# deepnode.ngrok.app — SUSPICIOUS

> deepnode.ngrok.app is linked to phishing threats and listed on blocklists. Avoid interacting with it and ensure your security software is updated.

## Summary
PhishDestroy identifies deepnode.ngrok.app as a medium-risk phishing domain. The site was reported for attempting to deceive users with fraudulent content, aiming to steal sensitive information.

The domain was registered through a dead domain provider and appeared on three security blocklists, indicating suspicious activity. Technical analysis revealed typical phishing infrastructure, leveraging Ngrok's tunneling service to mask its origin.

Currently, deepnode.ngrok.app is offline and inaccessible. Users are advised to remain cautious, avoid any interaction with such domains, and keep their security solutions updated to prevent exposure to phishing attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Page title: DeepNode DIVE Platform

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NameCheap, Inc.
- Country: US
- IP: 63.176.118.220
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: ["ns-1446.awsdns-52.org", "ns-1548.awsdns-01.co.uk", "ns-422.awsdns-52.com", "ns-743.awsdns-28.net"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bbd1b-005e-7560-9b9a-bafb18cdce48.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/18665198-83fa-478c-b6e9-854309ee502b
- PhishDestroy: https://phishdestroy.io/domain/deepnode.ngrok.app/
- LLM endpoint: https://phishdestroy.io/domain/deepnode.ngrok.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/deepnode.ngrok.app/
Last updated: 2026-03-19