VirusTotal
3 / 91
“Default page”
io-chip.online — Inhalt nicht verfügbar. Betrugstyp: Credential Phishing. Zusammenfassung der Beweislage: VirusTotal 3/91 (alphaMountain.ai, Gridinsoft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. Registrar: Hostinger.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
This domain, io-chip.online, is currently under investigation for potential credential harvesting activity. Credential harvesting sites mimic legitimate login pages to trick users into entering sensitive information such as usernames, passwords, or financial details. These stolen credentials are often used for unauthorized account access, identity theft, or financial fraud. While the site may appear harmless or inactive at first glance, its infrastructure and registration patterns align with known phishing operations targeting unsuspecting users. Analysis indicates the domain was registered on June 25, 2026, through HOSTINGER operations, UAB, a registrar frequently used by threat actors to deploy phishing infrastructure. As of the latest scan, VirusTotal reports 0 detections out of 95 security engines, suggesting the site has not yet been widely flagged or may employ evasion techniques. The domain resolves to the IP address 145.79.20.71 and uses a Let's Encrypt SSL certificate, which is commonly abused to lend a false sense of legitimacy. The page title, 'Default page,' further suggests the site may be in a preparatory or transitional phase, awaiting deployment of malicious content. If you have visited io-chip.online or entered any information on the site, immediate action is required. First, change passwords for any accounts that may have been exposed, prioritizing email, banking, and other high-value services. Enable multi-factor authentication (MFA) where available to add an additional layer of security. Monitor accounts for unusual activity, such as unauthorized logins or transactions, and report any suspicious behavior to the relevant service providers. Additionally, consider running a full scan of your device using updated security tools to detect potential malware or backdoors. Users should also report the domain to their organization's security team or to platforms like Google Safe Browsing or PhishTank to help prevent further exploitation.
Gespeicherte Beobachtungen zum Vergleich zwischen Crawler und Browser für diesen Host sowie eine Echtzeit-Fingerabdruckprüfung für Verkehrsverteilungssysteme im Keitaro-Stil.
Anmerkung des Scanners: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='io-chip.online', port=80): Max retries exceeded with url: / (Caused by NewConnectionError(
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
byte.dns-parking.compixel.dns-parking.comLocation describes the IP network.
Google PageSpeed Insights — mobile performance audit of io-chip.online · checked Jun 27, 2026
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20260627-27B5BA Recipient: abuse@hostinger.com Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Template-based draft · optional AI wording assistance requires separate consent
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenMelden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenAktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBeobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt