gatenode[.]cash
“Fees - Buy/Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Gate.com”
gatenode.cash — Belum terverifikasi. Peniruan identitas merek: Ethereum; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 65/100.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain gatenode.cash was registered on 2026-02-21 and is currently offline. Infrastructure analysis shows it resolves to the IPv4 address 43.159.108.216, which is geolocated to Singapore (ACE). The authoritative name servers are ns1.teodns.com and ns2.teodns.com, both typical of low‑cost DNS providers. TLS inspection reveals a TrustAsia DV TLS RSA CA 2025 certificate, which is a publicly trusted certificate but offers no indication of legitimate ownership. The site previously presented a page titled “Fees - Buy/Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Gate.com”, suggesting a clone of the legitimate Gate.io exchange and an attempt to lure users interested in Ethereum.
The domain is classified as a crypto‑scam and explicitly impersonates the Ethereum brand. It has been added to at least one security blocklist and is listed as blocked by PhishDestroy. VirusTotal reports indicate the domain was scanned by 93 antivirus and URL‑reputation engines, none of which flagged it at the time of scanning. No Safe Browsing, OTX, or additional blocklist entries are documented. The combination of recent registration, use of a reputable but generic SSL certificate, a Singapore‑based IP address, and the presence of a brand‑related page title aligns with typical brand‑impersonation infrastructure.
Uncertainty remains regarding any active command‑and‑control infrastructure or payload delivery because the site is offline and no further HTTP responses have been captured. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the listed name servers, and add the IP address 43.159.108.216 to threat‑intel feeds. Because the domain mimics a legitimate cryptocurrency exchange, any email or web traffic referencing Ethereum transactions should be scrutinized for redirection to this host. Ongoing observation is recommended to detect any re‑hosting attempts or changes in SSL certificate details.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive