bundesprofit-ki[.]de
“Suspected phishing site | Cloudflare”
bundesprofit-ki.de — No verificado. Suplantación de marca: Genericcloudflare; Tipo de estafa: Investment Scam. Resumen de las pruebas: VirusTotal 10/91 (alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker, Fortinet); URLQuery 1 alert; URLScan malicious verdict; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain bundesprofit-ki.de was observed to host an investment‑scam phishing campaign before being taken offline. DNS resolution points to the Cloudflare edge address 172.67.208.29, hosted in Canada under the Cloudflare, Inc. network. The authoritative nameservers are cameron.ns.cloudflare.com and linda.ns.cloudflare.com, both standard Cloudflare resolvers. TLS termination is provided by a Google Trust Services certificate issued by the WE1 intermediate, indicating the use of a legitimate certificate chain to increase credibility.
HTTP headers reveal the presence of HTTP/3 and HSTS, confirming modern transport security. Google Safe Browsing categorises the site as social engineering, and fourteen of ninety‑one VirusTotal scanners have flagged the domain as malicious, reinforcing the suspicion of phishing activity. Independent blocklists have listed the domain on three separate feeds, and commercial anti‑phishing services PhishDestroy, MetaMask, and SEAL have recorded it as blocked. The Gridinsoft trust score is 0 out of 100, reflecting an extremely low reputation.
No public page title or content snapshot is available, so the exact lure text and landing‑page structure remain unknown. Analysts should continue to enforce network‑level deny rules for the IP address 172.67.208.29 and the domain name, update intrusion‑detection signatures to include the observed TLS fingerprint, and monitor for re‑registration or similar domains using the same naming pattern. Threat intel sharing with partner organizations is recommended, as the combination of Cloudflare hosting, a valid Google certificate, and low trust scores is a common pattern for fast‑flux investment scams.
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bundesprofit-ki.de |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of bundesprofit-ki.de · checked Mar 22, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.