caomei1234[.]com
“果冻传媒-最新果冻传媒视频-最热果冻传媒视频”
This domain, caomei1234.com, is flagged as a credential theft phishing site designed to harvest login credentials from visitors under the guise of adult media content. The page title, "果冻传媒-最新果冻传媒视频-最热果冻传媒视频," suggests an attempt to impersonate or exploit the branding of a known adult media platform to lure victims. Analysis indicates no direct association with cryptocurrency drainer kits or financial fraud infrastructure, focusing instead on credential acquisition through deceptive login prompts or fake membership portals.
Infrastructure analysis reveals the following technical indicators: the domain was registered on September 25, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. It resolves to the IP address 156.254.59.229, which has been linked to other malicious activities. VirusTotal reports 4 out of 95 security vendors flagging this domain as malicious, while Gridinsoft assigns it a trust score of 0/100. The domain appears on one security blocklist and was actively blocked by PhishDestroy. Google Safe Browsing (GSB) status is not explicitly listed, but the combination of low trust scores and blocklist presence confirms its malicious classification.
As of the latest assessment, caomei1234.com has been taken offline, likely due to enforcement actions by security providers or hosting services. However, the domain remains registered, and the infrastructure could be reactivated or repurposed for future campaigns. Users who interacted with the site are advised to reset credentials for any accounts accessed during the exposure window, particularly those tied to adult content platforms. Organizations should monitor for related indicators, including the IP address and registrar, to preemptively block similar threats. The elevated risk level persists due to the domain's history and the potential for reemergence.
Catatan laporan keluar
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260610-A958F0- Judul halaman yang direkam
- 果冻传媒-最新果冻传媒视频-最热果冻传媒视频
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | api.zzfxfz.com |
malicious | Sinkholed |
| DNS4EU | api.zzfxfz.com |
malicious | Sinkholed |
| DigiCert UltraDNS | api.oodj.org |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber · disinkronkan 09/08/2026
Linimasa deteksi
Pengamatan tersimpan dalam urutan kronologis.
-
VirusTotal
VirusTotal: 3 → 4
Intelijen komunitas
1 laporan komunitas
KategoriPHISHING
The PhishFort Detection System has flagged this as a domain threat, classified as phishing. Threat detected at 2026-06-10T12:32:11.390Z.
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive