register-zama[.]com
Resumen de las pruebas
The domain register-zama.com was observed hosting a page whose title returned "Just a moment..." before the site was taken offline. The domain was registered on February 21, 2026 through Realtime Register B.V. and is hosted behind Cloudflare, using the nameservers adam.ns.cloudflare.com and danica.ns.cloudflare.com. DNS resolution points to 188.114.97.3, an address owned by AS13335 Cloudflare, Inc. in the United States. The SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS endpoint at the time of capture.
Network traffic was observed over HTTP/3, confirming modern protocol support. VirusTotal recorded 12 positive detections out of 93 scanning engines, and the domain appears on three public security blocklists. Additional blocking services such as PhishDestroy, MetaMask, and SEAL have also flagged the host. The combination of multiple vendor detections, blocklist listings, and the presence of a generic phishing page title suggests a high‑risk malicious intent.
Current evidence does not disclose the specific phishing lure, target brand, or credential‑capture mechanism, and the site’s content beyond the title was not captured before takedown. Consequently, the precise victim profile remains uncertain. Defenders should continue to block the domain at perimeter filters, update DNS‑based blocklists, and monitor for any re‑registration attempts. Analysts are encouraged to retrieve archived snapshots, if available, and to correlate any observed login‑submission traffic with this infrastructure to aid attribution.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.