Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@tencent.com.
The latest stored availability evidence still shows the domain reachable; 23 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
mawxls[.]us[.]cc
“Maxis: Postpaid Plan, Home Internet and More | Telco Company”
mawxls.us.cc — असत्यापित. साक्ष्य सारांश: VirusTotal 11/91 (alphaMountain.ai, Cluster25, ESET, Forcepoint ThreatSeeker, G-Data); URLQuery 2 alerts; Spamhaus DBL_PHISH; PhishDestroy score 88/100. रजिस्ट्रार: Gname.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, mawxls.us.cc, is currently active and has been identified as a phishing infrastructure. The domain was registered on April 07, 2006 through Gname.com Pte. Ltd. and resolves to the IPv4 address 43.133.41.74. Both PhishDestroy and OpenPhish list the domain on their blocklists, and it appears on a total of two public security blocklists. VirusTotal analysis shows that five out of ninety‑five scanning engines have flagged the domain as malicious, reinforcing the suspicion of phishing activity.
The authoritative name servers are a.rsp-dns.com, b.rsp-dns.com, ns1.domainnamens.com, and ns2.domainnamens.com, indicating a multi‑provider DNS configuration that may be used to increase resilience. No public SSL certificate information, HTTP response details, or page‑title data are available in the current intelligence set, so the exact content served by the site cannot be confirmed. However, the combination of blocklist listings, multiple vendor detections, and the age of the domain suggests a deliberate attempt to host credential‑harvesting pages. The IP address 43.133.41.74 is not associated with any known benign services in the provided data, and its continued resolution to the domain implies that the hosting environment remains under the threat actor’s control.
Defenders should immediately block mawxls.us.cc at perimeter firewalls, proxy filters, and DNS resolvers. Monitoring of traffic to the associated IP address is recommended to detect any residual or future malicious payloads. Because the domain uses four distinct name servers, additional related subdomains may be created without notice; therefore, any newly observed subdomains under the us.cc second‑level domain should be treated with the same level of scrutiny. Continuous re‑scanning on VirusTotal and inclusion in internal threat feeds will help maintain visibility as the threat actor evolves its infrastructure.
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
थ्रेट इंटेलिजेंस क्रॉस-रेफ़रेंस · source references
तकनीकें · 12 identified
Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.
www.adobe.com 100% विश्वासJava is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
java.com 100% विश्वासBootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% विश्वासDynatrace is a technology company that produces a software intelligence platform based on artificial intelligence to monitor and optimise application performance and development, IT infrastructure, and user experience for businesses and government agencies throughout the world.
www.dynatrace.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासMicrosoft Advertising is an online advertising platform developed by Microsoft.
ads.microsoft.com 100% विश्वासjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% विश्वासInsider is the first integrated Growth Management Platform helping digital marketers drive growth across the funnel, from Acquisition to Activation, Retention, and Revenue from a unified platform powered by Artificial Intelligence and Machine Learning.
useinsider.com 100% विश्वासImperva is a cyber security software and services company for networking, data, and application security.
www.imperva.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साक्ष्य और बाहरी रिपोर्टें
PD-20260722-1F6F75 Recipient: abuse@tencent.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।