Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@godaddy.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
home-zlksz6[.]com
“球俱乐部官方区域合作伙伴 开云体育官网-皇家马德里足”
home-zlksz6.com — असत्यापित. घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 17/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Chong Lua Dao); URLQuery 4 alerts; CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: GoDaddy.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, home-zlksz6.com, is identified as a brand impersonation phishing site targeting Royal Madrid football club and Kering Sports (officially branded as 开云体育). The page title, "球俱乐部官方区域合作伙伴 开云体育官网-皇家马德里足," explicitly mimics the club’s official regional partner portal, suggesting an intent to deceive fans, sponsors, or affiliates into disclosing sensitive information or engaging with fraudulent content. Analysis indicates the site was operational until recently but has since been taken offline. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 25, 2026, an unusually forward-dated creation that may indicate an attempt to evade immediate detection. It resolved to the IP address 172.65.242.166 and was flagged by 18 of 95 security vendors on VirusTotal, reflecting a consensus among detection engines regarding its malicious nature. The domain appears on one security blocklist, and passive DNS records confirm the use of Nginx as the web server, alongside front-end libraries such as jQuery and jQuery Migrate. The presence of HTTP Strict Transport Security (HSTS) headers suggests an effort to lend legitimacy to the site, though this does not mitigate the underlying threat. Current status indicates the domain is offline, though residual risk remains for users who may have interacted with it prior to takedown. Organizations and individuals are advised to monitor for unauthorized access attempts linked to this infrastructure, particularly those involving credentials or financial transactions associated with sports partnerships or fan engagement. Network defenders should block the domain and IP address at perimeter controls and review logs for connections to 172.65.242.166. Users who visited the site should reset passwords for any accounts accessed during the exposure window and enable multi-factor authentication where available. Security teams are encouraged to correlate this activity with other impersonation campaigns targeting sports brands, as this may represent a broader trend in credential theft or fraud.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | home-zlksz6.com |
malicious | Sinkholed |
| OpenDNS | home-zlksz6.com |
phishing | Phishing Block |
| DigiCert UltraDNS | home-zlksz6.com |
malicious | Sinkholed |
| DNS4EU | home-zlksz6.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 4 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% विश्वासQuery Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.
github.com 100% विश्वासjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of home-zlksz6.com · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260530-E5595E Recipient: abuse@godaddy.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।