derivefx.com — المحتوى غير متوفر (HTTP 502). انتحال العلامة التجارية: WalletConnect; نوع الاحتيال: Brand Impersonation. ملخص الأدلة: VirusTotal 2/91 (Gridinsoft, SOCRadar); URLQuery 2 alerts; URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. مسجّل النطاق: Hostinger.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Facts
PhishDestroy first observed derivefx.com on Apr 27, 2026. Stored content metadata identifies WalletConnect as the apparent target. The captured page title is “Welcome to Derive Fx”. Evidence score: 66/100 (high).
6 independent sources recorded positive findings: VirusTotal, MetaMask, SEAL, DNS security resolvers, URLQuery, and URLScan. VirusTotal recorded 2 detections among 91 engines: Gridinsoft, SOCRadar on Jun 26, 2026 at 05:27 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 10:20 UTC. DNS security checks returned 3 blocking results across 12 tested policies: Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. URLQuery recorded 2 threat-system alerts on Apr 27, 2026 at 17:19 UTC.
HTTP 502 was recorded on Aug 9, 2026 at 01:14 UTC; content was unavailable. Registration records for the domain list HOSTINGER operations, UAB as the registrar and Apr 27, 2026 as the creation date. At collection time, the hostname resolved to 82.25.96.202 on AS47583 (Hostinger International Limited). The evidence archive retains 2 visual captures from PhishDestroy and URLQuery.
نطاق تغطية البيانات13 recorded checks
استخبارات أمن الشبكات
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| Hagezi Threat Feed | derivefx.com |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
التقنيات · 11 identified
amCharts is a JavaScript-based interactive charts and maps programming library and tool.
amcharts.com ثقة 100٪YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
www.youtube.com ثقة 100٪Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com ثقة 100٪Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.
momentjs.com ثقة 100٪jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com ثقة 100٪Hostinger is an employee-owned Web hosting provider and internet domain registrar.
www.hostinger.com ثقة 100٪Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org ثقة 100٪HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org ثقة 100٪تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of derivefx.com · checked Jun 26, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
PD-20260427-C47FBE Recipient: abuse-tracker@hostinger.com Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.