predeposit-stable[.]com

predeposit-stable.com was registered on 5 November 2025 through NiceNIC International Group Co., Limited and is hosted on Cloudflare’s network (ASN 13335) with the A‑record pointing to 104.21.92.127, an IP address located in the United States. The domain uses the Cloudflare nameservers kami.ns.cloudflare.com and matteo.ns.cloudflare.com and does not present an SSL/TLS certificate, meaning connections are unencrypted. The only visible page element reported by the intelligence feed is the title "רק רגע...", which translates to "Just a moment…". No additional content has been captured, and the site has been taken offline at the time of this assessment. Multiple security‑vendor feeds have flagged the domain as malicious.

PhishDestroy and ScamSniffer have listed it on their blocklists, and the domain appears on two other public blocklists. VirusTotal recorded one positive detection out of ninety‑five scanners. The Gridinsoft trust score is 0 out of 100, indicating a complete lack of trust. The threat classification supplied by the feed is a crypto‑related scam, consistent with the "generic phishing" tag supplied in the report. Because the site is currently offline, active probing was not possible, so details such as the exact phishing landing page, credential‑stealing forms, or malicious payloads remain unknown.

The lack of an SSL certificate, low trust score, and presence on multiple blocklists suggest the domain was intended to lure victims into a cryptocurrency‑focused fraud, possibly by impersonating a legitimate service or by prompting users to deposit funds. Defenders should continue to block the domain at perimeter firewalls, DNS resolvers, and proxy filters. Threat‑intelligence platforms should be updated to include the observed indicators: domain name, registration date, hosting IP, nameserver set, and the "רק רגע..." page title. Continuous monitoring of the associated IP address is advised, as Cloudflare customers frequently reuse IPs for unrelated sites.