molt-ai[.]xyz
molt-ai.xyz — Contenuto non disponibile. Riepilogo delle prove: VirusTotal 3/93 (alphaMountain.ai, Forcepoint ThreatSeeker, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 73/100. Registrar: NameSilo.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain molt-ai.xyz was registered through NameSilo, LLC on 27 February 2026, giving it an age of just over five months at the time of analysis. DNS resolution points exclusively to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. Authoritative nameservers are elaine.ns.cloudflare.com and owen.ns.cloudflare.com, confirming that the domain is hosted on Cloudflare’s network. No TLS certificate is presented, meaning the site is reachable only via HTTP and lacks the encryption and trust signals typically expected for legitimate services. An HTTP request returns the page title "Just a moment...", and the site is currently listed as offline as of 22 July 2026.
The domain appears on three public blocklists and is actively blocked by the security products PhishDestroy, MetaMask, and SEAL. VirusTotal scanning recorded three detections out of ninety‑three scanners, indicating that a minority of AV engines have identified malicious behavior associated with the domain. No additional payload, URL path, or content details have been published, so the precise phishing vector or targeted brand remains unknown.
Given the limited but concrete indicators, defenders should treat molt‑ai.xyz as a high‑confidence malicious indicator. Recommended actions include adding the domain and its resolving IP (188.114.96.3) to DNS blocklists or sinkhole configurations, monitoring Cloudflare‑hosted address ranges for similar activity, and continuously querying VirusTotal and other threat‑intel feeds for any new detections. The lack of SSL and the recent registration date suggest a short‑lived infrastructure, but the presence on multiple blocklists warrants continued vigilance until the domain is definitively retired.
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Dati e relazioni esterne
PD-20260227-855F8E Recipient: abuse@namesilo.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo