Busca dominios supervisados y revisa las pruebas almacenadas, las detecciones y la última disponibilidad observada.

195,301
Total registrado
195,300
Se ha detectado VT
87,794
Última conexión: activo
108,764
No disponible en la última comprobación
1
VT Pendiente
Ice Phishing
ALTO THREAT

Understanding and Combating Ice Phishing Threats

PhishDestroy currently associates 40 tracked domain reports with Ice Phishing. Review stored detections, evidence, and the latest observed availability below.

40
Dominios Detected
ALTO
Threat Level

How This Attack Works

Ice Phishing is a sophisticated technique that targets users by manipulating blockchain transactions. Here's how it typically unfolds.

STEP 1
Target Identification
Attackers identify potential victims, often targeting users with significant cryptocurrency holdings.
STEP 2
Setup Spoofed Environment
The attacker creates a fake website or app mimicking a legitimate service to deceive users.
STEP 3
Credential Harvesting
Users are tricked into entering sensitive information, allowing attackers to gain access to their accounts.
STEP 4
Unauthorized Transactions
With access to the victim's account, attackers execute unauthorized transactions, siphoning funds.

Technical Analysis

Ice Phishing attacks often involve the use of malicious smart contracts that exploit users by redirecting transactions to the attacker's wallet. Attackers employ social engineering techniques to lure victims into signing transactions that they believe are legitimate. These transactions often use clever code obfuscation to hide the true nature of the transaction. Attackers also leverage compromised infrastructure, such as DNS servers or hosting services like those registered through arin or Vercel Inc., to create convincing phishing environments. By mimicking legitimate services, these attacks bypass traditional security checks, making detection challenging.

Real Cases

Ethereum Wallet Scam (2023)
$1.2 million stolen
Attackers used a fake wallet service to steal credentials, resulting in a substantial loss of Ethereum funds.
Crypto Exchange Phishing (2024)
$2.5 million stolen
A phishing site mimicking a popular exchange tricked users into entering their login details, leading to significant asset theft.
DeFi Plataforma Breach (2024)
$3.8 million stolen
A decentralized finance platform was targeted by ice phishers who exploited smart contract vulnerabilities to siphon funds.

How to Detect

Unusual domain names that closely resemble legitimate services
Unexpected requests for private keys or seed phrases
Emails or messages urging immediate action on your crypto assets
Anomalies in transaction requests, such as unexpected gas fees
Lack of HTTPS encryption on websites requiring sensitive input

How to Protect Yourself

1 Always verify the URL before entering sensitive information
2 Enable two-factor authentication on all accounts
3 Regularly monitor transaction logs for unauthorized activities
4 Educate yourself about common phishing tactics
5 Use hardware wallets for enhanced security

Frequently Asked Questions

What is Ice Phishing?
Ice Phishing is a cyber threat where attackers deceive users into authorizing fraudulent transactions by mimicking legitimate services.
How much money has been stolen through Ice Phishing?
Ice Phishing has resulted in millions of dollars of losses, with notable cases like the Ethereum Wallet Scam in 2023 costing $1.2 million.
How do I protect myself from Ice Phishing?
Stay vigilant, verify URLs, use two-factor authentication, and maintain awareness of phishing tactics to protect yourself.
What should I do if I'm a victim of Ice Phishing?
Immediately report to your financial institution, change credentials, and alert local authorities and platforms like PhishDestroy.
Data sourced from PhishDestroy threat intelligence database — 40 domains tracked for this threat type
Ice Phishing — Threat Intelligence Token Approval Activo Threat
40
Dominios
5
Alive
35
Retirado
8.1
Avg VT
12.5%
Tasa de supervivencia
87.5%
Detected
Since Mar 2024 25 dominios con VT ≥ 5
Ice Phishing 40 domains
Captura de pantalla de rectification-fixuserauthentication.vercel.app
rectification-fixuserauthentication.vercel.app
23 VTDesconocidoacross
Captura de pantalla de rectification-fixuserauthentication.vercel.app
rectification-fixuserauthentication.vercel.app
Captura de pantalla de rectifyissues-now.vercel.app
rectifyissues-now.vercel.app
20 VTDesconocido
Captura de pantalla de rectifyissues-now.vercel.app
rectifyissues-now.vercel.app
Captura de pantalla de supports-rectification.vercel.app
supports-rectification.vercel.app
17 VTDesconocidoacross
Captura de pantalla de supports-rectification.vercel.app
supports-rectification.vercel.app
Captura de pantalla de authwalletconnect.com
authwalletconnect.com
15 VTActivoBinance
Captura de pantalla de authwalletconnect.com
authwalletconnect.com
Captura de pantalla de flaretokensdrop.com
flaretokensdrop.com
13 VTDesconocidoGoogle
Captura de pantalla de flaretokensdrop.com
flaretokensdrop.com
Captura de pantalla de seaportal.fo
seaportal.fo
13 VTActivogenericcloudflare
Captura de pantalla de seaportal.fo
seaportal.fo
Captura de pantalla de agencyanalyticsframe.us.com
agencyanalyticsframe.us.com
12 VTDesconocido
Captura de pantalla de agencyanalyticsframe.us.com
agencyanalyticsframe.us.com
Captura de pantalla de enacoin-newbridge.com
enacoin-newbridge.com
12 VTDesconocido
Captura de pantalla de enacoin-newbridge.com
enacoin-newbridge.com
Captura de pantalla de flrconnectportal.live
flrconnectportal.live
12 VTDesconocidostargate
Captura de pantalla de flrconnectportal.live
flrconnectportal.live
Captura de pantalla de airdrop.wrlomhole.net
airdrop.wrlomhole.net
11 VTDesconocidoacross
Captura de pantalla de airdrop.wrlomhole.net
airdrop.wrlomhole.net
Captura de pantalla de aoerodrome.finance
aoerodrome.finance
10 VTDesconocido
Captura de pantalla de aoerodrome.finance
aoerodrome.finance
Captura de pantalla de chainxtrade.com
chainxtrade.com
10 VTDesconocidochainlink
Captura de pantalla de chainxtrade.com
chainxtrade.com
Captura de pantalla de ethdrawclaimdrop.org
ethdrawclaimdrop.org
10 VTDesconocidoacross
Captura de pantalla de ethdrawclaimdrop.org
ethdrawclaimdrop.org
Captura de pantalla de test123.sphere-drainer.cc
test123.sphere-drainer.cc
10 VTDesconocidocsgo
Captura de pantalla de test123.sphere-drainer.cc
test123.sphere-drainer.cc
Captura de pantalla de arb.claimscrypto.top
arb.claimscrypto.top
9 VTDesconocido
Captura de pantalla de arb.claimscrypto.top
arb.claimscrypto.top
Captura de pantalla de eth-drainer.exontra.com
eth-drainer.exontra.com
8 VTDesconocido
Captura de pantalla de eth-drainer.exontra.com
eth-drainer.exontra.com
Captura de pantalla de drnr.fiznen.com
drnr.fiznen.com
7 VTDesconocidobinance
Captura de pantalla de drnr.fiznen.com
drnr.fiznen.com
Captura de pantalla de h2-finance.web.app
h2-finance.web.app
7 VTDesconocido
Captura de pantalla de h2-finance.web.app
h2-finance.web.app
Captura de pantalla de xrpdistributions.firebaseapp.com
xrpdistributions.firebaseapp.com
7 VTDesconocidofoundation
Captura de pantalla de xrpdistributions.firebaseapp.com
xrpdistributions.firebaseapp.com
Captura de pantalla de ngcrp.com
ngcrp.com
6 VTDesconocidobinance
Captura de pantalla de ngcrp.com
ngcrp.com
Captura de pantalla de bitrane.com
bitrane.com
5 VTActivoavalanche
Captura de pantalla de bitrane.com
bitrane.com
Captura de pantalla de drainer.bexcapitaltrade.com
drainer.bexcapitaltrade.com
5 VTDesconocidobinance
Captura de pantalla de drainer.bexcapitaltrade.com
drainer.bexcapitaltrade.com
Captura de pantalla de flare.linkportalnet.com
flare.linkportalnet.com
5 VTDesconocidostargate
Captura de pantalla de flare.linkportalnet.com
flare.linkportalnet.com
Captura de pantalla de lumiachain.com
lumiachain.com
5 VTActivochainlink
Captura de pantalla de lumiachain.com
lumiachain.com
Captura de pantalla de trovako.com
trovako.com
5 VTDesconocidobinance
Captura de pantalla de trovako.com
trovako.com
Captura de pantalla de arbitriums.icu
arbitriums.icu
4 VTDesconocidoarbitrum
Captura de pantalla de arbitriums.icu
arbitriums.icu
virtualsget.xyz
4 VTDesconocido
Captura de pantalla de xrpdistributions.web.app
xrpdistributions.web.app
4 VTDesconocidofoundation
Captura de pantalla de xrpdistributions.web.app
xrpdistributions.web.app
Captura de pantalla de ledgerlane.icu
ledgerlane.icu
3 VTDesconocidoLedger
Captura de pantalla de ledgerlane.icu
ledgerlane.icu
Captura de pantalla de megaethlabs.top
megaethlabs.top
3 VTDesconocido
Captura de pantalla de megaethlabs.top
megaethlabs.top
Captura de pantalla de semantic.nexus-innovators.site
semantic.nexus-innovators.site
3 VTDesconocidobnb chain
Captura de pantalla de semantic.nexus-innovators.site
semantic.nexus-innovators.site
Captura de pantalla de www.amlcheckvault.com
www.amlcheckvault.com
3 VTDesconocido
Captura de pantalla de www.amlcheckvault.com
www.amlcheckvault.com
Captura de pantalla de claim.mindof-pepe.world
claim.mindof-pepe.world
2 VTActivo
Captura de pantalla de claim.mindof-pepe.world
claim.mindof-pepe.world
Captura de pantalla de defi-launch.io
defi-launch.io
1 VTDesconocidoaave
Captura de pantalla de defi-launch.io
defi-launch.io
Captura de pantalla de metaversentf.com
metaversentf.com
1 VTDesconocidodiscord
Captura de pantalla de metaversentf.com
metaversentf.com
Captura de pantalla de bridge.maob.site
bridge.maob.site
Desconocidobinance
Captura de pantalla de bridge.maob.site
bridge.maob.site
Captura de pantalla de dymensionrollapps.com
dymensionrollapps.com
Desconocidodiscord
Captura de pantalla de dymensionrollapps.com
dymensionrollapps.com
Captura de pantalla de fincaptor.app
fincaptor.app
Desconocidobinance
Captura de pantalla de fincaptor.app
fincaptor.app
Captura de pantalla de publicsale.well3.website
publicsale.well3.website
Desconocidodiscord
Captura de pantalla de publicsale.well3.website
publicsale.well3.website
Captura de pantalla de randombitcoins.com
randombitcoins.com
Desconocidoaave
Captura de pantalla de randombitcoins.com
randombitcoins.com

Proceso de respuesta ante amenazas Pipeline

Cómo se verifica cada dominio de este centro y cómo se neutralizan las amenazas confirmadas. Visualización completa del proceso →

Comprobaciones de inteligencia sobre amenazas— Cada dominio se analiza y se comprueba con los siguientes criterios:
urlscan.ioCaptura de pantalla · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency InformeCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Seguridad FiltersQuad9 · AdGuard · CleanBrowsingWeb-ComprobarFull surface scan
Sincronización global de proveedores— Las detecciones confirmadas se envían a 29 socios:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecRevisión del sitio webAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftRetirada APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.InformeHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust