Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@internet.gmo.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
melaniamems[.]xyz
“melaniamems.xyz”
melaniamems.xyz — असत्यापित. घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 11/91 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. रजिस्ट्रार: GMO Internet.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
melaniamems.xyz was registered on 14 April 2026 through GMO Internet, Inc. The domain resolves to the Amazon‑owned address 23.55.163.174, which is announced by AS16509 (Amazon.com, Inc.) and is geolocated in the United States. The DNS configuration lists ns5.afternic.com, ns6.afternic.com and verification‑gakbzzzqmt6gkcplw4efpp.ns101.veri as authoritative name servers. The web server returns HTTP 200 and presents a page titled “melaniamems.xyz”. TLS is provided by a GoDaddy DV certificate issued to “GoDaddy.com / GoDaddy TLS Intermediate CA DV – R1v1”. Header analysis shows the presence of Node.js, Envoy, Express, HSTS, Google Analytics, and Akamai Web Application Protector, indicating a modern stack that includes content delivery and security layers. Reputation services flag the domain as malicious. VirusTotal reports three detections out of ninety‑five scanned vendors, and the domain appears on three public blocklists. Gridinsoft assigns a trust score of zero out of one hundred, and the site is currently blocked by PhishDestroy, MetaMask, and SEAL. These indicators collectively confirm a high‑risk generic phishing classification. Open questions remain regarding the exact phishing payload and the targeted victims. The public page supplies only a title and no visible credential‑harvesting form, suggesting that the malicious content may be delivered dynamically or via redirected resources. No additional infrastructure such as command‑and‑control hosts has been identified. Defenders should add 23.55.163.174 and melaniamems.xyz to deny‑list rules, enforce TLS inspection, and monitor for outbound connections to the identified IP range. Continuous DNS monitoring is advised to detect any future changes to the name‑server set or registration details. Organizations using similar technology stacks should review web‑application firewall logs for unexpected Node.js or Envoy traffic that matches the domain.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 7 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासEnvoy is an open-source edge and service proxy, designed for cloud-native applications.
www.envoyproxy.io 100% विश्वासExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% विश्वासAkamai Web Application Protector is designed for companies looking for a more automated approach to web application firewall (WAF) and distributed denial-of-service (DDoS) security.
www.akamai.com 100% विश्वासAkamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.
akamai.com 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260620-A0A18C Recipient: abuse@internet.gmo क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।