alternative-financepartners[.]com
“Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | A F P”
alternative-financepartners.com — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Ethereum; Jenis penipuan: Fake Exchange. Ringkasan bukti: VirusTotal 2/93 (SOCRadar, URLQuery); PhishDestroy score 56/100.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of alternative-financepartners.com shows a short‑lived infrastructure that was created on February 21, 2026 and subsequently taken offline before the report date of July 24, 2026. The domain resolves to IP address 45.152.162.78, which is registered to AS200019 ALEXHOST SRL in France. The site presented a page titled "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | A F P," a title that aligns with the reported scam type of a fake cryptocurrency exchange and explicitly targets the Ethereum brand. Technical fingerprints collected from the landing page include a Node.js back‑end, client‑side libraries such as Chart.js, Vue.js and Nuxt.js, as well as Cloudflare CDN, jsDelivr asset delivery, HSTS enforcement and a Facebook Pixel tag.
The SSL certificate is identified as "E7," indicating a publicly visible TLS certificate, but no further trust indicators were observed. VirusTotal scans recorded detections by 2 of 93 security vendors, and the domain appears on a single blocklist operated by PhishDestroy, confirming that at least some security products consider the site malicious. While the domain is currently offline, its brief activity window suggests an opportunistic credential‑stealing or fund‑extraction campaign aimed at users seeking to trade Ethereum.
The evidence does not reveal the exact phishing pages or credential capture mechanisms, leaving the precise attack flow uncertain. Defenders should continue to block the domain and its associated IP address at perimeter filters, monitor DNS logs for any re‑registration attempts, and incorporate the observed technology stack into heuristic rules for detecting similar fake exchange sites. Continuous threat‑intel feeds should be consulted for any resurgence of the domain or related infrastructure, and users should be warned against any unsolicited offers referencing Ethereum trading on sites matching the observed page title.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 9 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
Progressive JavaScript framework for building user interfaces.
Hybrid Vue framework for server-side rendering and static sites.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comFree public CDN for open-source projects, serving files from npm and GitHub.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Conversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comAnalisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive