Aller au rapport de sécurité
⚠️
Ce domaine a été signalé comme malveillant
Moteurs de sécurité signalant une détection : 3. Listes de blocage publiques signalant une correspondance : 2. Faites preuve d’une extrême prudence – ne saisissez pas d’informations d’identification ou d’informations personnelles.
Sécurité des domaines et renseignements sur les menaces

52353-crypto[.]com

“Crypto.com Exchange | Buy & Trade Crypto”

Verdict de menace Critique 70/100 score de preuve
Disponibilité Non vérifié L'accessibilité actuelle n'est pas vérifiée
Détections VirusTotal : 3/91 Spamhaus DBL: DBL_SPAM Correspondances de la liste de blocage stockée : 2 Usurpation de l'identité de la marque : Crypto.com Domaine jeune : âgé de moins d'un jour
OTX: 4 refs 18/08/2026 Crypto.com CDN
Résumé du rapport

52353-crypto.com — Non vérifié. Usurpation de l'identité de la marque : Crypto.com; Type d'arnaque : Impersonation. Résumé des preuves: VirusTotal 3/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet); Spamhaus DBL_SPAM; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 70/100. Bureau d’enregistrement: NiceNIC.

L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.

Résumé des preuves
CRITIQUE
Réf.
2AF4243E
Score
70/100

Assessment
Stored evidence for 52353-crypto.com: VirusTotal recorded 3 detections among 91 scanners on 2026-08-18. That ratio reproduces the stored check in its original units and is not converted into another measure. MetaMask and SEAL appear as named external blocklist observations for 52353-crypto.com. Each item in this report remains at the scope supplied by its dated source record.

Detection Evidence
VirusTotal records 3 detections among 91 scanners in the stored snapshot dated 2026-08-18. The numerator describes scanners that produced detections, while the denominator describes scanners included in that check. The reverse order would materially alter the stored result. The VirusTotal snapshot dated 2026-08-18 supplies no common rationale covering the included scanners, and this report adds none. A later VirusTotal snapshot may contain different values, so any comparison should preserve the exact ratio and date of each snapshot.

Source Context
MetaMask and SEAL are recorded as named external blocklist observations for 52353-crypto.com in the snapshot dated 2026-08-18. The stored MetaMask and SEAL blocklist records supply names and entries, but they supply no shared method or common rationale. PhishDestroy’s catalogue also contains 52353-crypto.com as a publisher record. That PhishDestroy record is counted separately from the MetaMask and SEAL external blocklist observations. This separation keeps the origin of every entry visible and prevents a single stored item from being counted again under another source label.

Reachability and Timeline
The record first observed 52353-crypto.com on 2026-08-18. The MetaMask and SEAL blocklist snapshot is dated 2026-08-18 and remains a separate event in the stored timeline. The registration date is separately recorded as 2026-08-17. A URLScan reference was stored on 2026-08-18 as a dated artifact for review. Each timestamp qualifies only the adjacent observation in this timeline. Later collection results should be compared with these dated values without replacing the earlier snapshot.

Registration and Infrastructure
For 52353-crypto.com, the registrar field records NICENIC INTERNATIONAL GROUP CO., LIMITED; this is kept as an exact source value. The source stores 82.26.66.61 as the observed address in this record. The registration date for 52353-crypto.com is recorded as 2026-08-17. The SSL issuer is recorded as Let's Encrypt / YE1 in the snapshot dated 2026-08-18. The observed server header is recorded as cloudflare in this record. These fields preserve registration, network, and certificate context stored in this record. The report preserves each label and number as a separate source value instead of combining them into an invented aggregate. Keeping the fields separate leaves every infrastructure value traceable to the record that supplied it.

Conclusion
The 52353-crypto.com record states that VirusTotal recorded 3 detections among 91 scanners on 2026-08-18. MetaMask and SEAL remain named blocklist observations from the snapshot dated 2026-08-18. PhishDestroy remains a separate publisher catalogue entry in the stored record. For 52353-crypto.com, the registrar field records NICENIC INTERNATIONAL GROUP CO., LIMITED; this remains separate from the other source fields. The observed address field in this record contains 82.26.66.61. The supported conclusion is bounded to the exact stored observations for 52353-crypto.com. Any statement beyond those source values would require additional dated material.

Recommended Actions
Avoid submitting sensitive information to 52353-crypto.com during review. Use a known service address obtained separately from this report for any necessary access. Defenders can retain 52353-crypto.com as an exact indicator and preserve relevant DNS, proxy, and endpoint records. Compare later VirusTotal snapshots and MetaMask and SEAL blocklist records with the dated values above instead of replacing them. Keep each later observation with its source date so changes remain visible during follow-up review. If a defensive rule is needed, keep its scope to 52353-crypto.com. The stored record does not justify extending that rule to 82.26.66.61 or to other infrastructure records.

VirusTotal
VirusTotal
3 det.
OTX references
URLScan
URLScan
Certificat TLS
Let's Encrypt
Âge
<1 day Brand New!
Statut observé
Non vérifié
PhishDestroy
DestroyList
Répertorié
Couverture des données VirusTotal 3 / 91 URLQuery pas vérifié PhishStats pas vérifié OTX 4 community references CF Radar scan completed URLScan capture rapport stocké URLScan verdict Analyse terminée Blocs DNS pas vérifié TLS valid certificate, 89d WHOIS 0d old Capture d'écran 2 captures · 2 sources Chaîne de redirection non sondé
Renseignements sur la sécurité réseau Registrar context
Registrar context NiceNIC
Stored registration data identifies NICENIC INTERNATIONAL GROUP CO., LIMITED (IANA 3765) as the registrar. PhishDestroy maintains separate NiceNIC abuse-report research; registrar association is contextual and is not an independent detection for this domain.
NiceNIC Verdict Full Investigation

Processus de réponse aux menaces Pipeline

Découverte
Checks
Reports
Disponibilité
14/16

Statut de la liste de blocage publique

Capture enregistrée

Titre de la page
Crypto.com Exchange | Buy & Trade Crypto
Certificat TLS
Valid transport encryption · Émis par Let's Encrypt · valid for 89 days

Informations sur les domaines

Domaine
URLScan Verdict Analyse terminée score 0 report ↗
Serveur / ASN cloudflare · AS13335 Cloudflare, Inc.
IP Context Cloudflare shared edge origin IP hidden La réputation Edge-IP n’est pas attribuée à ce domaine.
Adresse IP 82.26.66.61 CDN
LocalisationUS San Francisco, US
RéseauAS13335 · Cloudflare, Inc.
L'adresse IP d'origine est cachée derrière un proxy CDN. Les résultats d’IP inversé pour l’adresse périphérique contiennent des locataires non liés ; trouver l’origine nécessite un DNS passif ou des données de transparence des certificats.
EnregistrementCréé 17/08/2026 (0d · Brand New!) Expires 17/08/2027
Détails techniquesDNS, SAN SSL, horodatages
Première détection18/08/2026
IoC Extractionscanned 18/08/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://52353-crypto.com/
Serveurs de nomsns3.my-ndns.comns4.my-ndns.com
TLS Fingerprint
TLS Observationvalid from 17/08/2026scanned 18/08/2026
ICANN OVERSIGHT

Contexte de l’accréditation et du RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Rien n’est envoyé automatiquement.

Latest Classified Outcome 2026-08-18 02:53:05 UTC

Primary outcome Inconnu reason: Probe Inconclusive 20% confidence
Attribution source: Current State Backfill
Evidence layers Availability: Unreachable Content: Unknown DNS: Stale Registration: Unknown
Latest HTTP observation Inconnu Probe Inconclusive 20% 2026-08-18 02:53:05 UTC
RDAP registration Inconnu
Observed timeline last reachable: 2026-08-18 02:53:05 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Technologies · 12 identified
Apple iCloud Mail
Webmail

Apple iCloud Mail is a webmail service provided by Apple, Inc.

www.apple.com Confiance à 100 %
Salesforce
CRM

Salesforce is a cloud computing service software (SaaS) that specializes in customer relationship management (CRM).

www.salesforce.com Confiance à 100 %
Amazon Web Services
PaaS

Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.

aws.amazon.com Confiance à 100 %
Stripe
Payment processors

Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.

stripe.com Confiance à 100 %
Atlassian Statuspage
Issue trackers PaaS

Statuspage is a status and incident communication tool.

www.atlassian.com Confiance à 100 %
Sendgrid
Email

SendGrid is a cloud-based email delivery platform for transactional and marketing emails.

sendgrid.com Confiance à 100 %
Segment
Customer data platform

Segment is a customer data platform (CDP) that helps you collect, clean, and control your customer data.

segment.com Confiance à 100 %
Mixpanel
Analytics

Mixpanel provides a business analytics service. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Its toolset contains in-app A/B tests and user survey forms.

mixpanel.com Confiance à 100 %
HSTS
Sécurité

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

www.rfc-editor.org Confiance à 100 %
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com Confiance à 100 %
Amazon SES
Email

Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application.

aws.amazon.com Confiance à 100 %
Amazon CloudFront
CDN

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.

aws.amazon.com Confiance à 100 %
Detected via Cloudflare Radar · Wappalyzer engine
Signaler ce domaine Envoyez des éléments de preuve et contribuez à protéger les autres

Analyse VirusTotal

3 / Les fournisseurs de sécurité 91 ont signalé ce domaine
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
alphaMountain.ai
Forcepoint ThreatSeeker
Fortinet
Analyse des performances du site

Google PageSpeed Insights — mobile performance audit of 52353-crypto.com · checked Aug 18, 2026

32
Poor
Performance
FCP
19.67s
First Contentful Paint
LCP
24.64s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
1130ms
Total Blocking Time
SI
19.67s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Données factuelles et rapports externes

Ce site vous a-t-il affecté ?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.

Europol
Trouvez le canal de signalement officiel pour votre pays de l'UE
National police directory
Méfiez-vous des escrocs qui prétendent vous aider à récupérer vos biens ! Les criminels peuvent recontacter leurs victimes tout en se faisant passer pour des enquêteurs, des avocats ou des agents de recouvrement. Ne payez pas de frais initiaux et ne partagez pas vos informations d'identification. En savoir plus sur la fraude liée aux aides à la reprise →

Signalez-le à vos autorités locales

Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.

Annuaire de 97 pays
Brouillon assisté par l'IA : les détails de l'incident sont traités par le fournisseur d'IA Examinez-le et soumettez-le vous-même

Vérifier n'importe quel domaine

Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique

Scanner maintenant

Signaler une tentative d'hameçonnage

Signalez les domaines suspects à notre base de données des menaces — protégez la communauté

Signaler

Flux d'alertes en temps réel

Rapports de phishing récents et changements de disponibilité observés

Surveiller

Restez informés, restez en sécurité

Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif

Flux d'alertes en temps réel Contester cette annonce
HTML · IFRAME

Intégrer ce rapport

Partagez ces informations sur les menaces sur votre site web ou votre blog

embed.html
<iframe
  src="https://phishdestroy.io/fr/embed/domain/52353-crypto.com"
  title="PhishDestroy threat report for 52353-crypto.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Une lettre de remerciement très sincère

Générateur de brouillon satirique

Destinataire
Contexte des frais

Brouillon satirique. Les montants des frais sont des estimations ; aucune attribution exacte à ce domaine n’est affirmée.