Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@publicdomainregistry.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
rksigmaboy[.]in
“Amazon”
rksigmaboy.in — Belum terverifikasi. Peniruan identitas merek: Amazon; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 13/91 (alphaMountain.ai, BitDefender, CTX AI, CyRadar, ESET); URLQuery 4 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. Registrar: Endurance Digital Doma….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain rksigmaboy.in has been identified as a generic phishing site that impersonates Amazon to steal login credentials and financial information. This threat is categorized as a credential harvesting attack, commonly known as a phishing page. The site was designed to mimic the Amazon login portal, tricking users into entering their email and password.
Technical indicators paint a clear picture of malicious intent. VirusTotal analysis shows that 17 out of 95 security vendors flag this domain as malicious. The domain was registered through Endurance Digital Domain Technology Private Limited and was created on March 04, 2026. It resolves to IP address 208.91.198.101 and uses an SSL certificate issued by Let's Encrypt (R12), which gives it a false sense of legitimacy. Additionally, the domain appears on one security blocklist and has been flagged by Google Safe Browsing.
As of the latest check, the domain is offline, indicating that it has been taken down following identification and reporting by security researchers. However, users who may have visited the site before takedown should monitor their accounts for unauthorized access and change their Amazon passwords immediately. The risk remains elevated due to potential data already captured by the attackers. PhishDestroy recommends using a password manager and enabling two-factor authentication on all online accounts to mitigate future threats.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | rksigmaboy.in |
malicious | Sinkholed |
| DigiCert UltraDNS | rksigmaboy.in |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | rksigmaboy.in |
malicious | Sinkholed |
| DNS4EU | rksigmaboy.in |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 2 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Most widely used open-source HTTP server software.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of rksigmaboy.in · checked Mar 4, 2026
Bukti & Laporan Eksternal
PD-20260304-B1D969 Recipient: abuse@publicdomainregistry.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive