Confirmed abuse on *****[.]net
Dedicated site offering covert Android access malware for sale, forwarded for action
The reported domain *****[.]net was flagged as a dedicated site set up to offer covert Android device access malware for sale, with the reporter stating it is used to spread malware to mobile phones. The site's behaviour flags record malware-download, and the report was confirmed with supporting evidence and forwarded. Notifications were sent through threat intelligence feeds, the hosting provider and the domain registrar. The observed outcome is recorded as: Outcome: verified offline by our team.
Timeline
The report was made on October 29, 2026 and last updated on October 29, 2026. Monitoring by Fraudpol began when the report arrived, and the first action was taken within 3 minutes. The case status is recorded as active, and no neutralization date has been set.
Indicators
- Domain: *****[.]net
- Behaviour flag: malware-download
- Site context: dedicated, set up for this activity
- Offer described: covert Android device access for sale
- Site uses Cloudflare
- Evidence on file: yes
What to do
Do not download or install any Android app or file linked to this site, and do not grant it device permissions. If a device may already be affected, run a reputable mobile security scan and change important account passwords from a separate, clean device.
A member of the Fraudpol community reported *****[.]net for confirmed abuse. Screenshots, evidence files, and reporter contact details are kept private and shared only with hosters, registrars, and law enforcement when action is required.
Reported behaviors
How this listing works
Listings are published only after verification by our team and are removed if a review shows the site is legitimate. Fraudpol never publishes full URLs, screenshots, evidence files, or the reporter's identity.