Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is aws-abuse@hubspot.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
remodelhealth[.]com
“Remodel Health: The ICHRA Administration Partner Brokers Trust”
remodelhealth.com — असत्यापित. साक्ष्य सारांश: VirusTotal 2/91 (CRDF, Gridinsoft); PhishDestroy score 71/100. रजिस्ट्रार: Cloudflare.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of remodelhealth.com, created on 2026-02-21, shows infrastructure consistent with a recent phishing operation. The domain is registered through Cloudflare, Inc. and resolves to IP 199.60.103.9, which belongs to AS209242 Cloudflare London, LLC and is geolocated in the United States. TLS is provided by a Let’s Encrypt certificate (E8), and the site returns HTTP 200, indicating a responsive web server. The DNS configuration uses Cloudflare’s dolly.ns.cloudflare.com and skip.ns.cloudflare.com name servers.
A Gridinsoft trust score of 0/100 and placement on a single blocklist (PhishDestroy) reinforce suspicion, while the lack of broader blocklist coverage may reflect limited exposure time. The page title, "Remodel Health: The ICHRA Administration Partner Brokers Trust," is unrelated to the domain name and suggests a potential brand‑impersonation vector targeting health‑benefit administrators. Detected technologies include HubSpot CMS Hub, Apple iCloud Mail, Salesforce, Amazon Web Services, Lightbox, jQuery, HubSpot Analytics, and HubSpot, all typical of legitimate marketing sites but also commonly leveraged by malicious actors to blend in with corporate‑style pages. VirusTotal reports that the site was scanned by 93 vendors with no current detections; however, the absence of detections does not constitute proof of safety and may simply indicate that signatures have not yet been generated.
Current status is listed as active, and the domain appears in at least one security blocklist. Uncertainty remains regarding the actual content served, the presence of credential‑harvesting forms, or any payload delivery mechanisms, as no visual or behavioral analysis is available. Defenders should treat remodelhealth.com as a high‑confidence phishing indicator: block the domain at perimeter and endpoint filters, monitor DNS queries for the associated IP, and consider adding it to internal threat intelligence feeds.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 14 identified
Cloud computing platform offering compute, storage, and networking services.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comConversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAmazon Web Services CDN for low-latency content delivery.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of remodelhealth.com · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260219-52B132 Recipient: aws-abuse@hubspot.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।