app[.]ariaprotocola[.]xyz
“Access Denied - IP Verification Failed | Crypto Payment Gateway”
app.ariaprotocola.xyz — Konten tidak tersedia. Ringkasan bukti: VirusTotal 11/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); 1 external blocklist match (ScamSniffer); PhishDestroy score 88/100. Registrar: Web Commerce Communica….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain app.ariaprotocola.xyz confirms its classification as a phishing site targeting cryptocurrency payment gateways. The domain was registered on November 7, 2025, through Web Commerce Communications Limited and currently resolves to IP address 172.67.166.197, hosted on Cloudflare's infrastructure (AS13335) in the United States. No SSL certificate is present, which is atypical for legitimate financial or crypto-related services. The domain's nameservers (amit.ns.cloudflare.com and sandra.ns.cloudflare.com) further indicate Cloudflare's involvement, though this alone does not distinguish malicious from benign usage. The page title, 'Access Denied - IP Verification Failed | Crypto Payment Gateway,' suggests the site was designed to mimic a cryptocurrency payment verification system, likely intended to harvest credentials or payment details.
While the exact content and functionality of the site remain unanalyzed, the title aligns with known phishing tactics targeting crypto users. Detection data supports this assessment: the domain is flagged by 11 of 95 security vendors on VirusTotal and appears on two security blocklists. Additionally, it is blocked by PhishDestroy and ScamSniffer, two specialized anti-phishing services. Trust scores from Gridinsoft (0/100) and Scamadviser (1/100) further corroborate its malicious classification. As of July 23, 2026, the domain has been taken offline, though defenders should remain vigilant for potential reactivation or migration to new infrastructure.
The use of Cloudflare hosting is consistent with phishing campaigns seeking to obscure origin servers and evade takedowns. No evidence links this domain to a specific threat actor or phishing kit, and the absence of SSL further complicates attribution. Organizations should block the domain at the DNS level and monitor for related indicators, including the associated IP (172.67.166.197) and registrar details.
Sinyal Keamanan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: ariaprotocola.xyz
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain ariaprotocola.xyz behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive