Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 15 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
8282usdt[.]com
“82테더 | 빠르고 안전한 테더 USDT 구매·판매 대행”
Résumé des preuves
The domain 8282usdt.com was registered on May 13, 2026 through Gabia, Inc., and it continues to resolve to the IPv4 address 115.144.198.107. Its authoritative nameservers are listed as ns.gabia.co.kr, ns.gabia.net, and ns1.gabia.co.kr, indicating that the domain remains under the control of the original registrar. Threat intelligence flags the site as a generic phishing operation, and it has been added to the PhishDestroy blocklist; the blocklist entry remains active as of the report date, July 27, 2026. VirusTotal analysis shows that one out of ninety‑one scanning engines has flagged the domain, and the same domain appears on a single external security blocklist, reinforcing the suspicion of malicious intent.
No additional public data such as SSL certificate details, HTTP response codes, Safe Browsing verdicts, or page title information is currently available, limiting the depth of the technical profile. Infrastructure analysis confirms that the hosting IP is not associated with a known content delivery network and is not listed in public ASN reputation feeds, suggesting a potentially dedicated hosting environment for the phishing campaign. Defenders should prioritize immediate mitigation by adding 8282usdt.com to network deny lists, updating DNS sinkhole configurations, and blocking outbound traffic to 115.144.198.107.
Continuous monitoring of DNS queries for the domain and its nameserver records is advised, as changes could indicate further campaign development. Because the domain is newly created and already flagged, security teams should also scrutinize email traffic for references to the domain or related URLs, and consider augmenting email security gateways with real‑time URL reputation checks that include the observed blocklist entry. Ongoing collection of HTTP and TLS metadata is recommended to enrich future analyses and to detect any evolution in the site’s delivery infrastructure.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260727-71BB4D- Titre de la page capturée
- 82테더 | 빠르고 안전한 테더 USDT 구매·판매 대행
- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Policy Violations: “Terms prohibit phishing, fraud, identity deception and malware distribution; registrar may suspend or delete domains engaged in illegal or abusive use.”
Applicable Laws: Act on Promotion of Information and Communications Network (Korea), Criminal Act (fraud)
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Première observation
Première valeur enregistrée : Accessible
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
2 technologies identifiées avec une forte confiance
Analyse VirusTotal
Preuves archivées
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of 8282usdt.com · checked Jul 27, 2026
Analyse de la configuration du site
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif