pbozlnekvtzz3j64dq6opm7j546cf7s3kss2gh3xo34yrezen7zq[.]arweave[.]net
“Loading…”
pbozlnekvtzz3j64dq6opm7j546cf7s3kss2gh3xo34yrezen7zq.arweave.net — Konten tidak tersedia. Peniruan identitas merek: Aave; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 2/91 (LevelBlue, Phishing Database); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: NameCheap.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain pbozlnekvtzz3j64dq6opm7j546cf7s3kss2gh3xo34yrezen7zq.arweave.net indicates an elevated-risk brand impersonation campaign targeting Aave, a decentralized finance protocol. The domain, registered through NameCheap, Inc., resolves to IP address 79.127.206.208, hosted under AS60068 (Datacamp Limited) in the United States. Infrastructure analysis reveals Cloudflare nameservers (aurora.ns.cloudflare.com, nitin.ns.cloudflare.com) and CDN77 technology, suggesting efforts to obscure hosting origins and enhance resilience. The domain's SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, providing no definitive classification on its own.
At the time of assessment, the domain returned an HTTP 451 status, indicating it was taken offline or restricted, though the specific reason remains unclear. The page title 'Loading…' offers no substantive content for further analysis. Detection data from security vendors is limited but notable: 2 of 91 vendors on VirusTotal flagged the domain as malicious, while three independent security blocklists (PhishDestroy, MetaMask, and SEAL) have listed it, reinforcing its classification as a brand impersonation threat. No additional context regarding the scam's operational phase (e.g., credential harvesting, token theft) is available from the observed data.
Defenders are advised to treat this domain as actively malicious until further evidence suggests otherwise. Network-level blocking at the IP (79.127.206.208) and domain level is recommended, alongside monitoring for related infrastructure (e.g., Cloudflare configurations, CDN77 usage) that may reappear under new identifiers. Given the domain's association with Aave, organizations handling decentralized finance transactions should prioritize user education on recognizing brand impersonation tactics and verifying official communication channels.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | solana-rpc.publicnode.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: arweave.net
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain arweave.net behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260607-56AB77 Recipient: abuse@datacamp.co.uk Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive