skickligfinvoro[.]net
“Skicklig Finvoro™ - AI-Trading Sverige 2025”
skickligfinvoro.net — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Binance; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 9/93 (alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker, Google Safebrowsing); PhishDestroy score 77/100. Registrar: PDR.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of skickligfinvoro.net shows a brand-impersonation campaign targeting Binance users. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare's network (ASN 13335) with the IP address 104.21.91.119, which resolves to the United States. The authoritative nameservers are jack.ns.cloudflare.com and jasmine.ns.cloudflare.com. No TLS certificate is presented, indicating the site was delivered over plain HTTP when it was online. The page title observed during the brief crawl reads "Skicklig Finvoro™ - AI-Trading Sverige 2025", which references a Swedish-language AI-trading service but does not contain any visible Binance branding.
The site explicitly impersonates Binance according to the supplied intelligence, and the risk level is marked as elevated. Reputation checks show a Gridinsoft trust score of 0/100 and the domain appears on three security blocklists. VirusTotal scans reported nine detections out of ninety-three scanners, and the domain is currently listed as blocked by PhishDestroy, MetaMask, and SEAL. The site’s status is offline at the time of reporting, and no SSL certificate is available for verification. Defenders should immediately block traffic to skickligfinvoro.net and to its associated IP address 104.21.91.119.
Adding the domain to internal URL filtering, DNS sinkholing, and endpoint protection lists will prevent inadvertent user access. Continuous monitoring of Cloudflare-hosted IP ranges for new domains registered with similar naming patterns or the same registrar is advised, as threat actors often reuse the same infrastructure. Because the page content beyond the title has not been captured, further investigation should be conducted if the domain resurfaces, focusing on login-page mimicry and credential-stealing mechanisms. Maintaining awareness of the listed blocklists and updating detection rules accordingly will reduce exposure to this brand-impersonation campaign.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260120-44CC76 Recipient: gdpr-masking@gdpr-masked.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive