Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@cosmotown.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
nct-x[.]com
“Novacrypt Trading Inc Ltd - High-Frequency Crypto Trading”
nct-x.com — Dapat dijangkau · akses dibatasi (HTTP 403). Peniruan identitas merek: Across; Jenis penipuan: Crypto Drainer. Ringkasan bukti: VirusTotal 4/95 (alphaMountain.ai, Gridinsoft, Seclookup, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: Cosmotown.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy identifies nct-x.com as a brand impersonation threat targeting the crypto trading sector under the guise of Novacrypt Trading Inc Ltd. This domain was created on February 21, 2026, and presents itself as a high-frequency crypto trading platform, but it is a phishing domain designed to steal sensitive information from unsuspecting users. The site impersonates a broad range of brands, indicating a generic credential harvesting operation rather than a single targeted entity.
Technical indicators reveal that nct-x.com resolves to IP address 188.114.97.3 and was registered through Cosmotown, Inc. VirusTotal analysis shows 4 out of 95 security vendors flagging the domain as malicious, and it appears on three security blocklists. The domain uses an SSL certificate issued by Let's Encrypt (E7), which is common among legitimate sites but also frequently abused by phishers to create a false sense of security. Google Safe Browsing status is not explicitly mentioned in the data, but the elevated risk level and blocklist presence suggest it posed a credible threat.
The domain is currently offline, indicating that hosting providers or registrars have taken action to suspend the site. However, users who may have previously visited the domain or entered credentials should immediately change passwords and monitor accounts for unauthorized activity. PhishDestroy recommends avoiding any interaction with nct-x.com and reporting similar domains to security teams. While the immediate risk is mitigated, the domain's recent creation and short active window highlight the need for continued vigilance against new phishing sites impersonating crypto trading platforms.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 3 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Web platform based on Nginx with LuaJIT for scalable web apps.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260206-1442EF Recipient: abuse@cosmotown.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive