aicopmtrade[.]click
“Log in to your PayPal account”
aicopmtrade.click — सामग्री अनुपलब्ध. ब्रांड प्रतिरूपण: PayPal; घोटाले का प्रकार: Credential Phishing. साक्ष्य सारांश: VirusTotal 25/91 (Criminal IP, alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Certego); URLQuery 6 alerts; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 100/100. रजिस्ट्रार: Global Domain Group.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, aicopmtrade.click, was registered on April 01, 2026 through Global Domain Group LLC and resolves to the Cloudflare‑hosted address 104.21.21.60 (AS13335, United States). The site is protected by a Let’s Encrypt certificate (issuer YE1) and serves content over HTTP/3 using Cloudflare services, with server‑side components identified as Node.js, Express, Bootstrap and Cloudflare Browser Insights. The visible page title is “Log in to your PayPal account”, indicating a credential‑phishing campaign that impersonates PayPal. Google Safe Browsing classifies the URL as social engineering, and the domain appears on one external security blocklist. VirusTotal reports that 25 of 91 scanned vendors flag the domain as malicious, and AlienVault OTX has referenced it in two separate threat‑intel pulses.
Additional defenses have marked the host as hostile: PhishDestroy blocks it, and Gridinsoft assigns a trust score of 0 / 100. The current operational status is offline, which suggests the phishing site has been taken down or is no longer serving content. Analysis confirms the infrastructure is typical of low‑cost phishing kits hosted behind Cloudflare, leveraging dynamic content delivery to obscure origin. While the domain’s content cannot be verified directly, the combination of the PayPal‑specific page title, the social‑engineering Safe Browsing flag, and multiple vendor detections provide strong evidence of a credential‑phishing intent.
Uncertainty remains regarding the exact phishing kit version and any additional payloads that may have been delivered before takedown. Defenders should continue to block aicopmtrade.click at DNS and proxy layers, monitor for any resurgence of the same host‑header or similar page titles, and add the domain to internal watchlists. Threat‑intel teams may also consider sharing the indicator set (domain, IP, nameservers, certificate fingerprint) with upstream feeds to improve collective detection.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | aicopmtrade.click |
malicious | Sinkholed |
| OpenDNS | aicopmtrade.click |
phishing | Phishing Block |
| DigiCert UltraDNS | aicopmtrade.click |
malicious | Sinkholed |
| Hagezi Threat Feed | aicopmtrade.click |
malicious | Sinkholed |
| DNS4EU | aicopmtrade.click |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | aicopmtrade.click |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासBootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% विश्वासExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com 100% विश्वासCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260611-E9CCD3 Recipient: abuse@dynadot.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।