Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 27 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
whatsapp[.]xolura[.]com
“Whatsapp”
whatsapp.xolura.com — असत्यापित. घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 13/91 (alphaMountain.ai, Cluster25, CRDF, CyRadar, Emsisoft); URLQuery 4 alerts; Spamhaus DBL_ABUSED_PHISH; CF Radar malicious; PhishDestroy score 93/100. रजिस्ट्रार: Namecheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis on July 23, 2026 indicates that whatsapp.xolura.com remains active and continues to resolve to the IPv4 address 128.199.171.235. The domain was registered on June 21, 2016 through Namecheap Inc and is delegated to the authoritative name servers dns1.registrar-servers.com and dns2.registrar-servers.com. Current threat intelligence classifies the domain as a generic phishing infrastructure; it is listed on one public security blocklist and has been manually blocked by the PhishDestroy filtering service.
VirusTotal reports that nine out of ninety‑five scanning engines have flagged the domain as malicious, corroborating the phishing designation. No additional data such as SSL certificate details, HTTP response codes, Safe Browsing verdicts, Open Threat Exchange references, trust‑score metrics, or page‑title information have been published for this host, leaving those vectors unverified. The lack of publicly disclosed page content means defenders cannot confirm the exact lure or credential‑capture mechanism employed, only that the domain is associated with a high‑risk phishing campaign.
Defensive recommendations include adding the domain and its resolving IP address (128.199.171.235) to outbound and inbound deny lists, ensuring DNS resolvers block queries for whatsapp.xolura.com, and confirming that existing email security gateways enforce URL filtering against the known blocklist entry. Continuous monitoring of the hosting provider and name‑server changes is advised, as alterations could signal a shift in the underlying infrastructure. Organizations should also review any recent user‑reported incidents that reference WhatsApp‑related login prompts, as the domain name suggests a possible impersonation attempt, and apply heightened scrutiny to any credential submissions directed to this host.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | whatsapp.xolura.com |
phishing | Phishing Block |
| Cloudflare DNS | whatsapp.xolura.com |
malicious | Sinkholed |
| DNS4EU | whatsapp.xolura.com |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | whatsapp.xolura.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: xolura.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain xolura.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
थ्रेट इंटेलिजेंस क्रॉस-रेफ़रेंस · source references
तकनीकें · 2 identified
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com 100% विश्वासNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of whatsapp.xolura.com · checked Jul 23, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260723-E1DD4E Recipient: abuse@namecheap.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।