for any accounts that may have used the same credentials, prioritizing accounts tied to financial or personal data. Enable multi-factor authentication where available to add an additional layer of security. Monitor accounts for unauthorized activity, such as unfamiliar transactions or login attempts. If financial information was entered, contact your bank or payment provider to report potential fraud and request a review of recent transactions. Finally, consider running a security scan on your device to detect any malware or unwanted software that may have been installed during the visit.
探测与规避分析
隐身和流量分配检查
未观察到在存储的扫描图像中未观察到遮蔽现象
针对该主机的爬虫与浏览器观察记录，以及针对“Keitaro”式流量分配系统的实时指纹检测。
存储的隐身标志
未观察到
伪装评分
0/6
上次隐形扫描
扫描说明:unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='promociongarena.online', port=80): Max retries exceeded with url: / (Caused by NewConnecti
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Primary outcomeDNS 非活动reason: DNS NXDOMAIN80% confidence
Attributionsource: Dns Cache
Evidence layersAvailability: DNS inactiveContent: UnreachableDNS: NXDOMAINRegistration: Unknown
Latest HTTP observation未知Probe Inconclusive20%2026-10-13 01:10:52 UTC
RDAP registration未知
Observed timelinelast reachable: 2026-03-23 22:17:51 UTCcurrent episode first observed: 2026-09-30 16:14:55 UTCobserved RIP window: 2026-03-23 22:17:51 UTC → 2026-09-30 16:14:55 UTC · 4,577.95hmidpoint estimate ≈ 2026-06-27 07:16:23 UTC · precision very low · basis bounded
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
技术 · 3 identified
L
LiteSpeed
Web servers
High-performance web server compatible with Apache configurations.
H
Hostinger
H
HTTP/3
Miscellaneous
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Google PageSpeed Insights — mobile performance audit of promociongarena.online· checked Jun 26, 2026
85
Needs Work
Performance
FCP
3.32s
First Contentful Paint
LCP
3.34s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
57ms
Total Blocking Time
SI
3.43s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good50-89 Needs Work0-49 Poor
威胁响应 Pipeline
发现
Analysis
Notifications
Monitoring
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups+
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels+
Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PDF notice generated Notice text archived (1,255 chars)
Abuse notice text as sent to the provider
Policy Violations:
Acceptable Use Policy (AUP): The domain promociongarena.online is engaged in fraudulent activities, specifically phishing, which directly contravenes the AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations, and the ongoing use of this domain for phishing constitutes a clear breach of these terms.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which is applicable as phishing schemes often involve unauthorized access to personal information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities via electronic communications, which is relevant to the fraudulent activities associated with this domain.
Anti-Phishing Act: This legislation aims to prevent phishing and similar fraudulent activities, making the operation of this domain illegal.
Regulatory Note: Failure to take immediate action against promociongarena.online may result in regulatory scrutiny and potential liability for facilitating illegal activities. Compliance with your AUP and TOS is crucial to avoid legal repercussions.
(LT)
