Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is complaint@gname.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
lnshshnxsh[.]net
“lnssxsh: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurre…”
lnshshnxsh.net — असत्यापित. घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 3/91 (alphaMountain.ai, CRDF, Gridinsoft); URLQuery 3 alerts; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 74/100. रजिस्ट्रार: Gname.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of the domain lnshshnxsh.net indicates it was actively involved in a cryptocurrency investment scam, as classified by multiple security vendors. The domain was registered on March 6, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolved to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.), a common choice for threat actors seeking to obscure hosting origins. The domain utilized Cloudflare nameservers (irma.ns.cloudflare.com and rick.ns.cloudflare.com), further complicating attribution and takedown efforts. The SSL certificate was issued by Let's Encrypt, a legitimate provider often exploited in phishing campaigns due to its free and automated issuance process.
The page title, 'lnssxsh: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil,' explicitly describes a fraudulent investment platform targeting financial markets, including cryptocurrencies. This aligns with the scam type labeled in threat intelligence feeds as a 'Crypto Scam.' Detection metrics at the time of analysis were limited but indicative of malicious activity. One of 95 security vendors on VirusTotal flagged the domain, while four independent security blocklists—PhishDestroy, MetaMask, ScamSniffer, and SEAL—had already listed it as malicious. The domain's current status is offline, though this does not preclude future reactivation under the same or similar infrastructure.
Defenders should treat this domain as compromised and block it at the network level. Given its association with Cloudflare and a registrar known for hosting high-risk domains, monitoring for newly registered lookalike domains under the same registrar or IP range is recommended. The exact content and functionality of the site remain unanalyzed, but the available evidence confirms its classification as a cryptocurrency investment scam.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | lnshshnxsh.net |
malicious | Sinkholed |
| DNS4EU | lnshshnxsh.net |
malicious | Sinkholed |
| DNS4EU | webapi.lnsx1688xsh.vip |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साक्ष्य और बाहरी रिपोर्टें
PD-20260306-533367 Recipient: complaint@gname.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।