checksbnb[.]online
“TRANSFER USDT”
साक्ष्य सारांश
This report analyzes the domain checksbnb.online, which was observed impersonating the Metamask brand. The site's page title is "TRANSFER USDT," indicating it is a cryptocurrency-themed fraudulent page designed to deceive users into transferring USDT tokens, likely to a wallet controlled by the threat actor. The site poses a financial threat by mimicking a legitimate cryptocurrency interface to steal user funds.
Technical analysis reveals that VirusTotal flagged the domain with 5 detections out of 95 security vendors. The domain is flagged by alphaMountain.ai, Gridinsoft, Seclookup, SOCRadar, and Webroot. It appears on 2 blocklists. The domain is registered with Go Daddy, LLC, and was created on 2026-03-08. The IP address is 77.245.76.110, located in Great Britain, and hosted on AS20860 IOMART CLOUD SERVICES LIMITED. The SSL certificate is issued by Let's Encrypt (R12). Nameservers are ns59.domaincontrol.com and ns60.domaincontrol.com. GridinSoft trust score is 0 out of 100.
As of analysis, the domain status is DOWN/OFFLINE. The DOM risk score is 63, indicating a high risk level. The combination of low trust score, multiple vendor flags, and recent creation date supports a high threat classification. The site is currently inaccessible, but its infrastructure remains a potential risk for future reactivation.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260316-F28031- कैप्चर किए गए पेज का शीर्षक
- TRANSFER USDT
- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Section 3.1 of AUP: The domain checksbnb.online is engaged in phishing activities, which constitutes a clear violation of your Acceptable Use Policy prohibiting illegal activities and fraud.
Section 4.2 of TOS: The use of this domain for deceptive practices violates your Terms of Service, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and the fraudulent use of information, applicable to phishing schemes.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, which is relevant to the activities associated with checksbnb.online.
CAN-SPAM Act: This U.S. law regulates commercial email and prohibits misleading information in emails, which is often a tactic used in phishing attacks.
Regulatory Note: Failure to take immediate action against this domain may result in potential liability for facilitating illegal activities, including but not limited to phishing and fraud. Non-compliance with your own policies and applicable laws could expose your organization to regulatory scrutiny and legal repercussions.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | checksbnb.online |
malicious | Sinkholed |
| DNS4EU | checksbnb.online |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 13/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
फॉरेंसिक इंटेलिजेंस
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of checksbnb.online · checked Mar 16, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।