Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
infernodrainer[.]ru
“Inferno Drainer - Unleash the Flames”
Résumé des preuves
Analysis indicates that the domain infernodrainer.ru is actively associated with a crypto drainer scam, as explicitly identified by its page title 'Inferno Drainer - Unleash the Flames' and classified under the scam type 'Crypto Drainer.' The domain was registered on February 21, 2026, through the .ru TLD registry and is currently resolving to the IP address 198.251.89.220, hosted under AS53667 (FranTech Solutions) in the United States. Infrastructure analysis reveals the use of nameservers ns27.my-control-panel.com and ns28.my-control-panel.com, which may be part of a broader malicious hosting pattern, though this is not conclusive on its own. The domain is flagged by six security vendors on VirusTotal, though the specific detection rules or signatures are not detailed in available intelligence. It appears on one security blocklist and is blocked by at least one threat intelligence feed, including a pulse in AlienVault OTX. The domain's MX records point to itself, which is atypical for legitimate services and may indicate an attempt to intercept or spoof email communications. A 307 HTTP status suggests temporary redirection, which could be used to obscure the final destination or evade detection. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains due to its free and automated issuance process. Technologies detected on the domain include LiteSpeed and HTTP/3, which are not inherently malicious but are consistent with modern web infrastructure that could support dynamic or obfuscated content delivery. The domain holds a Gridinsoft trust score of 0/100, reinforcing its classification as high-risk. While the exact content and functionality of the site have not been fully analyzed, the available evidence strongly suggests it is designed to facilitate cryptocurrency theft, likely by tricking users into connecting wallets or authorizing transactions.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-1771164562-infernodrainer.- Artefact PDF
- Preuve PDF
Historique des signalements 1
- Signalement 1 Phishing Abuse Report: infernodrainer[.]ru
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
VirusTotal
6 → 5
-
VirusTotal
5 → 6
-
État du domaine
Accessible → Inaccessible
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of infernodrainer.ru · checked Mar 2, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif