fomchoby[.]digital
“Helvionex”
fomchoby.digital — Konten tidak tersedia. Peniruan identitas merek: Argent; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 15/91 (ADMINUSLabs, BitDefender, CRDF, Chong Lua Dao, CyRadar); Google Safe Browsing flagged; PhishDestroy score 95/100. Registrar: PDR.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis as of July 24, 2026 indicates that the domain fomchoby.digital has been taken offline but exhibits multiple indicators of a high‑risk brand‑impersonation campaign targeting the financial services brand argent. The domain was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare‑owned address 104.21.45.20, which belongs to ASN 13335 (Cloudflare, Inc.) and is located in the United States. The hosting infrastructure uses Cloudflare services and supports HTTP/3, with authoritative nameservers dax.ns.cloudflare.com and kira.ns.cloudflare.com. The site presented the page title “Helvionex”, which does not correspond to the advertised brand, and the SSL certificate was issued by Google Trust Services under the WE1 designation, confirming the use of a legitimate certificate authority but not validating the legitimacy of the content. Reputation data shows a Gridinsoft trust score of 0 out of 100, indicating extreme distrust.
Google Safe Browsing classifies the domain as a social‑engineering threat, and three independent blocklists (PhishDestroy, MetaMask, and SEAL) have already listed the host. AlienVault OTX reports the domain in a single threat‑intelligence pulse. VirusTotal analysis flagged the domain by 21 of 95 security vendors, reinforcing the malicious assessment. The overall risk rating is high, and the current status is offline, suggesting that the operators may be rotating infrastructure.
While the technical footprint is well documented, the exact content served before takedown has not been publicly released, and the specific lure mechanisms remain unknown. Defenders should continue to block the domain at network perimeters, update URL filtering rules with the observed indicators, and monitor the associated IP address 104.21.45.20 for any re‑use in future campaigns. Ongoing surveillance of the Cloudflare ASN and related nameservers is recommended, as the infrastructure can be repurposed quickly.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive