Lompat ke laporan keamanan
Checked 09/08/2026 Ref D9D0D1B5

MALICIOUS — CRITICAL

dexgroms[.]com

Analysis of dexgroms.com shows a high‑risk fake exchange phishing operation.

88/100 evidence score · Critical
VirusTotal
3/91
Blocklists
2 · MetaMask, SEAL
Ketersediaan
Terakhir diketahui aktif · HTTP 200
Report / Add Evidence Appeal this listing
No capture stored

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 3. Daftar blokir publik yang melaporkan kecocokan: 2. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
Jump to section
Ringkasan laporan

dexgroms.com — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Investment Scam; Jenis penipuan: Fake Exchange. Ringkasan bukti: VirusTotal 3/91 (alphaMountain.ai, Gridinsoft, SOCRadar); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 88/100. Registrar: Realtime.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Stored AI analysis · 20/07/2026

Ref D9D0D1B5

Analysis of dexgroms.com shows a high‑risk fake exchange phishing operation. The site resolves to the Cloudflare‑hosted IP 188.114.97.3, which is geolocated to Canada and is served by the Cloudflare nameservers malcolm.ns.cloudflare.com and nena.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services (WE1), indicating the connection is encrypted but does not validate the legitimacy of the service. The HTTP response returns status 200 and the page title is "DEX Trading Platform," matching the reported scam type of a fake exchange. The domain was registered through Realtime Register B.V. and appears on three security blocklists; it is actively blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX has listed the domain in three threat‑intel pulses, and VirusTotal reports three detections out of 91 scanning engines. These concrete indicators confirm that the domain is being used to lure victims into a counterfeit trading platform. Uncertainties remain regarding the exact phishing payload and any additional infrastructure beyond the observed Cloudflare edge. Defenders should block the domain at network perimeter, add it to URL filtering lists, and monitor DNS queries for the associated IP and nameservers. Continued observation of any changes to the TLS certificate, HTTP content, or additional detection feeds is advised.

VirusTotal
VirusTotal
3 det.
OTX references
3 community refs
Sertifikat TLS
Google Trust Services
Status terpantau
Terakhir diketahui aktif 200
PhishDestroy
Daftar Hapus
Terdaftar
Cakupan data12 recorded checks
VirusTotal 3 / 91 URLQuery tidak diperiksa PhishStats tidak diperiksa OTX 3 community references CF Radar scan completed URLScan capture not submitted URLScan verdict putusan tidak tersedia Pemblokiran DNS tidak diperiksa TLS valid certificate, 79d WHOIS not parsed Tangkapan layar belum terekam Rantai pengalihan tidak diselidiki

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
9/11

Status Daftar Blokir Publik

Intelijen Domain

Domain
Server / ASN cloudflare · AS13335 Cloudflare, Inc.
IP Context Cloudflare shared edge origin IP hidden Reputasi Edge-IP tidak dikaitkan dengan domain ini.
Registrar Realtime
Pendaftar ICANNPenyedia layanan pendaftaran resmi yang terakreditasi ICANN →
Pencarian WHOISICANN RDAP untuk dexgroms.com →
Alamat IP 188.114.97.3 CDN
LokasiCA Toronto, CA
JaringanAS13335 · CloudFlare, Inc.
IP terbalikviewdns.info → rapiddns.io →
IP asal tersembunyi di balik proksi CDN. Hasil IP terbalik untuk alamat edge berisi penyewa yang tidak terkait; menemukan asal memerlukan DNS pasif atau data transparansi sertifikat.
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi10/07/2026
Server namanena.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 09/07/2026scanned 19/07/2026
Favicon Hash
ICANN OVERSIGHT

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Akreditasi adalah kontrak, bukan cap jaminan keamanan. Verifikasi biaya ICANN Baca RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Accountability draft Tidak ada yang dikirim secara otomatis.
Teknologi · 18 identified
Contentful
CMS

Contentful is an API-first content management platform to create, manage and publish content on any digital channel.

www.contentful.com Keyakinan 100%
Node.js
Programming languages

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

nodejs.org Keyakinan 100%
React
JavaScript frameworks

React is an open-source JavaScript library for building user interfaces or UI components.

reactjs.org Keyakinan 100%
Vercel
PaaS

Vercel is a cloud platform for static frontends and serverless functions.

vercel.com Keyakinan 100%
Next.js
JavaScript frameworks Web frameworks

Next.js is a React framework for developing single page Javascript applications.

nextjs.org Keyakinan 100%
Twitter Ads
Advertising

Twitter Ads is an advertising platform for Twitter 'microblogging' system.

ads.twitter.com Keyakinan 100%
Osano
Cookie compliance

Osano is a data privacy platform that helps your website comply with regulations such as GDPR and CCPA.

www.osano.com Keyakinan 100%
Mailgun
Email

Mailgun is a transactional email API service for developers.

www.mailgun.com Keyakinan 100%
Linkedin Insight Tag
Analytics

LinkedIn Insight Tag is a lightweight JavaScript tag that powers conversion tracking, website audiences, and website demographics.

business.linkedin.com Keyakinan 100%
Linkedin Ads
Advertising

Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.

business.linkedin.com Keyakinan 100%
HubSpot Analytics
Analytics

HubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.

www.hubspot.com Keyakinan 100%
HubSpot
Marketing automation

HubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.

www.hubspot.com Keyakinan 100%
HSTS
Keamanan

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

www.rfc-editor.org Keyakinan 100%
Google Tag Manager
Tag managers

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

www.google.com Keyakinan 100%
Google Analytics
Analytics

Google Analytics is a free web analytics service that tracks and reports website traffic.

google.com Keyakinan 100%
Cloudflare Browser Insights
Analytics RUM

Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.

www.cloudflare.com Keyakinan 100%
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com Keyakinan 100%
Webpack
Miscellaneous

Webpack is an open-source JavaScript module bundler.

webpack.js.org Keyakinan 100%
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

3 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection
alphaMountain.ai
Gridinsoft
SOCRadar
Bukti & Laporan EksternalIndependent lookups and source reports
Analisis Keamanan
VirusTotal 3 det. ChainPatrol URLQuery Open lookup Gridinsoft SSL Laboratorium Stored TLS valid CF Radar Open report OTX 3 refs WOT ScamAdviser Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN
OSINT & Intelijen
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Batu Hudson Sign-in search IntelX crt.sh Sertifikat WHOIS Wayback
DNS & Jaringan
nslookup.io DNS bgp.tools ASN /Rute
SEO & Domain
SpyFu Moz DA/PA Ahrefs Tautan balik Analisis Mendalam
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
PhishDestroy listing review Bukan laporan penegakan hukum
Banding atas Nama Domain
Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html 
<iframe
  src="https://phishdestroy.io/id/embed/domain/dexgroms.com"
  title="PhishDestroy threat report for dexgroms.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.