Hello,
As a result of proactive measures undertaken by the National Cyber Security Directorate (DNSC), we would like to inform you that the domain [ nortal-solution[.]co ] is involved in a phishing cybersecurity incident.
The domain appears to be used for a potentially fraudulent website and may be impersonating the legitimate international technology company Nortal.
The legitimate company operates through the official domain:
I found no evidence that nortal-solution.co is owned, operated, or authorized by Nortal.
Key indicators of abuse include:
— The domain incorporates the exact name of the legitimate company Nortal.
— The .co extension can easily be confused with the legitimate .com domain.
— The additional generic term solution appears intended to create a plausible corporate identity.
— The reported domain is not referenced on Nortal’s official website or verified communication channels.
— The website uses localized paths such as /ro and /en, which may indicate that it targets users from multiple countries.
— The website has a limited and unverifiable public presence.
— The content and technical behavior of the website are inconsistent with the established online infrastructure of the legitimate Nortal company.
— A highly similar domain, nortal-solution.org, has previously been associated with scam-related activity, which may indicate the use of multiple domains with the same naming pattern.
The website may be used to mislead visitors into believing that they are interacting with Nortal or an authorized company representative. Depending on the services presented to users, the domain may be used to collect personal information, account credentials, identity documents, banking information, card data, or payments.
Please investigate the domain, its associated hosting account, registration information, payment records, access logs, and any other domains operated by the same customer.
We request that you take the necessary steps to resolve this incident as soon as possible and inform us of the outcome of your activities. It is possible that the phishing page is being restricted so it is only visible from certain countries, in this case Romania.
——————– DETAILS ————————-
| Dates | Created on 2026-07-13 Expires on 2027-07-13 Updated on 2026-07-13 |
URL: hxxps://nortal-solution[.]co/ro
——————————————————
Please note that you are receiving this e-mail because you are a contact person for the website in question (WHOIS records).
Please also ensure the preservation of all relevant data related to the domain(s) prior to deactivation or removal, in the event that such data is requested by law enforcement authorities in the future.
Regards,
Directorate General Technical Operations
