anubisqr57mqcf3vfqv3hknwbpux5ioqs6atmpwrqive6x6wrkdtrwyd[.]top
“Anubis Marketplace”
anubisqr57mqcf3vfqv3hknwbpux5ioqs6atmpwrqive6x6wrkdtrwyd.top — असत्यापित. घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 3/92 (Fortinet, LevelBlue); Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 71/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
PhishDestroy identifies the domain anubisqr57mqcf3vfqv3hknwbpux5ioqs6atmpwrqive6x6wrkdtrwyd as an active generic phishing page posing as Anubis Marketplace, currently deploying a crypto drainer kit. The page title reads "Anubis Marketplace," indicating a direct impersonation of a known cryptocurrency service to deceive users into connecting wallets or submitting credentials. The domain was registered on February 04, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP 188.114.97.3. The SSL certificate is issued by Google Trust Services, which may increase initial trust perception despite malicious intent. This campaign is categorized as a crypto drainer due to the active impersonation of a marketplace and the presence of drainer functionality targeting cryptocurrency wallets.
EXACT technical indicators for this domain include a VirusTotal detection score of 3/95, indicating universal evasion of current antivirus signatures as of the time of analysis. The registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED, and the domain resolves to IP 188.114.97.3. The domain is not flagged by Google Safe Browsing (GSB) and has not been added to common threat blocklists. The domain was created on February 04, 2026, making it a very recent registration, a common tactic in phishing campaigns to avoid historical detection.
As of the latest checks, the domain remains active and unblocked, with the phishing page still accessible. Response actions include monitoring for domain takedown requests and sharing indicators with domain registrars and threat intelligence platforms. Remaining risk is high due to zero detections, active hosting, and the use of a plausible impersonation target. Users are strongly advised to avoid interacting with this domain, verify URLs before entering credentials or connecting wallets, and report any suspicious activity involving cryptocurrency transactions to their security teams or relevant platforms.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-07 03:45:49 UTC
तकनीकें · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of anubisqr57mqcf3vfqv3hknwbpux5ioqs6atmpwrqive6x6wrkdtrwyd.top · checked May 11, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260510-B96DF3 Recipient: abuse@nicenic.net, abuse@nic.top क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।