moon02[.]gx068[.]com
“Bitcoin Mining”
moon02.gx068.com — सामग्री अनुपलब्ध (HTTP 502). ब्रांड प्रतिरूपण: Bitcoin; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 2/93 (SOCRadar, URLQuery); PhishDestroy score 56/100. रजिस्ट्रार: NameSilo.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain moon02.gx068.com was registered through NameSilo, LLC on 21 February 2026 and is hosted on Cloudflare infrastructure (ASN 13335). DNS resolution points to 104.21.60.69, a Cloudflare‑owned address located in the United States. The authoritative name servers are addilyn.ns.cloudflare.com and apollo.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. An SSL certificate issued by Google Trust Services (CN=WE1) is present, indicating HTTPS support with a valid public‑key infrastructure. Content‑level metadata shows a page title of “Bitcoin Mining”, and the domain is listed as impersonating the Bitcoin brand.
The scam classification supplied is “Crypto Scam”, matching the brand target of Bitcoin. Technical fingerprints include the presence of a Facebook Pixel snippet and HTTP/3 support, both typical of modern web delivery stacks. The Gridinsoft trust score for the domain is 0 out of 100, reflecting a lack of reputation in that engine. VirusTotal analysis recorded detections from 2 of 93 scanning engines, suggesting that at least a minority of vendors have identified malicious behavior. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, reinforcing the view that threat‑intel sources consider it abusive.
The overall risk rating is elevated, and the site has been taken offline as of the report date. Evidence gaps remain: no payload samples, network traffic captures, or detailed page content have been published, and the exact malicious activity (e.g., credential harvesting, cryptomining script delivery) cannot be confirmed from the available data. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated Cloudflare IP range, and enforce URL filtering based on the observed indicators. Additional analysis of any future re‑hosting attempts or changes to the SSL certificate should be performed to detect possible re‑use of the infrastructure.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: gx068.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain gx068.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 3 identified
Conversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of moon02.gx068.com · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
“there was 29 USDC coins were in my wallet : 0xefD7Dc089D8C5840eE1a02ddC1a2Ce358795B9c8 , now all of it is missing , i checked the activity and i saw a transaction that's not done by me or from any of my device . i think this some sort of scam that this same issue also happened to my two friends. i want to make sure that this something serious type scam that make people lost their belonging coins from their wallet without knowing how . so my coins and my friends coins got tran”
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।