Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse.support@h4g.co.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
xalqen[.]casa
“Iniciar sesión en tu cuenta Microsoft”
xalqen.casa — असत्यापित. ब्रांड प्रतिरूपण: Microsoft; घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 18/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 6 alerts; URLScan malicious verdict; Spamhaus DBL_SPAM; CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: Sav.com.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of xalqen.casa indicates a high risk of brand impersonation, specifically targeting Microsoft. The domain is designed to deceive users into believing they are interacting with a legitimate Microsoft service, potentially leading to the theft of personal information and credentials.
This domain was created on February 18, 2026, and is registered through Sav.com LLC. Infrastructure analysis reveals that xalqen.casa resolves to the IP address 185.221.216.121. The domain has been flagged by 21 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion within the cybersecurity community. Additionally, the domain appears in one threat intelligence pulse on AlienVault OTX and is listed on one security blocklist. The SSL certificate for the domain is issued by Let's Encrypt, which, while a reputable authority, does not guarantee the legitimacy of the site. The combination of these indicators points to a deliberate attempt to impersonate Microsoft and engage in malicious activities.
To mitigate the risks associated with brand impersonation, users are advised to verify the URL of any Microsoft-related service they visit. Legitimate Microsoft URLs will typically end in .com or .net, and any deviation should be treated with caution. Users should also avoid entering sensitive information on any page that seems suspicious or unfamiliar. It is recommended to report any suspicious activity to Microsoft's security team and to use multi-factor authentication (MFA) wherever possible to protect against unauthorized access. Regularly updating security software and maintaining awareness of common phishing tactics can further enhance security measures.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | xalqen.casa |
malicious | Sinkholed |
| OpenDNS | xalqen.casa |
phishing | Phishing Block |
| DigiCert UltraDNS | xalqen.casa |
malicious | Sinkholed |
| DNS4EU | xalqen.casa |
malicious | Sinkholed |
| OpenDNS | cdn.glitch.global |
phishing | Phishing Block |
| DNS4EU | cdn.glitch.global |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 3 identified
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% विश्वासGoogle Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.
developers.google.com 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of xalqen.casa · checked Apr 15, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260414-CD10BD Recipient: abuse.support@h4g.co क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।