eomf[.]deribitltd[.]cc
“Deribit”
Resumen de las pruebas
This domain, eomf.deribitltd.cc, is a confirmed brand impersonation phishing site targeting the cryptocurrency exchange brand Deribit, as indicated by the page title 'Deribit' and the scam classification in threat intelligence sources. Registered on December 10, 2025, through Gname.com Pte. Ltd., the domain resolved to IP 188.239.22.205, hosted on AS136907 (HUAWEI CLOUDS) in Singapore. Nameservers a4.share-dns.com and b4.share-dns.net were in use, a configuration often observed in low-reputation or bulletproof hosting environments. Analysis reveals the domain was flagged by 14 of 93 security vendors on VirusTotal, while Google Safe Browsing classified it as social engineering.
The domain appears on at least one security blocklist and was assigned a trust score of 0/100 by Gridinsoft. No SSL certificate was detected, increasing the likelihood of interception or user distrust. The domain was blocked by PhishDestroy and is currently offline as of the report date, though historical resolution and detection data remain relevant for retrospective threat hunting. Defenders should treat this domain as high-risk for Deribit brand impersonation, particularly in cryptocurrency-related phishing campaigns.
The infrastructure—hosting provider, nameservers, and lack of encryption—aligns with patterns used in credential harvesting or fraudulent transaction schemes. Network defenders are advised to block the domain, IP, and associated nameservers at perimeter controls. Security teams should review logs for connections to 188.239.22.205 or DNS queries for eomf.deribitltd.cc, particularly from endpoints involved in cryptocurrency transactions or financial operations. No further page content analysis is available; additional context may emerge from endpoint or proxy logs.
Data Coverage
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
VirusTotal
8 → 14
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.