Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@cloudns.net.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
xaut-coin[.]com
“The new site has been successfully created and is ready to work”
xaut-coin.com — असत्यापित. ब्रांड प्रतिरूपण: Coinbase; घोटाले का प्रकार: Impersonation. साक्ष्य सारांश: VirusTotal 2/91 (CRDF, Gridinsoft); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. रजिस्ट्रार: Cloud DNS.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain xaut-coin.com was registered via Cloud DNS Ltd and created on 25 February 2026. It resolves to 185.105.33.106, an address in Great Britain owned by AS43927 HOSTERION SRL and fronted by Cloudflare DNS (kehlani.ns.cloudflare.com, rob.ns.cloudflare.com). The site presented the page title “The new site has been successfully created and is ready to work” and employed a stack that includes PHP, Lodash, jQuery (both CDN and local), FancyBox, cdnjs libraries, and Cloudflare Browser Insights, indicating a generic web‑application framework rather than a bespoke phishing kit. The TLS certificate is issued by Let’s Encrypt (E7), which is typical for short‑lived malicious sites.
A Gridinsoft trust score of 0/100 and placement on three security blocklists, together with explicit blocks by PhishDestroy, MetaMask, and SEAL, demonstrate that the infrastructure has been recognized as malicious. VirusTotal analysis shows that two of ninety‑five antivirus engines flagged the domain, providing additional corroboration. The domain is currently taken offline, and no live HTTP response is observable.
The only brand reference in the intelligence is an impersonation of Coinbase, but the page content has not been captured, so the exact luring technique remains unknown. Defenders should add the domain and its resolved IP to blocklists, monitor for any re‑registration or resurrection of the host, and ensure that endpoint and email security solutions are updated to reflect the blocklist entries. Continuous watch for new assets using the same registrar, hosting provider, or naming‑server pattern is advised, as threat actors often recycle similar infrastructure.
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 9 identified
Server-side scripting language designed for web development.
Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of xaut-coin.com · checked Mar 6, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260227-BBDEC9 Recipient: abuse@cloudns.net क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।