3lrxwe[.]top
“ERJUN”
Stored observation
Observed title contrast
Evidence Summary
This domain, 3lrxwe.top, is under investigation for credential theft activity targeting unsuspecting users. Analysis indicates no direct association with known brand impersonation or crypto drainer kits at this stage, though the infrastructure aligns with common phishing delivery mechanisms. The domain lacks prior malicious classification but exhibits characteristics warranting closer scrutiny. Infrastructure analysis reveals the following technical indicators: the domain was registered on July 02, 2026, through GLOBAL ASSET DOMAINS INC. It resolves to the IP address 172.67.162.54 and currently holds a VirusTotal detection score of 0/95. The SSL certificate is issued by Google Trust Services, and no blocklist entries or Google Safe Browsing flags have been recorded as of this report. The domain remains active and unflagged by major threat intelligence platforms, posing a potential risk to users who may encounter it through malicious links or deceptive communications. Response actions include ongoing monitoring for changes in detection status or infrastructure modifications. Users are advised to treat this domain as suspicious until further evidence confirms its legitimacy or malicious intent. Organizations should consider implementing network-level blocking for 3lrxwe.top and its associated IP to mitigate exposure.
Data Coverage
Network Security Intelligence
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 12, 2026
8 monitored external feeds No match
Detection timeline
-
VirusTotal
None → 0
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
6 high-confidence technologies identified
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of 3lrxwe.top · checked Jul 6, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive