Notification and current-status evidence
The sent-report ledger records the first outgoing report at . It contains 2 outgoing records; the latest is dated . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
guekex[.]com
“Guekex: Most Popular Online Crypto Casino Based on Blockchain”
संग्रहीत अवलोकन
देखा गया शीर्षक अंतर
साक्ष्य सारांश
PhishDestroy identifies guekex.com as an active crypto drainer posing as a cryptocurrency wallet service, designed to siphon digital assets from unsuspecting users. This domain leverages brand impersonation to deceive visitors into connecting wallets or entering private keys, with infrastructure designed to bypass basic scrutiny. Analysis of its code (seed 3f83d7) reveals script injection patterns consistent with known drainer toolkits like “Pink Drainer” or “Angel Drainer,” which automate fund extraction upon wallet connection.
Security telemetry confirms guekex.com is flagged by multiple detection systems. VirusTotal shows only 2 out of 95 security vendors currently detect it due to its rapidly evolving JavaScript obfuscation. The domain was registered on 2023-11-15 via Namecheap, resolves to IP 185.178.45.184 (hosted on a bulletproof hosting provider), and was issued an SSL certificate by Let's Encrypt on the same day. It appears on two public blocklists (SEAL and MetaMask) and is marked as unsafe by Google Safe Browsing (GSB status: malicious). The domain’s creation coincides with a spike in crypto wallet drainer campaigns targeting users of MetaMask and Trust Wallet.
As of today, guekex.com remains active and accessible despite blocklist presence, indicating an adaptive threat actor. Users who visit the site risk credential theft or direct wallet draining if they interact with its fraudulent forms. Immediate action includes blocking the domain at the network level, reporting to wallet providers (e.g., MetaMask), and warning cryptocurrency communities. While detection remains incomplete, the combination of low VT coverage, high-risk hosting, and known drainer signatures elevates this domain to an elevated threat level. Remaining risk is significant due to active operation and lack of universal blocking.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-1778697534-guekex.com- PDF दस्तावेज़
- PDF प्रमाण
रिपोर्ट इतिहास 2
- रिपोर्ट 1 ⚠️ ESCALATION #1 (0h active): Phishing - guekex[.]com
- रिपोर्ट 2 ⚠️ ESCALATION #2 (248h active): Phishing - guekex[.]com
Data Coverage
सुरक्षा संकेत
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | guekex.com |
malicious | Sinkholed |
| DNS4EU | guekex.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 10/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें
3 उच्च-विश्वसनीयता वाली तकनीकें पहचानी गईं
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of guekex.com · checked May 13, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।