Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@digitalocean.com.
The latest stored availability evidence still shows the domain reachable; 14 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
my-uphold-cdn[.]meku[.]app
“Log In® — UpHold™ | Sign In to Your Account®”
my-uphold-cdn.meku.app — Doğrulanmamış. Marka kimliğine bürünme: Across; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 15/91 (BitDefender, CRDF, ESET, Emsisoft, Forcepoint ThreatSeeker); URLQuery 1 alert; URLScan malicious verdict; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 95/100.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
The domain my-uphold-cdn.meku.app remains active as of the report date, August 05, 2026, and is classified as a generic phishing threat. Infrastructure analysis shows the domain resolves to the IPv4 address 157.230.64.11. The domain is listed on three external security blocklists and is flagged by Google Safe Browsing for social engineering. Additional blocking is observed from PhishDestroy, MetaMask, and SEAL, indicating that multiple protective platforms have incorporated the domain into their deny lists.
VirusTotal records indicate that the domain was scanned by 95 security vendors, with none reporting a detection at the time of analysis. The domain’s nameserver information could not be retrieved, as indicated by the NS_NOT_FOUND entry. No public SSL certificate details, HTTP response codes, or page title information are presently available, limiting deeper content‑level insight.
Given the convergence of blocklist entries, safe‑browsing flag, and active resolution to a single IP, the domain should be treated as high‑risk by network defenders. Recommended mitigation steps include adding the domain and its resolved IP address to firewall deny lists, updating proxy and DNS filtering rules, and monitoring outbound traffic for connections to 157.230.64.11. Continuous re‑evaluation is advised, as changes to hosting or detection status may occur without notice.
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | my-uphold-cdn.meku.app |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 7 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org %100 güvenUbuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com %100 güvenNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org %100 güvenExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com %100 güvenAmazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com %100 güvenHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of my-uphold-cdn.meku.app · checked Aug 5, 2026
Kanıtlar ve Dış Raporlar
PD-20260805-68298F Recipient: abuse@digitalocean.com Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin