Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
cryptomus[.]casa
“Cryptomus Pay”
The domain cryptomus.casa is currently active and classified as a high‑risk generic phishing operation. The site returned HTTP 200 and presented the page title "Cryptomus Pay". Technical fingerprints show a Node.js back‑end running Express, protected behind Cloudflare services (including Browser Insights and HTTP/3). DNS resolution points to 104.21.33.88, an IP owned by Cloudflare (AS13335, United States). Registration data indicates the domain was created on 2026‑03‑06 through Dynadot LLC, with authoritative nameservers braden.ns.cloudflare.com and teresa.ns.cloudflare.com. VirusTotal reports two of ninety‑four security vendors flagging the domain, and it is listed on four external blocklists, including PhishDestroy, MetaMask, SEAL, and ScamSniffer. The observed kit is identified as a Wallet Connect Abuse module, suggesting attempts to harvest cryptocurrency credentials. While the page content has not been manually inspected, the combination of a credential‑focused kit, active Cloudflare‑hosted endpoint, and multiple blocklist entries provides strong evidence of malicious intent. Defenders should block cryptomus.casa at network perimeters, update intrusion detection signatures, and monitor for DNS queries or outbound connections to the associated Cloudflare IP. Continuous re‑evaluation is advised as further indicators may emerge.
Catatan laporan keluar
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260317-E217FB- Judul halaman yang direkam
- Cryptomus Pay
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber · disinkronkan 10/08/2026
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of cryptomus.casa · checked Mar 17, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive