MALICIOUS — HIGH
فحص التصيد والأمان للنطاق upictures.app
upictures[.]
PhishDestroy identifies upictures.app as an active cryptocurrency drainer under investigation, currently flagged with a risk level of under_investigation.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- التوفر
- لم يتم التحقق منها · HTTP 409
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
upictures.app — لم يتم التحقق منها (HTTP 409). نوع الاحتيال: Crypto Drainer. ملخص الأدلة: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); URLQuery 2 alerts; PhishDestroy score 65/100. مسجّل النطاق: Fewmoretaps OU d/b/a T….
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
PhishDestroy identifies upictures.app as an active cryptocurrency drainer under investigation, currently flagged with a risk level of under_investigation. This domain mimics legitimate image services to deceive users into connecting crypto wallets, enabling unauthorized fund transfers. The threat is classified as a generic phishing attack with direct financial implications for cryptocurrency holders.
This domain was flagged by PhishDestroy on seed 3562a4, with technical indicators including a VirusTotal detection rate of 0/95 engines, registration through Fewmoretaps OU (operating as Trustname.com), a March 01, 2026 creation date, and resolution to IP 216.24.57.1. Despite the absence of current blocklist entries or trust score penalties, the domain's recent registration and lack of online reputation pose significant risks. The absence of detections on VirusTotal suggests either a newly deployed attack or evasion tactics by the threat actor.
To mitigate exposure to upictures.app, users should immediately avoid interacting with the domain, including refraining from wallet connections or file uploads. Cryptocurrency holders are advised to verify URLs via PhishDestroy’s real-time scanner before any transactional activity. Block the IP 216.24.57.1 at the network level and report any suspicious connections to PhishDestroy for further analysis. Always cross-check domain registrations against ICANN records and monitor wallet activity for unauthorized transactions.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | upictures.app |
malicious | Sinkholed |
| Hagezi Threat Feed | upictures.app |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
تحليل VirusTotal
الأدلة والتقارير الخارجيةIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.