ecoseed[.]world
“EcoSeed”
Ringkasan bukti
Analysis of the domain ecoseed.world indicates it was actively involved in a wallet seed phishing campaign targeting cryptocurrency users. The domain was registered on March 11, 2026, through NameSilo, LLC, a registrar frequently observed in phishing operations. Infrastructure analysis reveals the domain resolved to the IP address 18.245.86.42, hosted on Amazon.com, Inc. (AS16509) infrastructure located in Germany. Nameservers associated with the domain, agustin.ns.cloudflare.com and liberty.ns.cloudflare.com, suggest the use of Cloudflare services, a common tactic to obscure hosting origins and evade detection. The domain's SSL certificate, issued by Amazon (Amazon ECDSA 256 M04), aligns with the hosting provider but provides no inherent trust validation.
At the time of analysis, the domain was flagged by 4 of 94 security vendors on VirusTotal, indicating a moderate level of detection. It also appeared on one security blocklist, specifically PhishDestroy, and was identified in two threat intelligence pulses on AlienVault OTX, confirming its classification as a phishing threat. The page title, 'EcoSeed,' and the scam type labeled as 'Wallet/Seed Phishing' suggest the domain was designed to harvest cryptocurrency wallet credentials or seed phrases. The domain has since been taken offline, though its prior activity and infrastructure remain relevant for defensive measures.
Defenders are advised to block the domain at the DNS level and monitor for related indicators, including the IP address 18.245.86.42 and associated nameservers. The Gridinsoft trust score of 0/100 further corroborates the domain's malicious classification. While the exact content of the phishing page remains unanalyzed, the available evidence confirms its role in a wallet seed phishing scheme. Organizations should review logs for connections to this domain and assess potential exposure.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-1774667249-ecoseed.world- Artefak PDF
- Bukti PDF
Riwayat laporan 1
- Laporan 1 Phishing Abuse Report: ecoseed[.]world
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive