68uv[.]pilot45[.]com
Análisis de phishing y seguridad de 68uv.pilot45.com
“im官网-imtoken安卓版冷钱包下载”
68uv.pilot45.com — Contenido no disponible (HTTP 502). Suplantación de marca: ImToken; Tipo de estafa: Brand Impersonation. Resumen de las pruebas: VirusTotal 15/95 (ArcSight Threat Intelligence, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker); URLQuery 100 det.; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 100/100. Registrador: Gname.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
On July 23, 2026 a technical examination of the domain 68uv.pilot45.com was performed. The site is classified as a brand‑impersonation campaign targeting the cryptocurrency wallet provider imToken, as indicated by the page title "im官网-imtoken安卓版冷钱包下载" and the explicit brand reference in the intelligence. The domain was created on December 23, 2024 and is registered through Gname.com Pte. Ltd. Its authoritative name servers are aron.ns.cloudflare.com and titan.ns.cloudflare.com, pointing to a Cloudflare front‑end. DNS resolution returns the address 104.21.2.72, an IP owned by AS13335 Cloudflare, Inc. located in the United States. No TLS certificate is presented, implying that the service is reachable only over plain HTTP.
VirusTotal reports that fifteen of ninety‑five scanned security vendors flagged the domain, reinforcing the malicious assessment. The domain is currently listed as blocked by the PhishDestroy feed and appears on a single external security blocklist. Reputation services assign a Scamadviser trust score of 1 out of 100, reflecting an extremely low confidence rating. The operational status is recorded as offline, and no live content was captured at the time of analysis.
Uncertainties remain around the specific payload or credential‑harvesting mechanisms, as no page screenshots, script hashes, or additional indicator sets were available. Defensive actions should include immediate network‑level blocking of 68uv.pilot45.com and its resolved IP address, incorporation of the domain into threat‑intel feeds, and monitoring for any re‑registration attempts or related sub‑domains under the same registrar. Continuous observation of Cloudflare‑hosted assets associated with the same ASN is advised, as adversaries frequently recycle infrastructure. Updating intrusion‑detection signatures to flag the observed page title and brand reference can further reduce exposure to this impersonation vector.
Señales de seguridad
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Registration: pilot45.com
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain pilot45.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.