mod4u[.]online
فحص التصيد والأمان للنطاق mod4u.online
“Steal a Brainrot - Free Items Generator”
mod4u.online — آخر نشاط معروف (HTTP 301). ملخص الأدلة: VirusTotal 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 88/100. مسجّل النطاق: NameCheap.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
This domain, mod4u.online, is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. The page title is 'Steal a Brainrot - Free Items Generator', indicating a scam offering free virtual items to lure victims. The domain was registered on October 20, 2025, through NameCheap, Inc., and resolves to IP address 185.199.109.153, which is associated with GitHub, Inc. and hosted in the United States. The SSL certificate is issued by Let's Encrypt (R12). VirusTotal reports 5 of 91 security vendors flagging this domain as malicious, and it appears on 1 security blocklist. AlienVault OTX shows the domain is present in 4 threat intelligence pulses. The HTTP status is 301 (redirect). The Gridinsoft trust score is 0/100. MX records point to eforward3.registrar-servers.com, indicating email handling through a registrar-based forwarding service. Analysis confirms the domain is actively used for phishing, likely targeting users seeking free item generators. Defenders should block the domain and IP 185.199.109.153 at network and email gateways, monitor for related subdomains or variations, and educate users about free item generator scams. The exact brand impersonated is not specified beyond the free items generator theme, so further investigation of the landing page content is recommended to identify any targeted service or platform.
نطاق تغطية البيانات12 recorded checks
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
تحليل VirusTotal
الأدلة والتقارير الخارجيةIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.