Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
fomo-wave[.]xyz
“fomo | Social Crypto Trading App & Web Platform”
Stored observation
Observed title contrast
Evidence Summary
The domain fomo-wave.xyz was registered on July 26, 2026 through Name.com, Inc. and is currently resolved to the IPv4 address 63.176.8.218. Its authoritative name servers are dns1.p07.nsone.net, dns2.p07.nsone.net, dns3.p07.nsone.net, and dns4.p07.nsone.net. As of the report date, August 03, 2026, the domain remains active and is listed on two security blocklists. In addition, it is explicitly blocked by the PhishDestroy and ScamSniffer filtering services.
VirusTotal analysis shows that three of ninety‑one scanning engines have flagged the domain as malicious, indicating a low but non‑zero consensus among automated scanners. AlienVault OTX has recorded a single threat‑intel pulse that references fomo-wave.xyz, further corroborating its association with malicious activity. No public information is available regarding SSL configuration, HTTP response codes, Safe Browsing status, page title, or the specific content hosted at the address, leaving the precise phishing payload and targeted brand unverified. The limited detection footprint—three vendor flags and two blocklist entries—suggests the site may be newly deployed or employing evasion techniques, but the presence on multiple reputable blocklists and the OTX pulse confirms a high‑risk classification.
Defenders should immediately add fomo-wave.xyz to DNS and URL filtering policies, enforce network‑level blocking of its IP address, and monitor for any related domains that share the same name‑server set or IP range. Continuous re‑scanning with multi‑engine services is advised to capture any changes in payload or detection rates. Organizations using threat‑intel feeds should also ingest the OTX pulse to propagate alerts across their security stack.
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260803-E28177- Captured page title
- fomo | Social Crypto Trading App & Web Platform
- PDF artifact
- PDF evidence
Full evidence text
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
9 monitored external feeds No match
Detection timeline
-
First recorded
First stored value: Reachable
-
Domain status
Reachable → Unreachable
-
Domain status
Unreachable → Reachable
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
2 high-confidence technologies identified
VirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of fomo-wave.xyz · checked Aug 3, 2026
Site Configuration Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive