Lompat ke laporan keamanan
⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 6. Daftar blokir publik yang melaporkan kecocokan: 2. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is domainabuse@service.aliyun.com. The latest stored availability evidence still shows the domain reachable; 23 days has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
23 days
Reports sent
1
Latest case ID
PD-20260723-F92B8E
Current status
Observed active at latest stored check
Keamanan domain dan intelijen ancaman

h5[.]vip-mqgc[.]com

“MQGC”

Putusan ancaman Kritis 90/100 skor bukti
Ketersediaan Belum terverifikasi Keterjangkauan saat ini belum terverifikasi
Deteksi Total Virus: 6/91 Daftar blokir yang disimpan cocok: 2 URLQuery threat systems: 2 alerts
23/07/2026 1 Report Sent CDN
Ringkasan laporan

h5.vip-mqgc.com — Belum terverifikasi. Ringkasan bukti: VirusTotal 6/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); URLQuery 2 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 90/100. Registrar: Dominet (HK).

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Ringkasan bukti
KRITIS
Ref
D7DEA0E3
Skor
90/100

Analysis of h5.vip-mqgc.com shows a newly registered domain created on July 16, 2026 and currently marked as active. The domain is registered through Dominet (HK) Limited, indicating a Hong Kong‑based registrar. DNS resolution points to the IPv4 address 52.222.236.124, and the authoritative name servers are devin.ns.cloudflare.com, ns-1167.awsdns-17.org, ns-1795.awsdns-32.co.uk, and ns-599.aws, suggesting a mixed hosting environment that incorporates Cloudflare and Amazon Web Services infrastructure.

VirusTotal records indicate the domain was examined by 91 scanning vendors, none of which reported a detection at the time of the query; while this lack of detections does not confirm safety, it reflects the current absence of known malicious signatures. The domain is listed on a single security blocklist and is actively blocked by PhishDestroy, reinforcing the view that it is being treated as a phishing vector. No additional public intelligence such as Safe Browsing alerts, OTX mentions, SSL certificate details, HTTP response codes, or page‑title information is available.

Consequently, the primary evidence for threat attribution consists of the registrar, hosting profile, blocklist status, and the explicit block by PhishDestroy. Defenders should continue to monitor DNS queries for this FQDN, enforce blocklist rules that include the listed IP address and name servers, and consider adding the domain to internal deny lists. Ongoing observation of any changes in detection counts, additional blocklist listings, or emergence of payload samples will be required to refine the risk assessment.

VirusTotal
VirusTotal
6 det.
URLQuery
URLQuery
2 threat alerts
URLScan
URLScan
Sertifikat TLS
Amazon
Usia
1 mo New
Status terpantau
Belum terverifikasi
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data VirusTotal 6 / 91 URLQuery 2 threat-system alerts PhishStats tidak diperiksa OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS tidak diperiksa TLS valid certificate, 190d WHOIS 1 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki
Intelijen Keamanan Jaringan
Threat Detection Systems 2 alerts
Detection System Indicator Verdict Alert
DNS4EU api.vip-mqgc.com malicious Sinkholed
DNS4EU h5.vip-mqgc.com malicious Sinkholed

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
12/13
Sent Report Recorded
Stored sent-report record for registrar Dominet (HK) Limited, hosting provider, 1 abuse contact
domainabuse@service.aliyun.com
23/07/2026

Status Daftar Blokir Publik

Tangkapan tersimpan

Judul Halaman
MQGC
Sertifikat TLS
Valid transport encryption · Diterbitkan oleh Amazon · valid for 190 days

Intelijen Domain

Domain
URLScan Verdict Analisis selesai score 0 report ↗
Server / ASN openresty · AS16509 Amazon.com, Inc.
IP Context Amazon CloudFront shared edge origin IP hidden Reputasi Edge-IP tidak dikaitkan dengan domain ini.
Registrar (base domain) Dominet (HK) TH(TH)
Alamat IP 52.222.236.124 CDN
LokasiDE Frankfurt am Main, DE
JaringanAS16509 · AWS CloudFront (GLOBAL)
IP asal tersembunyi di balik proksi CDN. Hasil IP terbalik untuk alamat edge berisi penyewa yang tidak terkait; menemukan asal memerlukan DNS pasif atau data transparansi sertifikat.
Registration (base domain)vip-mqgc.com · Dibuat 16/07/2026 (30d · New) Expires 16/07/2027
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi23/07/2026
DOM Analysisanalyzed 23/07/2026score 90/100
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://h5.vip-mqgc.com/
Server namadevin.ns.cloudflare.comns-1167.awsdns-17.orgns-1795.awsdns-32.co.ukns-599.awsdns-10.netns-74.awsdns-09.comrafe.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 16/07/2026scanned 23/07/2026
Case ID
ICANN OVERSIGHT Registration: vip-mqgc.com

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For the registrable domain vip-mqgc.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Tidak ada yang dikirim secara otomatis.
Teknologi · 4 identified
Nginx
Web servers Reverse proxies

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

nginx.org Keyakinan 100%
Amazon Web Services
PaaS

Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.

aws.amazon.com Keyakinan 100%
OpenResty
Web servers

OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.

openresty.org Keyakinan 100%
Amazon CloudFront
CDN

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.

aws.amazon.com Keyakinan 100%
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

6 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection Previous stored snapshot: 5 detections
alphaMountain.ai
CRDF
Forcepoint ThreatSeeker
Fortinet
Gridinsoft
SOCRadar

Bukti Terarsip

Wayback Machine Snapshot
Cuplikan sejarah tersedia untuk tinjauan bukti
View Archive
Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of h5.vip-mqgc.com · checked Jul 23, 2026

55
Needs Work
Performance
FCP
18.9s
First Contentful Paint
LCP
23.78s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
18.9s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Bukti & Laporan Eksternal

Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260723-F92B8E Recipient: domainabuse@service.aliyun.com
Page title stored with report: MQGC
URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 27.6 KB

Apakah Anda Terpengaruh oleh Situs Ini?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri

Periksa Domain Apa Pun

Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik

Pindai Sekarang

Laporkan Phishing

Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas

Laporan

Pemberitahuan Ancaman Real-Time

Laporan phishing terbaru dan perubahan ketersediaan yang diamati

Pantau

Tetap Terinformasi, Tetap Aman

Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive

Pemberitahuan Ancaman Real-Time Ajukan Banding Terhadap Iklan Ini
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html
<iframe
  src="https://phishdestroy.io/id/embed/domain/h5.vip-mqgc.com"
  title="PhishDestroy threat report for h5.vip-mqgc.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.