vote-neptfinance[.]xyz
“Neptune Finance”
vote-neptfinance.xyz — Belum terverifikasi. Jenis penipuan: Crypto Drainer. Ringkasan bukti: VirusTotal 12/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, Forcepoint ThreatSeeker, Fortinet); URLQuery 4 alerts; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 86/100. Registrar: PDR.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy analysts have flagged vote-neptfinance.xyz as an active crypto drainer designed to steal cryptocurrency from unsuspecting users. The site mimics the branding of Neptune Finance, a legitimate decentralized finance platform, to trick visitors into connecting their wallets and signing malicious transactions. Once a wallet is connected, the drainer silently transfers tokens to attacker-controlled addresses, often draining entire balances within seconds.
This domain was flagged after analysts observed zero detections on VirusTotal (1/95 engines) despite its recent creation on April 13, 2026. It resolves to IP 104.21.32.155 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com using a Let’s Encrypt SSL certificate, which may lend false credibility to visitors. The combination of low detection rates and active hosting suggests the threat actor is actively testing the domain against security tools before broader deployment.
If you visited vote-neptfinance.xyz or entered any wallet credentials, immediately disconnect your wallet, revoke any suspicious permissions, and transfer remaining assets to a clean wallet. Do not approve any pending transactions. Report the domain to PhishDestroy for takedown and scan your device with updated antivirus and anti-malware tools. Always verify URLs manually and use bookmarked links for trusted platforms—never click links from unsolicited messages.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | vote-neptfinance.xyz |
malicious | Sinkholed |
| DNS4EU | vote-neptfinance.xyz |
malicious | Sinkholed |
| DNS4EU | api.vote-neptfinance.xyz |
malicious | Sinkholed |
| Hagezi Threat Feed | api.vote-neptfinance.xyz |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 3 identified
JavaScript library for building user interfaces with component-based architecture.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of vote-neptfinance.xyz · checked Apr 18, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive