Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@identitydigital.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
connect-portal[.]live
“Webee 3 - Secure, Scalable, Decentralized Blockchain Infrastructure”
connect-portal.live — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Genericcrypto; Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 17/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of connect-portal.live indicates a high-risk credential phishing domain targeting blockchain or cryptocurrency users. The domain, registered on June 2, 2026, resolves to 104.21.65.141 (AS13335, Cloudflare, Inc.) and returns an HTTP 200 status, confirming it is currently active. The page title, 'Webee 3 - Secure, Scalable, Decentralized Blockchain Infrastructure,' suggests an attempt to impersonate a blockchain-related service, though the exact content and functionality of the site remain unconfirmed. Security vendors have flagged this domain, with 9 of 91 detecting it as malicious. It appears on three security blocklists and is explicitly blocked by at least three threat intelligence sources, including MetaMask, which specializes in cryptocurrency-related threats. The domain uses Cloudflare nameservers (max.ns.cloudflare.com, samara.ns.cloudflare.com) and a Google Trust Services SSL certificate (WE1), a common configuration for both legitimate and malicious sites. Defenders should treat this domain as a confirmed phishing threat, particularly for credential harvesting in the blockchain or cryptocurrency space. Immediate blocking at the DNS or proxy level is recommended, along with monitoring for connections to the IP 104.21.65.141. Further investigation into associated infrastructure, such as co-hosted domains or shared SSL certificates, may reveal additional related threats. No evidence suggests this domain is part of a broader campaign, but its recent registration and active status warrant continued scrutiny.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-16 02:40:11 UTC
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260624-96CF12 Recipient: abuse@identitydigital.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive