defi3q8d[.]top

This report provides a technical analysis of the domain defi3q8d.top, identified as a crypto drainer, as of July 24, 2026. The domain was registered through 域名國際有限公司 and created on July 25, 2025. It currently resolves to the IP address 172.67.129.18, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain has been taken offline, and its current status is marked as such.

The page title, 'POOL-VIP,' suggests that the site may have been designed to mimic a legitimate cryptocurrency pool or service, though the exact content has not been analyzed. The domain does not have an SSL certificate, which is a common indicator of a low-security or potentially malicious site. Analysis indicates that defi3q8d.top appears on two security blocklists, specifically PhishDestroy and ScamSniffer, further supporting its classification as a crypto drainer. Gridinsoft assigns this domain a trust score of 0 out of 100, indicating a high level of suspicion.

While the domain is currently offline, defenders should remain vigilant and ensure that it is blocked in their network security policies to prevent any potential future reactivation. The nameservers used for this domain are fattouche.ns.cloudflare.com and kay.ns.cloudflare.com, which are managed by Cloudflare, a known hosting and DNS provider. The domain's presence on multiple blocklists and its low trust score should be considered when evaluating the risk it poses to users and networks.