Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@sarpstechnologies.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
mysaiban[.]com
mysaiban.com için kimlik avı ve güvenlik kontrolü
“साईबन निसर्गाचा कुशीत वसलेले एक टुमदार घरटं...”
mysaiban.com — Bilinen son aktif (HTTP 200). Marka kimliğine bürünme: Google; Dolandırıcılık türü: Credential Phishing. Kanıt özeti: VirusTotal 12/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 2 alerts; PhishDestroy score 100/100. Kayıt kuruluşu: PDR.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
mysaiban.com was observed on 2026-07-12 as an active brand‑impersonation site targeting Google. The domain was registered on 2017-06-22 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to 103.117.212.145, an address owned by AS140641 YOTTA NETWORK SERVICES PRIVATE LIMITED in India. The site returns HTTP 200 and presents a page titled “साईबन निसर्गाचा कुशीत वसलेले एक टुमदार घरटं…”, which does not reference the impersonated brand but is used as a lure in email‑based scams. The infrastructure is hosted behind a LiteSpeed web server and employs a free TLS certificate, indicating a valid TLS handshake but offering no authentication of the operator.
Static analysis shows the page loads YouTube embeds, Bootstrap, Slick, OWL Carousel, jQuery, Google Hosted Libraries and Google Analytics, suggesting a typical content‑driven template rather than a custom phishing kit. The domain received a Gridinsoft trust score of 0/100 and appears on one external blocklist. VirusTotal scanned the host and 11 of 95 security vendors flagged it as malicious, reinforcing the suspicion. Nameservers are ns301.ownmyserver.com, ns302.ownmyserver.com, ns311.ownmyserver.com and ns312.ownmyser, all pointing to the same hosting provider.
Analysis confirms the site is being used to impersonate Google in email campaigns, likely to harvest credentials or deliver malware. While the exact payload delivered to victims remains unknown, the presence of analytics and video elements suggests the operator tracks visitor interaction. Defenders should block the domain and its associated IP at perimeter firewalls, update email filtering rules to flag messages containing links to mysaiban.com, and consider sinkholing the host to disrupt traffic. Continuous monitoring of the listed nameservers and the ASN is recommended, as the operator may shift to adjacent IP ranges or replicate the site under new domains.
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/21cd2156/player_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| DNS4EU | mysaiban.com |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 9 identified
Popular CSS framework for responsive, mobile-first web development.
High-performance web server compatible with Apache configurations.
Touch-enabled jQuery plugin for responsive carousel sliders.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of mysaiban.com · checked Mar 18, 2026
Kanıtlar ve Dış Raporlar
PD-20260318-2784A8 Recipient: abuse@sarpstechnologies.com Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin