Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
mysaiban[.]com
“साईबन निसर्गाचा कुशीत वसलेले एक टुमदार घरटं...”
Observação armazenada
Contraste de títulos observado
Resumo das evidências
mysaiban.com was observed on 2026-07-12 as an active brand‑impersonation site targeting Google. The domain was registered on 2017-06-22 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to 103.117.212.145, an address owned by AS140641 YOTTA NETWORK SERVICES PRIVATE LIMITED in India. The site returns HTTP 200 and presents a page titled “साईबन निसर्गाचा कुशीत वसलेले एक टुमदार घरटं…”, which does not reference the impersonated brand but is used as a lure in email‑based scams. The infrastructure is hosted behind a LiteSpeed web server and employs a free TLS certificate, indicating a valid TLS handshake but offering no authentication of the operator.
Static analysis shows the page loads YouTube embeds, Bootstrap, Slick, OWL Carousel, jQuery, Google Hosted Libraries and Google Analytics, suggesting a typical content‑driven template rather than a custom phishing kit. The domain received a Gridinsoft trust score of 0/100 and appears on one external blocklist. VirusTotal scanned the host and 11 of 95 security vendors flagged it as malicious, reinforcing the suspicion. Nameservers are ns301.ownmyserver.com, ns302.ownmyserver.com, ns311.ownmyserver.com and ns312.ownmyser, all pointing to the same hosting provider.
Analysis confirms the site is being used to impersonate Google in email campaigns, likely to harvest credentials or deliver malware. While the exact payload delivered to victims remains unknown, the presence of analytics and video elements suggests the operator tracks visitor interaction. Defenders should block the domain and its associated IP at perimeter firewalls, update email filtering rules to flag messages containing links to mysaiban.com, and consider sinkholing the host to disrupt traffic. Continuous monitoring of the listed nameservers and the ASN is recommended, as the operator may shift to adjacent IP ranges or replicate the site under new domains.
Instantâneo das evidências enviadas
- Enviado
- Registros do livro-razão
- 1
- ID do caso
PD-20260318-2784A8- Título da página capturada
- साईबन निसर्गाचा कुशीत वसलेले एक टुमदार घरटं...
- Artefato PDF
- Evidência em PDF
Texto completo da evidência
Acceptable Use Policy: The domain mysaiban.com is engaged in phishing activities, which constitutes a clear violation of your AUP prohibiting fraud and deception.
Terms of Service: The ongoing use of this domain for illegal activities breaches your TOS, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (IN):
Information Technology Act, 2000 (Section 66): This section addresses computer-related offenses, including hacking and phishing, making such activities punishable under Indian law.
Indian Penal Code (Section 420): This section pertains to cheating and dishonestly inducing delivery of property, applicable to phishing schemes that deceive individuals into providing sensitive information.
Regulatory Note: Failure to take prompt action against this domain may result in liability under applicable laws and could expose your organization to regulatory scrutiny. Immediate suspension is advised to mitigate potential risks.
Data Coverage
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/21cd2156/player_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| DNS4EU | mysaiban.com |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
VirusTotal
0 → 9
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of mysaiban.com · checked Mar 18, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo