Lompat ke laporan keamanan
Checked 09/08/2026 Ref DE9613D0

MALICIOUS — CRITICAL

Pemeriksaan phishing dan keamanan tarzir-started.pages.dev

tarzir-started[.]pages[.]dev

PhishDestroy identifies tarzir-started.pages.dev as a live crypto drainer domain engineered to siphon cryptocurrency from unsuspecting users.

86/100 evidence score · Critical
VirusTotal
7/91
Blocklists
No stored match
Ketersediaan
Terakhir diketahui aktif · HTTP 200
Report / Add Evidence Appeal this listing
2026-05-01 10:49 UTCTerakhir diketahui aktif · HTTP 200
View full size Wayback Unduh

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 7. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
Jump to section
Ringkasan laporan

tarzir-started.pages.dev — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Trezor; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 7/91 (alphaMountain.ai, BitDefender, Fortinet, G-Data, Kaspersky); URLScan malicious verdict; PhishDestroy score 86/100. Registrar: Cloudflare.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Stored AI analysis · 01/05/2026

Ref DE9613D0

PhishDestroy identifies tarzir-started.pages.dev as a live crypto drainer domain engineered to siphon cryptocurrency from unsuspecting users. The page hosts a counterfeit deposit interface that prompts victims to connect wallets under the guise of receiving rewards, then silently drains funds via malicious smart-contract interactions. Once a wallet is linked, the drainer immediately initiates token transfers to attacker-controlled addresses, often camouflaged as gas fees or small test transactions to avoid triggering wallet alerts. This domain was flagged by PhishDestroy’s pipeline after resolving to 188.114.97.3 and showing 0 detections on VirusTotal out of 95 engines at the time of analysis. The infrastructure is hosted behind Cloudflare, Inc., which obscures origin details and complicates takedown efforts, while the SSL certificate issued by Google Trust Services lends false legitimacy to the page. The domain is currently active and under continuous monitoring, with no known blocklist entries at this stage, indicating it remains in early operational phases. Users who visited tarzir-started.pages.dev should immediately disconnect any wallets, revoke any unauthorized permissions via blockchain explorers or wallet interfaces, and scan devices for infostealers. If funds were drained, file a report with local cybercrime units and blockchain forensics teams using transaction hashes and wallet addresses. Avoid reusing seed phrases or private keys across services and consider hardware wallets for enhanced protection against future drainer campaigns.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
7 det.
URLScan
URLScan
Laporan ↗
Sertifikat TLS
Google Trust Services
Hosting
Cloudflare Pages
Usia
3 mo
Status terpantau
Terakhir diketahui aktif 200
PhishDestroy
Daftar Hapus
Terdaftar
Cakupan data12 recorded checks
VirusTotal 7 / 91 URLQuery checked — no detections recorded PhishStats checked — no match recorded OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict malicious Pemblokiran DNS 14 diperiksa — tidak ada blokir TLS valid certificate, 89d WHOIS 3 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki
Intelijen Keamanan Jaringan
Free Hosting Detected Cloudflare Pages
This domain is hosted on Cloudflare Pages (free hosting platform). Free hosting platforms are commonly used for both legitimate testing/development and malicious purposes. Additional context is needed

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
11/13
Ancaman Telah Diterima
tarzir-started.pages.dev telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
01/05/2026
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
URLScan returned a malicious verdict · score 100
29/07/2026
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
7/91 recorded on VirusTotal
05/08/2026
Google Safe Browsing
01/05/2026
Free Hosting: Cloudflare Pages
Site hosted on Cloudflare Pages — free hosting platforms are frequently used for throwaway phishing sites
Brand Impersonation
Impersonation of Trezor
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.
09/08/2026
Complaint Draft Available
Tidak ada penyerahan yang dicatat. Anda dapat membuat draf, meninjaunya, dan menyerahkannya sendiri ke otoritas yang sesuai.
Daftar yang Dihapus Telah Dipublikasikan
01/05/2026
Monitoring Continues
Domain tetap dapat dijangkau atau aksesnya dibatasi; pemeriksaan di masa depan dapat memperbarui pengamatan ini.

Status Daftar Blokir Publik

Tangkapan tersimpan

Primary capture 1 / 3
Lihat Ukuran Penuh Wayback Unduh

Intelijen Domain

Domain
URLScan Verdict Berbahaya score 100 Phishing brand: Trezor report ↗
Server / ASN cloudflare · AS13335 Cloudflare, Inc.
IP Context Cloudflare shared edge origin IP hidden Reputasi Edge-IP tidak dikaitkan dengan domain ini.
Penyedia platform Cloudflare US(US)
Alamat IP 188.114.97.3 CDN
LokasiCA Toronto, CA
JaringanAS13335 · CloudFlare, Inc.
IP terbalikviewdns.info → rapiddns.io →
IP asal tersembunyi di balik proksi CDN. Hasil IP terbalik untuk alamat edge berisi penyewa yang tidak terkait; menemukan asal memerlukan DNS pasif atau data transparansi sertifikat.
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi01/05/2026
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://tarzir-started.pages.dev/
Server namamilan.ns.cloudflare.comsummer.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 01/05/2026scanned 01/05/2026
Judul Halaman
Getting Started with Your Hardware Wallet — Trezor Users Guide (Unofficial)
Sertifikat TLS
Valid transport encryption · Diterbitkan oleh Google Trust Services · valid for 89 days
Teknologi · 3 identified
HSTS
Keamanan

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

www.rfc-editor.org Keyakinan 100%
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com Keyakinan 100%
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org Keyakinan 100%
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

7 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
alphaMountain.ai
BitDefender
Fortinet
G-Data
Kaspersky
Lionic
Sophos
Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of tarzir-started.pages.dev · checked May 1, 2026

79
Needs Work
Performance
FCP
1.2s
First Contentful Paint
LCP
1.24s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
870ms
Total Blocking Time
SI
3.37s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Bukti & Laporan EksternalIndependent lookups and source reports
Analisis Keamanan
URLScan Berbahaya VirusTotal 7 det. ChainPatrol URLQuery Analyzed Gridinsoft SSL Laboratorium Stored TLS valid CF Radar Open report WOT ScamAdviser Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN
OSINT & Intelijen
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Batu Hudson Sign-in search IntelX crt.sh Sertifikat WHOIS Wayback
DNS & Jaringan
nslookup.io DNS bgp.tools ASN /Rute
SEO & Domain
SpyFu Moz DA/PA Ahrefs Tautan balik Analisis Mendalam
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
PhishDestroy listing review Bukan laporan penegakan hukum
Banding atas Nama Domain
Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html 
<iframe
  src="https://phishdestroy.io/id/embed/domain/tarzir-started.pages.dev"
  title="PhishDestroy threat report for tarzir-started.pages.dev"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>