tfh-worldcoin[.]com
“World - The real human network”
tfh-worldcoin.com — ढका हुआ · पहुंच योग्य (HTTP 502). घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 6/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 100/100. रजिस्ट्रार: Dynadot.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, tfh-worldcoin.com, operates as a cryptocurrency phishing site designed to deceive users into disclosing wallet credentials, recovery phrases, or personal authentication details. The site impersonates Worldcoin, a legitimate identity and financial network, by replicating its branding, page layout, and messaging—including the exact page title 'World - The real human network.' Victims who enter sensitive information risk immediate unauthorized access to their digital assets, as well as potential follow-on attacks such as account takeovers or targeted social engineering. Analysis indicates the domain was registered on January 9, 2026, through Dynadot Inc, a known registrar frequently used in phishing infrastructure. It resolves to the IP address 172.66.167.18 and is hosted behind a Google Trust Services SSL certificate, which provides a false sense of legitimacy. At the time of detection, 6 out of 95 security vendors on VirusTotal flagged the domain as malicious. The site appears on three independent security blocklists and is actively blocked by wallet protection and anti-phishing tools. Infrastructure analysis reveals the use of modern web technologies including Node.js, React, Next.js, and Amazon Web Services, suggesting a sophisticated, serverless deployment designed to evade traditional detection methods. If you visited tfh-worldcoin.com, immediately disconnect the device from the network to prevent ongoing data exfiltration. Do not enter any credentials or recovery phrases, even if prompted. If you submitted wallet information, transfer all assets to a new, secure wallet using a different device. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant wallet providers and consider filing a report with local cybercrime authorities. Reset any passwords or recovery phrases used on the site, and scan your device for malware using updated security tools.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 12 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% विश्वासAmazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 100% विश्वासNext.js is a React framework for developing single page Javascript applications.
nextjs.org 100% विश्वासZendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
zendesk.com 100% विश्वासSendGrid is a cloud-based email delivery platform for transactional and marketing emails.
sendgrid.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासGoogle Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of tfh-worldcoin.com · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260528-3B8DCA Recipient: abuse@dynadot.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।