Lompat ke laporan keamanan
Checked 09/08/2026 Ref FD4916C8

MALICIOUS — CRITICAL

Pemeriksaan phishing dan keamanan deepworm.bet

deepworm[.]bet

PhishDestroy identifies deepworm.bet as an active crypto drainer posing as a fake cryptocurrency wallet login portal.

78/100 evidence score · Critical
VirusTotal
1/91
Blocklists
2 · MetaMask, SEAL
Ketersediaan
Terselubung · dapat dijangkau · HTTP 502
Report / Add Evidence Appeal this listing
2026-05-06 21:04 UTCTerselubung · dapat dijangkau · HTTP 502
View full size Wayback Unduh

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 1. Daftar blokir publik yang melaporkan kecocokan: 2. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
Jump to section
Ringkasan laporan

deepworm.bet — Terselubung · dapat dijangkau (HTTP 502). Jenis penipuan: Fake Airdrop. Ringkasan bukti: VirusTotal 1/91 (SOCRadar); URLQuery 4 alerts; Spamhaus DBL_MALWARE; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; cloaking observed; PhishDestroy score 78/100. Registrar: PDR.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Stored AI analysis · 06/05/2026

Ref FD4916C8

PhishDestroy identifies deepworm.bet as an active crypto drainer posing as a fake cryptocurrency wallet login portal. The domain specifically targets users attempting to access crypto services, harvesting credentials and private keys to drain wallets. Security research indicates this is part of a broader campaign distributing drainer scripts through deceptive landing pages mimicking legitimate wallet interfaces. This domain was flagged through multiple security feeds, showing 0 detections on VirusTotal despite active malicious activity. The domain was registered on March 06, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to IP 172.67.186.44. MetaMask, SEAL, and Maltrail have already blocked this domain, and it appears on 3 security blocklists. The SSL certificate issued by Let's Encrypt suggests an attempt to appear legitimate, though the domain's short operational window raises immediate concern. Users who accessed this domain should immediately revoke any connected wallet permissions and transfer remaining funds to a secure wallet. Run a full antivirus scan and check browser extensions for unauthorized modifications. Report this domain on PhishDestroy to help prevent further victimization. If you entered wallet credentials, consider your funds at risk and consult a cybersecurity professional for incident response.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
1 det.
URLQuery
URLQuery
4 threat alerts
DNS Security
5/14
CF Radar
Berbahaya
URLScan
URLScan
Laporan ↗
Sertifikat TLS
Let's Encrypt
Usia
3 mo
Status terpantau
Terselubung · dapat dijangkau 502
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data12 recorded checks
VirusTotal 1 / 91 URLQuery 4 threat-system alerts PhishStats checked — no match recorded OTX no community references CF Radar provider verdict: malicious URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS 5/14 TLS valid certificate, 87d WHOIS 3 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki
Intelijen Keamanan Jaringan
DNS Provider Blocks 5 / 14
Cloudflare Family Cloudflare Security Controld Adblock Controld Family Controld Malware
Dangerous · Checked 14 DNS providers: Quad9, AdGuard, ControlD, CleanBrowsing & more
Threat Detection Systems 4 alerts
Detection System Indicator Verdict Alert
Cloudflare DNS deepworm.bet malicious Sinkholed
DigiCert UltraDNS deepworm.bet malicious Sinkholed
Hagezi Threat Feed deepworm.bet malicious Sinkholed
DNS4EU deepworm.bet malicious Sinkholed
Stored URLQuery scan evidence · May 6, 2026 20:04 UTC Open source report
CF Cloudflare Radar Verdict Berbahaya
Security threats Malware Malware
View full Cloudflare Radar report

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
13/14
Ancaman Telah Diterima
deepworm.bet telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
06/05/2026
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
Analisis URLScan selesai; hasil tangkapan web ini tidak mengubah keputusan ancaman halaman · score 0
29/07/2026
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
1/91 recorded on VirusTotal
14/05/2026
Google Safe Browsing
06/05/2026
Deteksi Daftar Blokir
Ditemukan di 2 blocklists: MetaMask, SEAL
09/08/2026
DNS Security Blocks
Blocked by 5 of 14 checked DNS providers: Cloudflare family, Cloudflare security, Controld adblock, Controld family
CF Radar: Malicious
Cloudflare Radar classified this domain as Security threats, malware, Malware
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.
09/08/2026
Sent Report Recorded
Stored sent-report record for registrar PDR Ltd. d/b/a PublicDomainRegistry.com, hosting provider, 1 abuse contact
abuse@publicdomainregistry.com
06/05/2026
Daftar yang Dihapus Telah Dipublikasikan
06/05/2026
Monitoring Continues
Domain tetap dapat dijangkau atau aksesnya dibatasi; pemeriksaan di masa depan dapat memperbarui pengamatan ini.

Status Daftar Blokir Publik

Tangkapan tersimpan

Primary capture 1 / 3
Lihat Ukuran Penuh Wayback Unduh
Judul Halaman
Deep Worm Airdrop
Sertifikat TLS
Valid transport encryption · Diterbitkan oleh Let's Encrypt · valid for 87 days

Intelijen Domain

Domain
URLScan Verdict Analisis selesai score 0 report ↗
Server / ASN cloudflare · AS13335 Cloudflare, Inc.
IP Context Cloudflare shared edge origin IP hidden Reputasi Edge-IP tidak dikaitkan dengan domain ini.
Registrar PDR IN(IN)
Kontak penyalahgunaanabuse@publicdomainregistry.com
Pendaftar ICANNPenyedia layanan pendaftaran resmi yang terakreditasi ICANN →
Pencarian WHOISICANN RDAP untuk deepworm.bet →
Alamat IP 172.67.186.44 CDN
LokasiCA Toronto, CA
JaringanAS13335 · Cloudflare, Inc.
IP terbalikviewdns.info → rapiddns.io →
IP asal tersembunyi di balik proksi CDN. Hasil IP terbalik untuk alamat edge berisi penyewa yang tidak terkait; menemukan asal memerlukan DNS pasif atau data transparansi sertifikat.
PendaftaranDibuat 06/05/2026 (94d) — Expires 06/03/2027
Status HTTP502 Error
Cloaking Cloaking Detected Status split · score 4/6
transient_502: raw=transient_502; http=502; via=http_proxy
checked 09/08/2026
Elapsed Since First Report 5h
Yang kami hitung Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Terselubung · dapat dijangkau.
Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi06/05/2026
IoC Extractionscanned 01/08/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://deepworm.bet/
Server namaamos.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 04/05/2026scanned 07/05/2026
Case ID
ICANN OVERSIGHT

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Akreditasi adalah kontrak, bukan cap jaminan keamanan. Verifikasi biaya ICANN Baca RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Accountability draft Tidak ada yang dikirim secara otomatis.
Casino / Gambling License Verification
Unverified gambling license
This domain markets casino/gambling services. Scam casinos routinely display fake Curaçao, MGA, or Kahnawake license badges that don’t exist in the real registries. Always verify the license number against the official regulator database before depositing. If the site shows a seal but no clickable registry link — or the linked registry page doesn’t exist — treat it as fraudulent.
Curaçao eGaming (official) Malta Gaming Authority UK Gambling Commission PA Gaming Control Kahnawake Gaming Gibraltar Gambling
Teknologi · 4 identified
Bootstrap
UI frameworks

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

getbootstrap.com Keyakinan 100%
Cloudflare Browser Insights
Analytics RUM

Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.

www.cloudflare.com Keyakinan 100%
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com Keyakinan 100%
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org Keyakinan 100%
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

1 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed
SOCRadar
Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of deepworm.bet · checked May 6, 2026

64
Needs Work
Performance
FCP
3.27s
First Contentful Paint
LCP
3.34s
Largest Contentful Paint
CLS
0.008
Cumulative Layout Shift
TBT
972ms
Total Blocking Time
SI
3.29s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Bukti & Laporan EksternalIndependent lookups and source reports
Analisis Keamanan
URLScan Analyzed VirusTotal 1 det. ChainPatrol URLQuery 4 threat alerts Gridinsoft SSL Laboratorium Stored TLS valid CF Radar Berbahaya DNS Security 5/14 WOT ScamAdviser Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN
Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260506-F3F2C1 Recipient: abuse@publicdomainregistry.com
Page title stored with report: Deep Worm Airdrop
Blocklist hits included with submission: MetaMask, SEAL
OSINT & Intelijen
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Batu Hudson Sign-in search IntelX crt.sh Sertifikat WHOIS Wayback
DNS & Jaringan
nslookup.io DNS bgp.tools ASN /Rute
SEO & Domain
SpyFu Moz DA/PA Ahrefs Tautan balik Analisis Mendalam
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
PhishDestroy listing review Bukan laporan penegakan hukum
Banding atas Nama Domain
Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html 
<iframe
  src="https://phishdestroy.io/id/embed/domain/deepworm.bet"
  title="PhishDestroy threat report for deepworm.bet"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.