hebys-nft[.]io
“Hebys”
Resumen de las pruebas
This domain, hebys-nft.io, is an active crypto drainer scam targeting NFT users. Registered on September 5, 2025, through Dynadot LLC, it currently resolves to 104.21.21.198, a Cloudflare IP (AS13335) located in the US. The site returns an HTTP 403 status, indicating access restrictions, but remains operational behind Cloudflare’s infrastructure, which also provides its SSL certificate (Google Trust Services / WE1). Nameservers demi.ns.cloudflare.com and ned.ns.cloudflare.com further confirm Cloudflare’s role in hosting this threat. Analysis indicates detection by 11 of 95 security vendors on VirusTotal, though the specific engines flagging it are not detailed.
The domain appears on one security blocklist and is referenced in a single AlienVault OTX pulse, suggesting limited but confirmed malicious activity. Gridinsoft assigns it a trust score of 0/100, and PhishDestroy blocks it, reinforcing its classification as high-risk. The page title 'Hebys' aligns with the domain’s branding, though no further content analysis is available. Technologies detected include Vue.js, HSTS, and HTTP/3, which may be used to enhance the site’s functionality or evade detection.
The use of Cloudflare complicates takedown efforts and obscures the true origin of the infrastructure. Defenders should treat this domain as active and malicious, blocking it at the network level and monitoring for related indicators. Given its crypto drainer classification, users interacting with this site risk unauthorized asset transfers. No evidence suggests a broader campaign, but the domain’s persistence and Cloudflare hosting warrant continued scrutiny.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 10/08/2026
10 fuentes externas supervisadas Sin coincidencias
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of hebys-nft.io · checked Mar 2, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.