Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse-contact@sav.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
gas-io[.]xyz
“Page Not Available”
gas-io.xyz — असत्यापित. घोटाले का प्रकार: Crypto Drainer. साक्ष्य सारांश: VirusTotal 15/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: Sav.com.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, gas-io.xyz, operates as a crypto wallet drainer, designed to execute unauthorized transactions and siphon digital assets from connected cryptocurrency wallets. Analysis indicates the site employs deceptive smart contract interactions to trigger malicious token approvals, enabling attackers to empty victims' wallets without explicit confirmation. The domain's infrastructure suggests a focus on Ethereum and ERC-20 tokens, common targets for such drainer schemes. Evidence supporting this assessment includes detection by 16 out of 95 security vendors on VirusTotal, with four major security blocklists flagging the domain. Registered through Sav.com, LLC on March 05, 2026, the domain resolves to IP address 172.67.208.161, utilizing Cloudflare for hosting and protection. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. Additional technical indicators include the use of Cloudflare Browser Insights and HTTP/3, which may be leveraged to obfuscate malicious activity. The domain is currently offline, but its prior presence on blocklists maintained by MetaMask, PhishDestroy, SEAL, and ScamSniffer underscores its malicious intent. Users who interacted with gas-io.xyz should immediately revoke any smart contract approvals granted to the domain via their wallet settings. It is critical to transfer remaining assets to a new, secure wallet and monitor transaction histories for unauthorized activity. If credentials or private keys were entered, consider the compromised wallet as permanently exposed. Enable transaction simulation tools to preview smart contract interactions before approval, and verify domain authenticity through official project channels. Given the high-risk nature of this domain, affected users should report the incident to relevant blockchain security platforms for further analysis.
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of gas-io.xyz · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260305-9FA1BF Recipient: abuse-contact@sav.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।