a[.]crypto-wallet4[.]com
“defi-ETH”
Resumen de las pruebas
Analysis of a.crypto-wallet4.com shows multiple indicators consistent with a high‑risk cryptocurrency impersonation campaign targeting Crypto.com users. The domain was registered on 23 January 2025 through Gname.com Pte. Ltd. and is hosted on Cloudflare infrastructure (AS13335) with the IP address 188.114.96.3 located in the United States. Both authoritative name servers, adam.ns.cloudflare.com and chan.ns.cloudflare.com, resolve to the same Cloudflare network, confirming the hosting relationship. No TLS certificate is presented, indicating the site is served over plain HTTP, which is atypical for legitimate financial services and facilitates man‑in‑the‑middle manipulation.
The page title returned by the server is "defi-ETH," a term associated with decentralized finance and Ethereum, but no further page content has been captured because the service is currently offline. The domain is flagged by Google Safe Browsing for social engineering, and VirusTotal reports that 11 of 93 scanning engines have identified it as malicious, reinforcing the suspicion of abuse. Additional defensive feeds have listed the domain on a single security blocklist and it is actively blocked by the PhishDestroy service. A Gridinsoft trust score of 0 / 100 further reflects the lack of reputation.
The site is explicitly noted to impersonate Crypto.com, and the scam type is classified as a Crypto Scam. While the offline status prevents direct observation of the payload or credential‑capture mechanisms, the combination of brand impersonation, lack of encryption, malicious vendor detections, and low trust metrics warrants immediate mitigation. Defenders should add a.dns‑based block for a.crypto-wallet4.com, enforce outbound filtering for the associated IP 188.114.96.3, and monitor for any attempted connections to Cloudflare‑hosted endpoints that reference Crypto.com‑related URLs.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Registration: crypto-wallet4.com
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain crypto-wallet4.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.