Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@first-colo.net.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
onlineallianceinterna[.]org
“Home - Alliance International Bank”
onlineallianceinterna.org — असत्यापित. ब्रांड प्रतिरूपण: Linea; घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 15/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 1 alert; URLScan malicious verdict; Spamhaus DBL_SPAM; PhishDestroy score 100/100. रजिस्ट्रार: Ultahost.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain onlineallianceinterna.org was registered on March 11, 2026 through Ultahost, Inc. It uses the authoritative name servers ns1.ultahost.com through ns4.ultahost.com and resolves to the IPv4 address 159.100.6.19, which is announced by AS214036 in Germany. The site is served over HTTPS with a Let’s Encrypt R12 certificate, indicating a recent, automated TLS deployment. A visual inspection of the landing page returns HTTP 200 and the HTML title “Home – Alliance International Bank”, a clear attempt to mimic the legitimate Alliance International Bank brand while the underlying target is the cryptocurrency platform Linea. The page is built with Bootstrap, LiteSpeed, jQuery UI, jQuery CDN, jQuery, FancyBox, Popper and supports HTTP/3, all common components of low‑cost phishing kits. The presence of a generic bank‑related title and the explicit impersonation of Linea suggest a credential‑harvesting campaign aimed at users of both the bank and the blockchain service. Reputation services rate the domain extremely poorly. Gridinsoft assigns a trust score of 1 out of 100, and VirusTotal records five positive detections out of ninety‑five scanners. The domain appears on a single security blocklist and is actively listed by PhishDestroy, confirming that defensive feeds consider it malicious. The risk rating is high and the site remains active as of the report date, indicating ongoing operation. Open questions include the exact phishing kit version and whether the domain is part of a broader infrastructure sharing the same hosting provider. Analysts should monitor DNS changes for the four Ultahost name servers and consider adding 159.100.6.19 to network blocklists. Endpoint security policies should be updated to flag any URLs containing the domain or the “Alliance International Bank” title. User awareness campaigns targeting Linea and Alliance International Bank customers are advised to reduce the likelihood of credential compromise.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | onlineallianceinterna.org |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 8 identified
Popular CSS framework for responsive, mobile-first web development.
High-performance web server compatible with Apache configurations.
Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.
Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of onlineallianceinterna.org · checked Mar 11, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260311-5FD2AF Recipient: abuse@first-colo.net क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।