Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
artisexpresslogistics[.]com
“Dubai Invest - Smart Real Estate Investment in Dubai”
artisexpresslogistics.com — अंतिम ज्ञात सक्रिय (HTTP 301). ब्रांड प्रतिरूपण: Apple; घोटाले का प्रकार: Impersonation. साक्ष्य सारांश: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of the domain artisexpresslogistics.com indicates active brand impersonation targeting Apple, with high-risk indicators as of July 23, 2026. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious infrastructure. It resolves to the IP address 188.114.96.3, which is part of Cloudflare's network (AS13335) and geolocated in the United States. The use of Cloudflare nameservers (corey.ns.cloudflare.com and kelly.ns.cloudflare.com) and HTTP/3 technology suggests an attempt to obscure hosting details and leverage modern web protocols for resilience. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the domain's malicious intent but may contribute to user trust.
The page title, 'Dubai Invest - Smart Real Estate Investment in Dubai,' is inconsistent with the stated brand target (Apple), raising questions about the campaign's operational focus or potential pivot in tactics. The domain currently returns an HTTP 530 status, which may indicate Cloudflare-specific restrictions or a misconfiguration, but does not preclude active phishing operations. It appears on one security blocklist (PhishDestroy), and one of 93 security vendors on VirusTotal flags the domain as malicious, providing preliminary but not conclusive evidence of its threat status. Defenders should prioritize this domain for further investigation due to its recent registration, Cloudflare-based hosting, and confirmed brand impersonation.
The discrepancy between the page title and the targeted brand suggests either a multi-purpose infrastructure or an incomplete setup. Blocklisting at the DNS or network level is recommended, along with monitoring for changes in HTTP status or content. Additional analysis of associated IP ranges (188.114.96.0/24) and registrar activity may reveal related malicious domains.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-15 02:37:52 UTC
तकनीकें · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साक्ष्य और बाहरी रिपोर्टें
PD-20260213-DD0E22 Recipient: abuse@nicenic.net क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।