Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@internet.gmo.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
melaniatrumpx[.]xyz
“melaniatrumpx.xyz”
melaniatrumpx.xyz — Non verificato. Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 6/91 (alphaMountain.ai, Chong Lua Dao, CRDF, Forcepoint ThreatSeeker, Gridinsoft); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 78/100. Registrar: GMO Internet.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
This domain, melaniatrumpx.xyz, is identified as a crypto drainer phishing site designed to compromise digital wallet credentials and siphon cryptocurrency assets. Analysis indicates no direct brand impersonation, but the infrastructure aligns with known wallet-draining kits targeting users through deceptive transaction prompts or fake wallet interfaces. The domain lacks legitimate use cases and exhibits characteristics consistent with automated phishing frameworks. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 23.48.203.147 and was registered on April 10, 2026, through GMO Internet, Inc. Security vendors on VirusTotal flagged the domain at a 1/95 detection rate, while it appears on two security blocklists. The SSL certificate is issued by GoDaddy.com, though this does not mitigate the malicious intent. Google Safe Browsing status was not explicitly confirmed, but the domain is actively blocked by MetaMask and SEAL, further validating its fraudulent nature. The domain is currently offline, reducing immediate exposure risk. However, historical activity and registration details suggest potential for re-emergence under similar infrastructure. Users who interacted with the domain should revoke any connected wallet permissions, monitor transaction histories for unauthorized activity, and verify the legitimacy of any future communications referencing this domain. The elevated risk classification remains due to the domain’s association with crypto-draining operations and its presence on multiple blocklists.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org Confidenza al 100%Envoy is an open-source edge and service proxy, designed for cloud-native applications.
www.envoyproxy.io Confidenza al 100%Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Akamai Web Application Protector is designed for companies looking for a more automated approach to web application firewall (WAF) and distributed denial-of-service (DDoS) security.
www.akamai.com Confidenza al 100%Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.
akamai.com Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterne
PD-20260620-11D8FC Recipient: abuse@internet.gmo Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo