defiwallekbespt[.]net
“DeFi Trading”
defiwallekbespt.net — Konten tidak tersedia. Peniruan identitas merek: Google; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 2/95 (G-Data, Gridinsoft); 1 external blocklist match (ScamSniffer); PhishDestroy score 58/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain is flagged as a high-risk brand impersonation phishing site targeting Google users. Analysis indicates the infrastructure is designed to deceive victims through fraudulent DeFi trading pages, a tactic commonly associated with credential harvesting and financial fraud schemes. The domain exhibits multiple technical indicators consistent with malicious activity, warranting immediate attention from security teams and end users. Infrastructure analysis reveals the following technical indicators: the domain defiwallekbespt.net was registered on June 19, 2025, through Gname.com Pte. Ltd., a registrar frequently observed in phishing campaigns. It resolves to IP address 188.114.97.3, hosted on AS13335 Cloudflare, Inc. infrastructure located in the US. The site lacks an SSL certificate, increasing the risk of data interception during transmission. VirusTotal detection shows 2 out of 95 security vendors have flagged the domain as malicious. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, and presents a page titled 'DeFi Trading,' which is inconsistent with the impersonated brand's legitimate services. Mitigation steps for this specific threat type include immediate blocking of the domain and its associated IP address (188.114.97.3) at the network perimeter. Security teams should update endpoint protection rules to detect and prevent access to the domain. Users should be educated on recognizing brand impersonation tactics, particularly those involving financial or cryptocurrency-themed lures. Organizations impersonated by such domains should issue public warnings to their user base and monitor for unauthorized access attempts originating from this infrastructure. Given the domain's recent registration and active status, continuous monitoring for related domains using similar naming patterns is recommended.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive