ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@microsoft.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
4 months
Reports sent
1
Latest case ID
PD-20260325-1A469A
Current status
Observed active at latest stored check
域安全和威胁情报
aramexciam[.]ciamlogin[.]com
“Sign in to your account”
威胁判定
关键
93/100 证据评分
可用性
隐形 · 可达
通过隐形检查观察可达性
风险信号
病毒检测总数：1/91
URLQuery threat systems: 1 alert
品牌冒充：MEXC
最后已知的活跃状态
报告概览
aramexciam.ciamlogin.com — 隐形 · 可达. 品牌冒充：MEXC; 诈骗类型：Investment Scam. 证据摘要: VirusTotal 1/91 (URLQuery); URLQuery 1 alert; URLScan malicious verdict; cloaking observed; PhishDestroy score 93/100. 注册商: MarkMonitor.
为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
重要
The domain aramexciam.ciamlogin.com is currently active and identified as a high-risk threat, specifically for brand impersonation. It targets the cryptocurrency exchange brand MEXC, attempting to deceive users into believing they are interacting with a legitimate MEXC service.
Analysis indicates that the domain has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion. The domain is registered through MarkMonitor Inc., a registrar known for managing high-value domains. It resolves to the IP address 40.126.31.3, which is located in Ireland (IE) and is associated with Microsoft Azure Active Directory (northeurope). The domain was created on March 25, 2026, and appears on one known security blocklist, further indicating its malicious intent. The page title, 'Sign in to your account,' is consistent with typical phishing tactics used to lure users into providing sensitive information.
The domain remains active as of the latest assessment. While it is blocked by PhishDestroy, users are still at risk if they bypass this block or access the site through other means. Given the high risk level and the use of a trusted registrar and infrastructure, it is recommended that users avoid this domain and report any related phishing attempts to the relevant authorities and the MEXC security team.
VirusTotal
1 det.
URLQuery
1 threat alert
URLScan
Gridinsoft
53/100
TLS 证书
Microsoft Corporation / Microsoft Azure RSA TLS Issuing CA 04 5d
年龄
5 mo
观测状态
隐形 · 可达
DestroyList
已列入
Reports Sent
1
数据覆盖范围
VirusTotal
1 / 91
URLQuery
1 threat-system alert
PhishStats
未检查
OTX
no community references
CF雷达
no data
URLScan capture
存储的报告
URLScan verdict
malicious
DNS 阻断
未检查
TLS
valid certificate, 5d
WHOIS
5 mo old
屏幕截图
3 captures · 3 sources
重定向链
未探查
Gridinsoft
53/100
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | aramexciam.ciamlogin.com |
malicious | Sinkholed |
威胁响应 Pipeline
发现
Checks
Reports
可用性
10/11
公共封禁名单状态
已保存的截图
域名情报
域名
URLScan Verdict
恶意
score 100 Phishing brand: Microsoft report ↗
服务器 / ASN
AS8075 Microsoft Corporation
IP 信誉
abuse score 7/100 103 reports checked 2026年8月13日
Registrar (base domain)
MarkMonitor
(US)
(US)
Registration (base domain)ciamlogin.com · 创建 2026年3月25日 (147d)
Cloaking
Cloaking Detected
Redirect split
· score 1/6
unavailable: raw=proxy_error; http=0; via=http_proxy; error=HTTPConnectionPool(host='82.29.236.82', port=7895): Max retries exceeded with url: http://aramexciam.ciamlogin.com/ (Cau
checked 2026年8月20日
技术细节DNS、SSL SAN、时间戳
首次发现2026年3月25日
IoC Extractionscanned 2026年7月29日0 wallet · 0 Telegram IoCs
域名服务器ns4-36.azure-dns.info
TLS Fingerprint
TLS Observationvalid from 2026年3月25日scanned 2026年4月22日
Case ID
ICANN OVERSIGHT
Registration: ciamlogin.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain ciamlogin.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of aramexciam.ciamlogin.com · checked Mar 26, 2026
65
Needs Work
Performance
FCP
4.02s
First Contentful Paint
LCP
5.89s
Largest Contentful Paint
CLS
0.091
Cumulative Layout Shift
TBT
86ms
Total Blocking Time
SI
5.14s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
证据与外部报告
证券分析
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-20260325-1A469A Recipient: abuse@microsoft.com Page title stored with report: Sign in to your account
OSINT与情报分析
DNS 与网络
SEO 与域名
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
相关基础设施与报告
Content matches 4
同一注册商: MarkMonitor 6
secure-web-indx.square.site 
trezr-login-uss.square.site MEXC impersonation 8
These domains also target MEXC users. View all MEXC threats →
gewomex.com 
bavomex.com 最近的威胁报告 4
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。
finglobalheritage.online 
metamask-k.blogspot.com.ng 