Lompat ke laporan keamanan
Checked 09/08/2026 Ref 1CE26169

MALICIOUS — HIGH

cryptodrainers[.]net

The domain cryptodrainers.net, impersonating the Solana brand, has a high threat score of 70/100 and is currently down.

69/100 evidence score · High
VirusTotal
3/91
Blocklists
No stored match
Ketersediaan
Terakhir diketahui aktif · HTTP 200
2026-03-27 12:45 UTCTerakhir diketahui aktif · HTTP 200

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 3. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . It contains 5 outgoing records; the latest is dated . The recorded recipient is domainabuse@tucows.com. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
6 months
Reports sent
5
Latest case ID
PD-1769796454-cryptodrainers.
Current status
HTTP 200 at latest stored check
Jump to section
Ringkasan laporan

cryptodrainers.net — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Solana; Jenis penipuan: Crypto Drainer. Ringkasan bukti: VirusTotal 3/91 (alphaMountain.ai, CRDF, Gridinsoft); URLQuery 2 alerts; PhishDestroy score 69/100. Registrar: Tucows.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Ref 1CE26169

The domain cryptodrainers.net, impersonating the Solana brand, has a high threat score of 70/100 and is currently down. It has been flagged as malicious by 1 out of 95 security vendors, with alphaMountain.ai being the only vendor to detect it. The domain is also listed on one public blocklist, but it is not flagged by Google Safe Browsing.

Registered with Tucows Domains Inc. in Canada, the domain was created on February 21, 2026, and first detected in the database on February 26, 2026. The hosting IP is 104.21.32.198. Given the high threat score and its malicious detection, block the domain at the perimeter and submit a report to the registrar's abuse desk.

VirusTotal
VirusTotal
3 det.
URLQuery
URLQuery
2 threat alerts
URLScan
URLScan
Gridinsoft
72/100
Sertifikat TLS
Kedaluwarsa atau belum diverifikasi
Usia
6 mo
Status terpantau
Terakhir diketahui aktif 200
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
5
Cakupan data13 recorded checks
VirusTotal 3 / 91 URLQuery 2 threat-system alerts PhishStats tidak diperiksa OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS tidak diperiksa TLS Kedaluwarsa atau belum diverifikasi WHOIS 6 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki Gridinsoft 72/100
Intelijen Keamanan Jaringan
Threat Detection Systems 2 alerts
Detection System Indicator Verdict Alert
Hagezi Threat Feed cryptodrainers.net malicious Sinkholed
DNS4EU cryptodrainers.net malicious Sinkholed

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
17/18
Initial Abuse Report (#1)
Sent to 1 abuse contact at Tucows Domains Inc. with forensic evidence
domainabuse@tucows.com
30/01/2026
Follow-up Report #2
Escalation #2 sent to 1 recipient — follow-up record after a previous report
domainabuse@tucows.com
31/01/2026
Follow-up Report #3
Escalation #3 sent to 1 recipient — follow-up record after multiple previous reports
domainabuse@tucows.com
07/02/2026
ICANN Escalation #4
Escalation #4 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
domainabuse@tucows.comabuse@verisign-grs.comcompliance@icann.org
15/02/2026
ICANN Escalation #5
Escalation #5 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
domainabuse@tucows.comabuse@verisign-grs.comcompliance@icann.org
18/04/2026
5 Reports Filed
5 report records were stored over 190 days; current observed status: Terakhir diketahui aktif

Status Daftar Blokir Publik

Tangkapan tersimpan

Judul Halaman
Solana Drainer Script 2025 - Source Code Download, Demo & Pricing
Sertifikat TLS
Kedaluwarsa atau belum diverifikasi · Diterbitkan oleh WE1

Intelijen Domain

Domain
URLScan Verdict Analisis selesai score 0 report ↗
Telegram IoCs 2 extracted https://t.me/cryptodrainers https://t.me/StepDrain
Server / ASN cloudflare · AS13335 CLOUDFLARENET - Cloudflare, Inc., US
IP Context Cloudflare shared edge origin IP hidden Reputasi Edge-IP tidak dikaitkan dengan domain ini.
Registrar Tucows CA(CA)
Alamat IP 104.21.32.198 CDN
LokasiUS San Francisco, US
JaringanAS13335 · Cloudflare, Inc.
IP asal tersembunyi di balik proksi CDN. Hasil IP terbalik untuk alamat edge berisi penyewa yang tidak terkait; menemukan asal memerlukan DNS pasif atau data transparansi sertifikat.
PendaftaranDibuat 21/02/2026 (169d)
Elapsed Since First Report 18 days
Yang kami hitung Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Terakhir diketahui aktif.
Minimum notice count 5 is the number of stored outgoing report records for this domain. It does not by itself prove acknowledgement or action by a recipient.
Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.
ICANN RAA §3.18 The history below lists stored escalation records and timestamps. It does not by itself establish receipt, acknowledgement, compliance, or enforcement by any recipient.
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi26/02/2026
DOM Analysisanalyzed 09/07/2026score 63/100
IoC Extractionscanned 29/07/20260 wallet · 2 Telegram IoCs
Server namanero.ns.cloudflare.com
Favicon Hash
Case ID
ICANN OVERSIGHT

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Tidak ada yang dikirim secara otomatis.
Riwayat Laporan Penyalahgunaan · 5 stored reports over 79 days · click to expand
This timeline is built from stored outgoing report records. It documents timestamps and listed recipients, but does not by itself prove delivery, acknowledgement, or recipient action.
5 abuse reports filed over 190 days — latest observed status: Terakhir diketahui aktif
The records name Tucows Domains Inc. as a recipient or subject. ICANN Compliance appears in the recipient field for at least one record.
5
reports
190
days
ICANN CC
  1. Report #1 Jan 30, 2026 · 18:07 UTC
    Phishing Abuse Report: cryptodrainers[.]net
    domainabuse@tucows.com
  2. Report #2 Escalation 27h still active Jan 31, 2026 · 21:22 UTC
    ESCALATION #2 (27h active): Phishing - cryptodrainers[.]net
    domainabuse@tucows.com
  3. Report #3 Escalation 186h still active Feb 7, 2026 · 12:20 UTC
    ESCALATION #3 (186h active): Phishing - cryptodrainers[.]net
    domainabuse@tucows.com
  4. Report #4 ICANN CC 380h still active Feb 15, 2026 · 14:08 UTC
    ESCALATION #4 (380h active): Phishing - cryptodrainers[.]net
    domainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
  5. Report #5 ICANN CC 1872h still active Apr 18, 2026 · 21:11 UTC
    ESCALATION #5 (1872h active): Phishing - cryptodrainers[.]net
    domainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
Record scope: the timeline documents outgoing records stored by PhishDestroy. Delivery, acknowledgement, and subsequent action require separate recipient or infrastructure evidence.
Teknologi · 5 identified
Bootstrap
UI frameworks

Popular CSS framework for responsive, mobile-first web development.

Google Analytics
Analytics

Web analytics service tracking website traffic and user behavior.

marketingplatform.google.com
Cloudflare Browser Insights
Analytics RUM

Performance monitoring tool that measures website speed from real users.

www.cloudflare.com
Cloudflare
CDN

Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.

www.cloudflare.com
HTTP/3
Miscellaneous

Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.

Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

3 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
alphaMountain.ai
CRDF
Gridinsoft
Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of cryptodrainers.net · checked Mar 2, 2026

67
Needs Work
Performance
FCP
2.91s
First Contentful Paint
LCP
6.66s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
40ms
Total Blocking Time
SI
5.91s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Bukti & Laporan EksternalIndependent lookups and source reports
Community Scam Report — ChainAbuse
1 report filed for cryptodrainers.net (1 written by a person) · category: Other · source checked
“Like he come in my discord told this is his website go their i connect wallet and my fund goes their wallet which was this 5g3Wp8serwa4XT575MbcFF1rhRqicbTKb4YPCBJjx1XycjFDiWTcVFcj1PdqvLVTyTtmQKWecLSaC4sdE8Qz8U9j”
— reported by Anonymous on Jul 10, 2025 · Source: ChainAbuse (TRM Labs) — full report and evidence there.
Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-1769796454-cryptodrainers. Recipient: domainabuse@tucows.com
Blocklist hits included with submission: SEAL
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html
<iframe
  src="https://phishdestroy.io/id/embed/domain/cryptodrainers.net"
  title="PhishDestroy threat report for cryptodrainers.net"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.