download[.]deribitltd[.]cc

The domain download.deribitltd.cc has been identified as a high-risk phishing site. Phishing sites attempt to deceive users into providing sensitive information by posing as legitimate services. The site's title, 'Deribit', suggests it is impersonating a well-known cryptocurrency platform, potentially to capture usernames, passwords, and other sensitive data from unsuspecting visitors.

Analysis reveals multiple indicators confirming the site's malicious intent. VirusTotal results show that this domain is flagged by 13 out of 95 security vendors, indicating a significant level of threat. Furthermore, the domain was registered through Gname.com Pte. Ltd. on December 10, 2025, which raises suspicion about its legitimacy given its recent creation. Additionally, the domain resolves to IP address 138.113.144.178 and has been blocked by several security measures including MetaMask, SEAL, and PhishDestroy. Google Safe Browsing classifies it under 'SOCIAL_ENGINEERING', further supporting its status as a phishing risk.

If you have visited download.deribitltd.cc, it is recommended to immediately scan your system for malware and change any passwords that may have been entered on the site. Ensure that you have multi-factor authentication activated on all accounts for added security. Stay vigilant by checking URLs carefully before entering any personal information and rely on security software to alert you to potential phishing sites. Adding the domain to a personal blocklist will also help prevent accidental visits in the future.