com-authconnectin[.]ru
Pemeriksaan phishing dan keamanan com-authconnectin.ru
“com-authconnectin.ru”
com-authconnectin.ru — Belum terverifikasi. Peniruan identitas merek: MetaMask; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 3/95 (Fortinet, Gridinsoft, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 71/100. Registrar: REGTIME-RU.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain com-authconnectin.ru indicates that it is being used for brand impersonation targeting MetaMask users. The domain was registered on December 11, 2025 through the REGTIME-RU registrar and is hosted on a DigitalOcean server (ASN14061) located in Germany, reachable at IP address 164.92.203.216. DNS resolution points to nameservers ns1.smartape.ru and ns2.smartape.ru, both of which are associated with the same hosting provider. No TLS certificate is present for the site, and current network probes show the service is offline, suggesting that the phishing infrastructure has been taken down or is temporarily disabled.
The page title returned by the server is the raw domain name, "com-authconnectin.ru," providing no additional context about the content. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal scans report that three out of ninety-five security vendors flagged the domain, reinforcing the suspicion of malicious intent.
While the exact payload or page layout has not been captured, the explicit indication that the domain impersonates MetaMask aligns with known patterns of crypto wallet credential harvesting. Defenders should continue to block traffic to the IP 164.92.203.216, add the domain to internal deny lists, and monitor for new domains registered by the same registrar or using the same smartape.ru nameserver pair. Ongoing observation of related DNS and hosting changes is recommended to detect any re‑activation or migration of the phishing campaign.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive