aleph-cloud[.]xyz
“Nur einen Moment…”
Résumé des preuves
Analysis of aleph-cloud.xyz indicates that the domain is being used for credential phishing. The domain was registered on 12 October 2025 through OwnRegistrar, Inc. and is currently hosted behind Cloudflare, resolving to IP 104.21.75.117, which belongs to AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services under the WE1 certificate profile, providing HTTPS with HSTS enabled. Cloudflare services are evident from the presence of Cloudflare Browser Insights and support for HTTP/3. The authoritative name servers are audrey.ns.cloudflare.com and lewis.ns.cloudflare.com, consistent with the hosting provider. A single MX record points to _dc-mx.991d34408da3.aleph-cloud.xyz, suggesting potential use for outbound mail but no further verification data is available.
Threat intelligence sources flag the domain as malicious: five of ninety‑five security vendors on VirusTotal have marked it, and it appears on one security blocklist, where it has been blocked by PhishDestroy. The page title returned from the site is “Nur einen Moment…”, a German phrase meaning “Just a moment…”, which is commonly used by phishing pages to delay user interaction. The Gridinsoft trust score of 0/100 reinforces the low legitimacy assessment. Uncertainty remains regarding the exact content delivered to victims, as the site has been taken offline and no visual or functional analysis is available.
No additional public reports, OTX entries, or Safe Browsing alerts are referenced in the current data set. Defenders should block network traffic to 104.21.75.117, add aleph-cloud.xyz to domain blocklists, and monitor for email traffic that may attempt to use the listed MX host. Given the Cloudflare edge, TLS inspection may be required to uncover payloads. Continuous re‑evaluation is advised in case the infrastructure is re‑activated or shifted to new IP addresses.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse forensique
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of aleph-cloud.xyz · checked Apr 20, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif