pyth-luma[.]com
pyth-luma.com की फ़िशिंग और सुरक्षा जाँच
pyth-luma.com — सामग्री अनुपलब्ध (HTTP 502). घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 16/94 (ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 4 alerts; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain is flagged as a high-risk cryptocurrency phishing site designed to deceive users into disclosing wallet credentials or private keys. Analysis indicates the infrastructure is tailored to impersonate legitimate wallet verification processes, a common tactic in cryptocurrency theft operations. The domain exhibits multiple technical indicators of malicious intent, including its recent creation, use of evasion techniques, and broad detection across security platforms. Infrastructure analysis reveals the following concrete data points: the domain pyth-luma.com was registered on March 16, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 104.21.80.229 and employs Cloudflare with HTTP/3 support, alongside Cloudflare Browser Insights, likely to obfuscate its origin and evade detection. The domain is currently offline but was previously flagged by 16 out of 95 security vendors on VirusTotal and appears on three security blocklists. Additional detections include blocking by cryptocurrency-specific security tools, with a trust score of 0/100 from Gridinsoft. The page title 'Just a moment...' is consistent with Cloudflare interstitial pages, which are often abused to mask phishing content during initial access attempts. To mitigate risks associated with this threat type, users should verify domain registration dates and ownership details before interacting with any cryptocurrency-related site. If credentials or private keys were entered on pyth-luma.com, immediate action is required: transfer assets to a new wallet, revoke any connected dApp permissions, and monitor for unauthorized transactions. Network-level protections, such as DNS filtering or endpoint detection rules, should be configured to block domains resolving to 104.21.80.229 or associated with the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED. Security teams should treat domains with similar characteristics—recent registration, Cloudflare obfuscation, and cryptocurrency-themed phishing—as high-priority threats for investigation and blocking.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | pyth-luma.com |
malicious | Sinkholed |
| Quad9 DNS | pyth-luma.com |
malicious | Sinkholed |
| DNS4EU | pyth-luma.com |
malicious | Sinkholed |
| Hagezi Threat Feed | luma-pythnetwork.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 04:15:11 UTC
तकनीकें · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of pyth-luma.com · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260324-F8B383 Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।