username3586[.]invoice-ads-agency[.]com
“Accounts Centre”
username3586.invoice-ads-agency.com — सामग्री अनुपलब्ध (HTTP 502). ब्रांड प्रतिरूपण: Facebook; घोटाले का प्रकार: Crypto Drainer. साक्ष्य सारांश: VirusTotal 23/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Cluster25); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 95/100. रजिस्ट्रार: Gransy, s.r.o.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
PhishDestroy has identified the domain username3586.invoice-ads-agency.com as a live crypto drainer impersonating an invoice advertising agency. This fraudulent site was registered on April 22, 2026, through the Gransy, s.r.o. registrar and resolves to IP address 188.114.97.3. The domain currently shows zero detections on VirusTotal’s 95-scanner grid and carries a Google Trust Services SSL certificate, which attackers abuse to appear legitimate and bypass browser warnings. Security telemetry indicates the site is actively hosting malicious JavaScript designed to intercept and divert cryptocurrency transactions to attacker-controlled wallets, effectively draining victim funds without their knowledge. This domain was flagged under seed 92580a with a current status of active and an under-investigation risk level. Technical indicators include the creation timestamp of April 22, 2026, a single registrar (Gransy, s.r.o.), zero VirusTotal detections across 95 engines, and a clean IP reputation at the time of analysis. The presence of a Google Trust Services SSL certificate further increases the risk of user trust exploitation, as modern browsers do not flag such certificates as suspicious, even when the site’s content is malicious. Given the domain’s recent registration and lack of blocklist entries, it is likely part of a rapidly evolving campaign targeting individuals or businesses expecting legitimate invoice-related services. Users who have visited or interacted with username3580.invoice-ads-agency.com should immediately cease all cryptocurrency transactions from wallets used on that site. Disconnect affected devices from the internet, scan for malware, and revoke any wallet approvals made on the domain. Report the domain and any transaction hashes to PhishDestroy using the unique seed 92580a for accelerated takedown and threat intelligence sharing. Use only verified, official channels for invoice and ad-related services and verify domains through trusted sources before entering any credentials or making payments.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | username3586.invoice-ads-agency.com |
phishing | Phishing Block |
| DNS4EU | username3586.invoice-ads-agency.com |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | username3586.invoice-ads-agency.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: invoice-ads-agency.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain invoice-ads-agency.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% विश्वासNext.js is a React framework for developing single page Javascript applications.
nextjs.org 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of username3586.invoice-ads-agency.com · checked Apr 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260426-D51A6C Recipient: abuse@regtons.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।