Keamanan domain dan intelijen ancaman

walletelectrum.com

Name: walletelectrum.com — PhishDestroy evidence record
Published: 2026-10-23
License: https://creativecommons.org/licenses/by/4.0/

Ringkasnya

walletelectrum.com: Phishing frasa pemulihan, terdeteksi oleh PhishDestroy pada 2026-10-23. Risiko: kritis (100/100). Registrar: INWX. Status: Terakhir diketahui aktif. Hosting: DigitalOcean, LLC. PhishDestroy mengirim 1 laporan penyalahgunaan. VirusTotal: 14/92 mesin menandainya. Jangan masukkan kredensial dan jangan hubungkan dompet.

“Wallet Electrum”

Review the evidence

Registrar: INWX
Resolved IP: 164.92.92.171
Registered: 10/08/2025

PhishDestroy assessment Kritis

100/100

Skor bukti

Ketersediaan Terakhir diketahui aktif Pengamatan keterjangkauan tersimpan terbaru Teramati Oct 24, 22:28 UTC· HTTP probe

Record details & risk signals

OTX: 4 refs 23/10/2026 1 Report Sent

Sinyal risiko

Deteksi Total Virus: 14/92 Daftar blokir yang disimpan cocok: 2 Label merek otomatis: Ledger

ABUSE NOTICE · 24H+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.

Notification and current-status evidence

The sent-report ledger records the first outgoing report at 2026-10-23 02:17:56 UTC. The recorded recipient is abuse@digitalocean.com. The latest stored availability evidence still shows the domain reachable; 44 hours has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report

44 hours

Laporan terkirim

Latest case ID

PD-20261023-40309B

Current status

HTTP 200 at latest stored check

Ringkasan laporan

Phishing frasa pemulihan: walletelectrum.com — Terakhir diketahui aktif (HTTP 200). Ringkasan bukti: VirusTotal 14/92 (alphaMountain.ai, Bfore.Ai PreCrime…

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Intelijen Keamanan Jaringan

Cloudflare Radar Verdict Berbahaya

Phishing

Analysis

PhishDestroy threat report2026-10-23 14:44:53 UTC

Overview

PhishDestroy’s automated assessment classifies walletelectrum.com as a seed‑phrase theft page. The recorded page title was “Wallet Electrum”. The domain first appeared in PhishDestroy’s feed on 2026-10-23 and returned an HTTP 200 response at that time.

How the scam works

In a seed‑phrase theft scheme the attacker presents a wallet‑like interface and asks the visitor to enter the recovery seed or private key. When the phrase is submitted the attacker can reconstruct the wallet and move any funds without further interaction.

Evidence

VirusTotal scanned the domain on 2026-10-22 and reported 13 malicious and 1 suspicious detections out of 92 engines. Flagging vendors included AlphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Chong Lua Dao, CyRadar, Emsisoft, Fortinet, G-Data, Lionic, Netcraft, Sophos and VIPRE. Google Safe Browsing showed no flag on 2026-10-23; urlscan.io gave a clean overall verdict on 2026-10-21 but its engine score marked the URL malicious (score 97). Cloudflare Radar flagged it as phishing on 2026-10-23, external blocklists MetaMask and SEAL listed it, PhishDestroy’s internal list includes it, and OTX cited four pulses.

Infrastructure

The domain was registered on 2025-08-10 through INWX GmbH. The recorded IP was 164.92.92.171, which belongs to DigitalOcean, LLC in the United States. TLS 1.3 was observed with a ZeroSSL certificate valid from 2026-08-23 to 2026-11-21, the web server identified itself as Apache, and the page loaded jQuery and prettyPhoto libraries; nameservers were ns1.dnsprotector.xyz and ns2.dnsprotector.xyz and DNSSEC was not enabled.

What to do

Anyone who entered a seed phrase on this site should treat the wallet as compromised, create a new wallet and transfer any assets, discarding the exposed phrase. Defenders should block connections to walletelectrum.com, add the domain to internal blocklists, and review access logs for related traffic.

Bukti sumberVirusTotal 14 / 92 · OTX 4 references 5 sources

Sumber	Result	Recorded · UTC	Evidence
VirusTotal	14 / 92 engine detections	2026-10-23 14:41 UTC	Buka laporan

URLQuery	2 det.		Buka laporan

Cloudflare Radar	Phishing	2026-10-23 02:41 UTC	Buka laporan

OTX	4 community references	2026-10-23 14:41 UTC	Buka laporan

URLScan	Tidak ada penanda berbahaya	2026-10-23 02:06 UTC	Buka laporan

Hasil mencerminkan waktu pengumpulan setiap sumber. Nol deteksi tidak menjamin keamanan. Referensi OTX adalah publikasi komunitas.

Pertanyaan tentang walletelectrum.com

Apakah walletelectrum.com sah?

Tidak. PhishDestroy mengklasifikasikan walletelectrum.com sebagai Phishing frasa pemulihan (risiko: kritis, 100/100); pertama kali terdeteksi pada 2026-10-23. VirusTotal: 14/92 mesin menandainya. Anggap situs ini tidak aman.

Apakah aman menghubungkan dompet ke walletelectrum.com?

Tidak. Jangan hubungkan dompet, menandatangani pesan, atau menyetujui token di walletelectrum.com. Situs phishing meminta persetujuan (approve, setApprovalForAll, Permit2) yang memungkinkan operator memindahkan aset Anda, dan transaksi yang sudah dikonfirmasi tidak dapat dibatalkan.

Apa yang harus saya lakukan jika pernah memakai walletelectrum.com?

Ganti setiap kata sandi yang Anda masukkan di sana dan aktifkan autentikasi dua faktor. Jika Anda menghubungkan dompet atau menandatangani sesuatu, cabut persetujuannya dan pindahkan dana yang tersisa ke dompet baru; jangan pernah membagikan frasa pemulihan. Bantuan langkah demi langkah: panduan darurat.

Jelajahi

Blocklist matchesMetaMask · PhishDestroy · SEAL 3

MetaMask Terdaftar Lihat sumber

PhishDestroy PhishDestroy list Lihat sumber

SEAL Terdaftar Lihat sumber

Terakhir diperiksa 2026-10-24 22:20:01 UTC

Tangkapan tersimpan · 11 tangkapan

Tangkapan layar walletelectrum.com — **Tangkapan utama**2026-10-23 02:06 UTC 1 / 11

SumberTangkapan utama

Recorded2026-10-23 02:06 UTC

StateTangkapan tersimpan

HTTP statusNot recorded for this capture

Final URLNot recorded for this capture

Position1 / 11

Buka tangkapan Wayback Unduh

Detail domain

Domain

URLScan verdict Analisis selesai score 0 report ↗

Reputasi IP abuse score 0/100 0 reports checked 23/10/2026

OTX tags 2026-10activeall-domainsblocklistcontentcryptodomaindrainerfraudlivemonthlyphishdestroyphishingscam

Registrar INWX

(IN)

Kontak penyalahgunaanabuse@digitalocean.com, abuse@domrobot.com, abuse@inwx.com

Pendaftar ICANNICANN Lookup (RDAP) →

Pencarian WHOISICANN RDAP untuk walletelectrum.com →

PendaftaranDibuat 10/08/2025 — Expires 10/08/2027

Status HTTP200

Detail teknisProvenance & timestamps

Pertama Kali Terdeteksi23/10/2026

DOM Analysisanalyzed 23/10/2026score 100/1003 brand signals

Submitted URLhttp://walletelectrum.com/

Favicon Hash

ID kasus

Observed page title

Wallet Electrum

Automated brand references

Across Ledger Trezor

Sertifikat TLS

Diterbitkan oleh ZeroSSL GmbH / ZeroSSL RSA DV SSL CA 2 · masa berlaku tersimpan berakhir dalam 28 hari

Jaringan & sertifikat

Bukti teknis tersimpan

Jaringan & DNS

Resolved IP: 164.92.92.171
ASN jaringan: AS14061
Organization: DigitalOcean, LLC
Observed location: Santa Clara, US
Server header: Apache

Server nama 2

ns1.dnsprotector.xyz
ns2.dnsprotector.xyz

Lokasi menggambarkan jaringan IP.

Sertifikat TLS

Issuer: ZeroSSL GmbH / ZeroSSL RSA DV SSL CA 2
Berlaku sejak: 2026-08-23 00:00:00
Berlaku hingga: 2026-11-21 23:59:59
Hostname coverage: Tanggal sertifikat tersimpan valid
Validity: Dalam rentang tanggal validitas tersimpan
Sumber pengumpulan: PhishDestroy collector

Sidik jari sertifikat

cb8b109b9db067029adeb434c08da3364a964b756bc4b53294f494defe45d7a7

Nama sertifikat · 2 SAN

walletelectrum.com
www.walletelectrum.com

Metadata sertifikat yang disimpan. Tanggal sertifikat tanpa zona waktu ditampilkan sebagaimana disimpan. Enkripsi transport tidak membuktikan bahwa situs tersebut tepercaya.

viewdns.info · 164.92.92.171 rapiddns.io

Latest Classified Outcome 2026-10-24 10:30:53 UTC

Primary outcome Konten aktif reason: Ordinary HTTP content served 90% confidence

Attribution source: Current Http Probe

Evidence layers Availability: Content serving Content: Content served at root DNS: Resolved Registration: Unknown

Latest HTTP observation Konten aktif Ordinary HTTP content served 90% 2026-10-24 10:30:53 UTC

RDAP registration Tidak diketahui

Observed timeline last reachable: 2026-10-24 10:30:53 UTC last content: 2026-10-24 10:30:53 UTC

Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.

Recorded subdomains1

Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.

www.walletelectrum.comDomain record

The original observation time is not recorded for these hostnames.

Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

14 / Vendor keamanan 92 menandai domain ini

Lihat di VT

Terakhir dianalisis 2026-10-23 14:41:03 UTC First positive detection 2026-10-23 02:40:24 UTC Snapshot tersimpan sebelumnya: 14 detections

alphaMountain.ai

Bfore.Ai PreCrime

BitDefender

Chong Lua Dao

CyRadar

ESET

Emsisoft

Fortinet

G-Data

Lionic

Netcraft

Sophos

VIPRE

Webroot

Bukti Terarsip

Wayback Machine Snapshot

Oct 23, 2026 · 01:42 UTC

Lihat arsip

Analisis Performa Situs

Google PageSpeed Insights — audit performa seluler untuk walletelectrum.com · checked Oct 23, 2026

Good

Performance

FCP

1.23 s

First Contentful Paint

LCP

1.5 s

Largest Contentful Paint

CLS

Cumulative Layout Shift

TBT

0 ms

Total Blocking Time

3.31 s

Speed Index

Didukung oleh Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Bukti tangkapan tersimpan 1 snapshot

Metadata respons bertanda waktu yang disimpan oleh pipeline pengumpulan lokal. Setiap nilai di bawah ini berlaku untuk waktu arsip yang ditampilkan.

Archived HTTP response HTTP 200

Requested URL: http://walletelectrum.com/

Crypto Wallet Electrum | Secure Bitcoin Wallet

Crypto wallet Electrum is a lightweight Bitcoin wallet for secure BTC management, fast access, private key control, hardware wallets, and flexible self-custody.

Respons
HTTP 200

HTML body
14.4 KB

Compressed
3.5 KB

Links
7 internal · 2 external

Detected technologies

jquerynginx

Selected response headers

Server: nginx/1.24.0 (Ubuntu)

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

HSTS: tidak teramati DNSSEC: tidak teramati WAF / firewall: not observed Penanda cloaking: tidak teramati

Favicon fingerprint: b9a107d0716183fd98439b93a93643856b7774342f36cf9afcd6a83419c6f38d

Saved response-header values · 9

Connection: keep-alive
Content-Encoding: gzip
Content-Length: 3549
Content-Type: text/html; charset=UTF-8
Date: Fri, 23 Oct 2026 01:45:15 GMT
Server: nginx/1.24.0 (Ubuntu)
Upgrade: h2
Vary: Accept-Encoding
X-Cache-Status: HIT

Nilai yang disimpan oleh kolektor; nilai yang panjang dapat dipersingkat saat pengumpulan.

Registration & observation details3

Availability observations

Pengamatan terakhir saat situs dapat dijangkau: 2026-10-24 10:30:53 UTC
Pengamatan konten terakhir: 2026-10-24 10:30:53 UTC
Estimate basis: Currently reachable

Waktu perkiraan menggambarkan rentang pengamatan. Waktu ini tidak membuktikan tindakan registrar atau saat pasti situs menjadi tidak tersedia.

Detail sumber yang dikumpulkan

Pengamatan halaman, jaringan, dan pemindai yang tersimpan, dikelompokkan berdasarkan sumber dan waktu pengamatan.

Every stored field, with its source and date

URLScan · 2026-10-23T02:04:30Z

Teramati: 2026-10-23T02:04:30Z · Retrieved: 2026-10-23T02:48:48Z

Uuid	01a16680-8e4f-72c2-8ce6-f4951c819c49
Final url	https://walletelectrum.com/
Status	200
Dialihkan	https-only
Redirects	[ { "to": "https://walletelectrum.com/", "from": "http://walletelectrum.com/", "status": 307 } ]
Ip	164.92.92.171
Ptr	edge01.dnsprotector.xyz
Contacted IP addresses	[ "164.92.92.171" ]
Asns	[ "14061" ]
Countries	[ "US" ]
Linked domains	[ "github.com", "twitter.com" ]
Social	[ "https://github.com/spesmilo/electrum", "https://twitter.com/ElectrumWallet" ]
Document hash	fa94db2be89f560da95e8a83e0cb3c501563b091fc579d568f7f46e93844c493
Script hashes	[ "88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd", "1cd02bdd539cb152085e4e1583428bcb06c8128a9ec912195f8a42ed8179804f", "340277869a89746ff06a46d7a773d8b87708a32da1669635ddafec18aaea1ed3", "2ba539e4613c4c42f91845d6a05e44f8c93ec4936711b05cffae8a4f92c8a652", "bb7cd75130058d4e9f6226a758f9671c9a2d4d061760a78c822b997ceeb25f35", "6967ea3008cb1a82beafedfd1cc2871c3cdd4c5b4de87b97c5ee6c4f8a6aa942", "443e5dd56c9d7e9410ad662dcefbe078bf42dcb46eada4416cb7eb05d386f5c3" ]
Globals	[ "$", "jQuery", "pp_alreadyInitialized", "QRCode" ]
Tls	{ "san": [ "walletelectrum.com", "www.walletelectrum.com" ], "cipher": "AES_256_GCM", "issuer": "ZeroSSL RSA DV SSL CA 2", "subject": "walletelectrum.com", "protocol": "TLS 1.3", "valid_to": "2026-11-21T23:59:59Z", "valid_from": "2026-08-23T00:00:00Z" }
Usia domain (hari)	2361
Apex age days	2361
Tls age days	61
Masa berlaku TLS (hari)	90
Requests	27
Provider verdicts	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }
HTTP headers	{ "server": "Apache", "content-type": "text/html; charset=UTF-8" }

Cloudflare Radar · 2026-10-23T02:41:18Z

Teramati: 2026-10-23T02:41:18Z · Retrieved: 2026-10-23T02:48:49Z

Uuid	ba229517-efa9-4844-85f5-7cce78ef90a3
Final url	https://walletelectrum.com/
History	[ { "url": "https://walletelectrum.com/", "status": 0 } ]
DOM structure hash	f7a48cc844a2898cdb50aa55394e2633ea45e5ef13dc1aed1292ed349b65d815
Url risks	[ "Phishing" ]
Radar rank	{ "bucket": ">200000" }
Catatan DNS	[ { "name": "walletelectrum.com", "type": "A", "value": "164.92.92.171" } ]
DNSSEC valid	false
Verdict	{ "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] }
Catatan pendaftaran	{ "registrar": "INWX GmbH", "created": "2025-08-10T17:54:59Z", "updated": "2026-08-23T23:00:43Z", "expires": "2027-08-10T17:54:59Z", "nameservers": [ "ns1.dnsprotector.xyz", "ns2.dnsprotector.xyz" ] }

VirusTotal · 2026-10-22T11:12:16Z

Teramati: 2026-10-22T11:12:16Z · Retrieved: 2026-10-23T14:40:53Z

Vendor result counts	{ "timeout": 0, "harmless": 45, "malicious": 13, "suspicious": 1, "undetected": 33 }
Vendor labels	{ "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "malicious", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Emsisoft": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Bfore.Ai PreCrime": "malicious" }
Reputation	0
Categories	{ "alphaMountain.ai": "Phishing (alphaMountain.ai)" }
Registrar	INWX GmbH
Dibuat	2025-08-10T17:54:59Z
Expires	2027-08-10T17:54:59Z
Updated	2026-08-23T23:00:43Z
Pertama terlihat	2025-08-12T16:04:54Z
Catatan DNS	[ { "ttl": 3600, "type": "NS", "value": "ns2.dnsprotector.xyz" }, { "ttl": 3600, "type": "NS", "value": "ns1.dnsprotector.xyz" }, { "ttl": 300, "type": "A", "value": "164.92.92.171" }, { "ttl": 3600, "type": "SOA", "rname": "hostmaster.walletelectrum.com", "value": "a.misconfigured.dns.server.invalid" } ]
Dns at	2026-10-22T11:12:37Z
Jarm	3fd3fd16d3fd3fd21c42d42d000000a8d52b2e606af78e33e5cbcbcdeb78a6
Certificate	{ "san": [ "walletelectrum.com", "www.walletelectrum.com" ], "issuer": "ZeroSSL GmbH / ZeroSSL RSA DV SSL CA 2", "serial": "4ddd603a2e7ad86b84002809ebdbeca9", "sha256": "cb8b109b9db067029adeb434c08da3364a964b756bc4b53294f494defe45d7a7", "subject": "walletelectrum.com", "valid_to": "2026-11-21T23:59:59Z", "valid_from": "2026-08-23T00:00:00Z" }
Catatan pendaftaran	{ "registrar": "INWX GmbH", "registrar_iana_id": "1420", "registrar_url": "http://www.inwx.com", "created": "2025-08-10T17:54:59Z", "updated": "2026-08-23T23:00:43Z", "expires": "2027-08-10T17:54:59Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dnsprotector.xyz", "ns2.dnsprotector.xyz" ], "dnssec": "unsigned" }
Registry data	{ "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-08-23T23:00:43Z", "registration": "2025-08-10T17:54:59Z", "registrar expiration": "2027-08-10T17:54:59Z", "last update of RDAP database": "2026-10-22T11:12:37Z" } }

Website checks · 2026-10-23T02:49:03Z

Mail configuration	{ "spf_lookups": 0 }
Catatan CAA	{ "domain": "walletelectrum.com" }
Protective DNS results	{ "resolvers": 12, "blocked_count": 0 }
Web archive observations	{ "last": "2026-10-23T01:42:09Z", "first": "2020-05-06T03:56:59Z", "changes": 1, "days_archived": 2, "scans_per_day": 0, "avg_page_bytes": 4036 }
Trackers	{ "requests": 26 }
TLS connection	{ "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": false, "forward_secrecy": true }
Ports	{ "open": [ 22, 53, 80, 443 ] }
Dns server	{ "ns": [ { "ip": "164.92.92.171", "host": "ns2.dnsprotector.xyz" }, { "ip": "164.92.92.171", "host": "ns1.dnsprotector.xyz" } ], "zone": "walletelectrum.com" }
Location	{ "ip": "164.92.92.171", "asn": "14061", "org": "DigitalOcean, LLC", "city": "Santa Clara", "country": "US" }
Ssl	{ "issuer": "ZeroSSL GmbH / ZeroSSL RSA DV SSL CA 2", "subject": "walletelectrum.com" }
Catatan DNS	{ "A": [ "164.92.92.171" ], "NS": [ "ns1.dnsprotector.xyz", "ns2.dnsprotector.xyz" ], "SOA": "{\"nsname\": \"a.misconfigured.dns.server.invalid\", \"hostmaster\": \"hostmaster.walletelectrum.com\", \"serial\": 2026082304, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3600}" }
Dnssec	{ "ds": false, "rrsig": false, "dnskey": false }
Get ip	{ "ip": "164.92.92.171", "family": 4 }
Subdomain	{ "count": 1, "subdomains": [ "www.walletelectrum.com" ] }
Tech stack	{ "technologies": [ "Apache HTTP Server", "prettyPhoto", "jQuery" ] }
Catatan pendaftaran	{ "registrar": "INWX GmbH", "created": "2025-08-10T17:54:59Z", "updated": "2026-08-23T23:00:43Z", "expires": "2027-08-10T17:54:59Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dnsprotector.xyz", "ns2.dnsprotector.xyz" ] }

Riwayat pengamatan tersimpan3

Perubahan bertanggal yang disimpan oleh pemantau dan kolektor sumber. Pengamatan terbaru ditampilkan lebih dulu; status sumber bukan bukti bahwa situs telah diturunkan.

2026-10-24 10:30:53 UTC
Pemantau ketersediaan · Status tercatat
Tidak diketahui→live_content

content_served
2026-10-23 10:34:09 UTC
Pemantau ketersediaan · Status tercatat
Tidak diketahui→live_content

content_served
2026-10-23 02:06:07 UTC
Pemantau ketersediaan · Catatan pengumpulan pertama
Dapat dijangkau

Aktivitas tercatat

7 entries

AlienVault OTX
4 community references
Lihat sumber
2026-10-23 14:41:37 UTC
VirusTotal
14/92 engine detections
Lihat sumber
2026-10-23 14:41:03 UTC
Cloudflare Radar
Phishing
Lihat sumber
2026-10-23 02:41:18 UTC
Laporan penyalahgunaan terkirim
PD-20261023-40309B

abuse@digitalocean.com

2026-10-23 02:17:56 UTC
Ditambahkan ke PhishDestroy
walletelectrum.com
Lihat sumber
2026-10-23 02:06:07 UTC
URLScan
Page captured
Lihat sumber
2026-10-23 02:06:07 UTC
Wayback Machine
Page archived
Lihat sumber
2026-10-23 01:42:09 UTC

Domain serupa

151 domain serupa tersimpan

ledfger.com insertion Laporan internal ledgfer.com insertion Laporan internal ledgher.com insertion Laporan internal ledgrr.com replacement Laporan internal lefdger.com insertion Laporan internal lesdger.com insertion Laporan internal lkedger.com insertion Laporan internal lredger.com insertion Laporan internal lwedger.com insertion Laporan internal xn--ledgr-9za.com homoglyph Laporan internal ledgerk.com addition Laporan internal edger.com omission

Tampilkan semua (88)

eldger.com transposition kedger.com replacement kledger.com insertion l3dger.com replacement ldeger.com transposition ldger.com omission le.dger.com subdomain lecger.com replacement ledber.com replacement ledegr.com transposition leder.com omission ledg3r.com replacement ledge.com omission ledged.com replacement ledgedr.com insertion ledgee.com replacement ledgeer.com repetition ledgercom.com various ledget.com replacement ledgewr.com insertion ledgger.com repetition ledgir.com vowel-swap ledgor.com vowel-swap ledgr.com omission ledgre.com transposition ledgrer.com insertion ledgsr.com replacement ledgwer.com insertion ledgwr.com replacement ledher.com replacement ledhger.com insertion ledsger.com insertion ledtger.com insertion ledyer.com replacement ledzer.com replacement leedger.com insertion legder.com transposition leger.com omission lerdger.com insertion lerger.com replacement lesger.com replacement lewdger.com insertion lidger.com vowel-swap lledger.com repetition lodger.com vowel-swap lrdger.com replacement lsdger.com replacement oedger.com replacement pedger.com replacement pledger.com insertion dedger.com bitsquatting hedger.com bitsquatting iedger.com homoglyph l-edger.com hyphenation ladger.com bitsquatting lcdlger.com homoglyph lddger.com bitsquatting lebger.com homoglyph leclger.com homoglyph ledcer.com bitsquatting leddger.com insertion ledeer.com bitsquatting ledeger.com insertion ledfer.com bitsquatting ledg-er.com hyphenation ledgar.com bitsquatting ledger0.com addition ledger1.com addition ledger4.com addition ledger5.com addition ledger6.com addition ledgerb.com addition ledgerc.com addition ledgerf.com addition ledgeri.com addition ledgern.com addition ledgerq.com addition ledgerx.com addition ledges.com bitsquatting ledgez.com bitsquatting ledgur.com bitsquatting lediger.com homoglyph ledqer.com homoglyph leeger.com bitsquatting leelger.com homoglyph lefger.com bitsquatting letger.com bitsquatting ludger.com bitsquatting

Menampilkan 100 dari 151

Infrastruktur dan Laporan Terkait

Peta infrastruktur · walletelectrum.com

Favicon sama Tautan langsung 2
- electrume.at 17 VT · 06/07/2026
- cryptowalletelectrum.com 1 VT · 23/10/2026
IP sama 164.92.92.171 Sinyal pendukung 1
- cryptowalletelectrum.com 1 VT · 23/10/2026
Label merek: Ledger Sinyal pendukung 8
- home-ledgrreliveapp.typedream.app 24 VT · 06/10/2026
- portal-liv-e-ap-p-ledger.typedream.app 24 VT · 12/07/2026
- en-ledgerlive.vercel.app 23 VT · 17/12/2025
Registrar: INWX Hanya untuk penemuan 6
- cryptowalletelectrum.com 1 VT · 23/10/2026
- rainbet-hungary.net 14 VT · 14/10/2026
- minihungary.eu 12 VT · 12/10/2026

Tautan langsung — Domain yang dapat didaftarkan, file favicon, atau kit phishing yang sama.
Sinyal pendukung — Berbagi infrastruktur atau merek sasaran; bukan bukti adanya satu operator.
Hanya untuk penemuan — Registrar atau edge CDN yang sama: ditampilkan untuk navigasi, bukan bukti keterkaitan.

Setiap jalur merupakan salah satu alasan mengapa sebuah domain terhubung ke host ini. Ukuran node menandai deteksi VirusTotal, sedangkan node bergaris putus-putus menunjukkan bahwa node tersebut sudah offline. Daftar lengkapnya tercantum di bawah ini. Daftar lengkap laporan terkait

Domain	Relationship	Recorded	Record
electrume.at	Konten cocokfavicon	2026-07-06 12:18:13 UTC	All fields Domain electrume.at Vt detections 17 Detected at 2026-07-06 14:18:13 Status enriched Favicon url https://og.phishdestroy.io/favicons/96fdc7d88df05e8efecc44a5f051df74.png Favicon hash 96fdc7d88df05e8efecc44a5f051df74 Match type favicon
cryptowalletelectrum.com	Konten cocokfavicon	2026-10-23 01:34:49 UTC	All fields Domain cryptowalletelectrum.com Vt detections 1 Detected at 2026-10-23 03:34:49 Status enriched Favicon url https://og.phishdestroy.io/favicons/96fdc7d88df05e8efecc44a5f051df74.png Favicon hash 96fdc7d88df05e8efecc44a5f051df74 Match type favicon
cryptowalletelectrum.com	Same IP	2026-10-23 01:34:49 UTC	All fields Domain cryptowalletelectrum.com Vt detections 1 Detected at 2026-10-23 03:34:49 Favicon url https://og.phishdestroy.io/favicons/96fdc7d88df05e8efecc44a5f051df74.png Favicon hash 96fdc7d88df05e8efecc44a5f051df74
home-ledgrreliveapp.typedream.app	Same automated brand label	2026-10-06 21:09:27 UTC	All fields Domain home-ledgrreliveapp.typedream.app Vt detections 24 Detected at 2026-10-06 23:09:27 Favicon url https://og.phishdestroy.io/favicons/9af1511d8580dd210e47c33a74a00354.jpg Favicon hash 9af1511d8580dd210e47c33a74a00354 Drainer type bersih
portal-liv-e-ap-p-ledger.typedream.app	Same automated brand label	2026-07-12 12:24:09 UTC	All fields Domain portal-liv-e-ap-p-ledger.typedream.app Vt detections 24 Detected at 2026-07-12 14:24:09 Favicon url https://og.phishdestroy.io/favicons/c213d299a2638391440eff20c8cf0b8f.svg Favicon hash c213d299a2638391440eff20c8cf0b8f Drainer type bersih
en-ledgerlive.vercel.app	Same automated brand label	2025-12-17 19:54:44 UTC	All fields Domain en-ledgerlive.vercel.app Vt detections 23 Detected at 2025-12-17 20:54:44 Drainer type bersih
ledger.com.af	Same automated brand label	2026-02-07 10:48:59 UTC	All fields Domain ledger.com.af Vt detections 23 Detected at 2026-02-07 11:48:59
ledger.recovery.5930217.com	Same automated brand label	2025-12-07 14:12:37 UTC	All fields Domain ledger.recovery.5930217.com Vt detections 23 Detected at 2025-12-07 15:12:37 Drainer type bersih
ledgerglobai.com	Same automated brand label	2026-02-07 10:50:58 UTC	All fields Domain ledgerglobai.com Vt detections 23 Detected at 2026-02-07 11:50:58
liveassethelpdesk.com	Same automated brand label	2026-04-09 02:04:05 UTC	All fields Domain liveassethelpdesk.com Vt detections 23 Detected at 2026-04-09 04:04:05 Drainer type bersih
begin-ledger-support.typedream.app	Same automated brand label	2026-07-12 11:24:15 UTC	All fields Domain begin-ledger-support.typedream.app Vt detections 22 Detected at 2026-07-12 13:24:15 Favicon url https://og.phishdestroy.io/favicons/c213d299a2638391440eff20c8cf0b8f.svg Favicon hash c213d299a2638391440eff20c8cf0b8f Drainer type bersih
cryptowalletelectrum.com	Registrar yang sama	2026-10-23 01:34:49 UTC	All fields Domain cryptowalletelectrum.com Vt detections 1 Detected at 2026-10-23 03:34:49 Favicon url https://og.phishdestroy.io/favicons/96fdc7d88df05e8efecc44a5f051df74.png Favicon hash 96fdc7d88df05e8efecc44a5f051df74
rainbet-hungary.net	Registrar yang sama	2026-10-14 19:56:36 UTC	All fields Domain rainbet-hungary.net Vt detections 14 Detected at 2026-10-14 21:56:36 Favicon url https://og.phishdestroy.io/favicons/dc49662909e43895a0e41f0fcb71d950.png Favicon hash dc49662909e43895a0e41f0fcb71d950
minihungary.eu	Registrar yang sama	2026-10-12 21:34:39 UTC	All fields Domain minihungary.eu Vt detections 12 Detected at 2026-10-12 23:34:39 Favicon url https://og.phishdestroy.io/favicons/ea17313e8a98dfdf5431a2cec8fb0036.webp Favicon hash ea17313e8a98dfdf5431a2cec8fb0036
traderoomers.com	Registrar yang sama	2026-10-11 12:51:58 UTC	All fields Domain traderoomers.com Vt detections 6 Detected at 2026-10-11 14:51:58 Favicon url https://og.phishdestroy.io/favicons/c213d299a2638391440eff20c8cf0b8f.svg Favicon hash c213d299a2638391440eff20c8cf0b8f
pastefy.app	Registrar yang sama	2026-10-11 12:24:03 UTC	All fields Domain pastefy.app Vt detections 14 Detected at 2026-10-11 14:24:03 Favicon url https://og.phishdestroy.io/favicons/1357c94178c50badaa1ef1532bfd5121.ico Favicon hash 1357c94178c50badaa1ef1532bfd5121
chainsecurity.eu	Registrar yang sama	2026-10-08 00:15:54 UTC	All fields Domain chainsecurity.eu Vt detections 3 Detected at 2026-10-08 02:15:54 Favicon url https://og.phishdestroy.io/favicons/c213d299a2638391440eff20c8cf0b8f.svg Favicon hash c213d299a2638391440eff20c8cf0b8f

Relationship context and original groups

Periksa cloaking

Bandingkan apa yang diterima browser dan crawler, serta periksa perutean trafik Keitaro.

walletelectrum.com

Bukti & Laporan Eksternal

Analisis Keamanan

URLScan Analyzed VirusTotal 14 det. ChainPatrol URLQuery 2 det. SSL Laboratorium Tanggal sertifikat tersimpan valid CF Radar Berbahaya OTX 4 refs WOT ScamAdviser Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN

Snapshot bukti yang dikirim

Sent: 2026-10-23 02:17:56 UTC Catatan buku besar: 1 Case ID: PD-20261023-40309B Recipient: abuse@digitalocean.com

Judul halaman yang disimpan bersama laporan: Wallet Electrum

Bukti URLScan Bukti VirusTotal Bukti URLQuery Screenshot 163.7 KB

PDF notice generated Notice text archived (330 chars)

Teks pemberitahuan penyalahgunaan sebagaimana dikirim ke penyedia

Registrar: INWX GmbH & Co. KG (Germany)
Policy Violations: “Acceptable Use Policy prohibits phishing, identity fraud, malware and other illegal activities; registrar reserves the right to disable DNS or revoke domains used for abuse.”
Applicable Laws: German StGB §§202a–c; §263; EU Directive 2013/40/EU; ICANN DNS Abuse Framework

OSINT & Intelijen

Web-Check Full scan SOCRadar Laporan dark web LeakIX Leak search Shodan Censys ThreatFox Batu Hudson Pencarian kredensial login IntelX crt.sh Sertifikat WHOIS Wayback 2026-10-23

DNS & Jaringan

nslookup.io DNS bgp.tools ASN /Rute

SEO & domain

SpyFu Moz DA/PA Ahrefs Tautan balik

Analisis Mendalam

Help & reporting

Apakah Anda Terpengaruh oleh Situs Ini?

6 kelompok sinyal bukti tertaut 1 catatan notifikasi tersimpan Terakhir diketahui aktif

Jika kredensial telah dibobol, segera laporkan. Jangan berurusan dengan penipu yang mengaku dapat memulihkan dana.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Immediate steps Find reporting contacts

Official reporting routes

FBI IC3

Laporkan kejahatan yang dimungkinkan oleh internet di Amerika Serikat

IC3 does not accept attachments. Keep original evidence for investigators. IC3 guidance

Federal tips line1-800-CALL-FBI

Laporkan secara online

Europol

Temukan saluran pelaporan resmi untuk negara UE Anda

National police directory

Find your country

Action Fraud

Laporkan penipuan dan kejahatan dunia maya di Inggris, Wales, dan Irlandia Utara

Current service: Report Fraud. England, Wales and Northern Ireland. Scotland: 101.

Contact centre0300 123 2040

Laporkan secara online

PhishDestroy listing review Bukan laporan penegakan hukum

Banding atas Nama Domain

Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah

Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara

Template-based draft · optional AI wording assistance requires separate consent

Draf yang dibantu AI — detail insiden diproses oleh penyedia AI · Tinjau dan kirimkan sendiri

After a phishing incident

Rekomendasi & Saran bagi Para Korban

Pilih langkah yang sesuai dengan informasi yang Anda bagikan. Simpan salinan laporan ini bersama catatan Anda sendiri.

Apa yang harus saya lakukan segera?

Mendesak

Berhenti menggunakan situs yang mencurigakan. Buka layanan yang asli melalui aplikasi resminya atau alamat yang sudah Anda percayai.

Ubah semua kata sandi — email, akun Exchange, apa pun yang menggunakan kata sandi yang sama
Aktifkan 2FA menggunakan aplikasi otentikator (bukan SMS). Nonaktifkan pemulihan berbasis SMS
Kartu pembeku jika Anda telah memasukkan detail perbankan di situs phishing tersebut

Informasi apa saja yang sebaiknya saya kumpulkan untuk laporan saya?

Pedoman FBI

Simpan email, tanda terima, pesan, dan tangkapan layar asli di tempat yang aman. Kronologi faktual membantu otoritas penerima memahami apa yang terjadi. IC3 evidence guidance ↗

Bukti pembayaran — jika Anda telah membayar, simpan tanda terima, jumlah, tanggal, penyedia pembayaran, dan detail penerima.
Tanggal dan waktu yang tepat — dari setiap transaksi dan kontak pertama dengan penipu
Tangkapan layar — situs web penipuan, pesan obrolan, email, transaksi dompet digital, media sosial
Semua URL & domain digunakan oleh penipu (termasuk walletelectrum.com)
Komunikasi — email, pesan teks, nomor telepon, dan nama pengguna yang digunakan oleh penipu tersebut

Meskipun kamu belum mengetahui semua detailnya — tetap saja ajukan laporan. Informasi yang tidak lengkap tetap dapat membantu penyelidikan.

Ke mana saya harus melaporkan penipuan ini?

FBI IC3 — Pusat Pengaduan Kejahatan Internet (Laporan tingkat federal AS)
Europol — Pelaporan kejahatan siber di Eropa (UE)
Your bank or payment provider — segera hubungi tim penanganan penipuannya melalui kontak resmi jika uang atau informasi kartu Anda terekspos.
Polisi setempat — membuat catatan resmi, meskipun mereka tidak dapat bertindak segera

Laporan tidak menjamin dana akan kembali atau kasus akan diselidiki, tetapi data transaksi yang akurat dan segera disampaikan dapat membantu pihak berwenang dan penyedia layanan melacak insiden tersebut.

How do phishing scams typically work?

Situs web palsu — salinan yang persis sama dengan situs asli, dengan domain yang sedikit diubah
Pemotongan babi — kepercayaan yang dibangun selama beberapa minggu melalui Telegram/WhatsApp/aplikasi kencan, lalu uangnya dicuri
Penipuan pemulihan — penipu menyamar sebagai agen pemulihan dan meminta biaya di muka. Jangan pernah membagikan frasa pemulihan atau membayar sebelum memverifikasi penyedia secara independen
Penipuan yang didukung oleh kecerdasan buatan — deepfakes, serangan phishing otomatis, dan situs yang dihasilkan oleh kecerdasan buatan (AI) yang membuat penipuan semakin sulit dideteksi

Bagaimana cara saya melindungi diri di masa depan?

Tandai situs resmi — jangan pernah mengklik tautan dari email, pesan langsung (DM), atau iklan
Memverifikasi domain — periksa PhishDestroy Sebelum berinteraksi. Periksa HTTPS, ejaan, dan usia domain
"Terlalu bagus untuk jadi kenyataan" = penipuan — imbal hasil yang dijamin, dukungan dari selebriti, tenggat waktu yang mendesak

Further guidance: NIST · phishing response FBI IC3 · reports & evidence FTC · recovery scams

Periksa Domain Apa Pun

Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik

Pindai Sekarang

Laporkan Phishing

Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas

Laporan

Pemberitahuan Ancaman Real-Time

Laporan phishing terbaru dan perubahan ketersediaan yang diamati

Pantau

Tetap Terinformasi, Tetap Aman

Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive

Pemberitahuan Ancaman Real-Time Ajukan Banding Terhadap Iklan Ini

Tentang laporan iniSumber, tanggal pengamatan, dan koreksi

Laporan ini menggabungkan tangkapan halaman yang disimpan, catatan pendaftaran dan jaringan, hasil pemindai, serta riwayat pelaporan PhishDestroy. Setiap sumber menyimpan tanggal pengamatannya sendiri. Buka laporan sumber untuk memeriksa hasil aslinya.

Analisis berbantuan AI ditulis pada 2026-10-23 14:44:53 UTC. Analisis ini menggambarkan bukti yang tersedia saat itu; hasil pemeriksaan sumber berikutnya dapat berbeda.

Tangkapan mendokumentasikan apa yang ditampilkan. Hasil pemindai mencatat penilaian penyedia tersebut pada saat pemeriksaan. Baik sertifikat yang valid maupun hasil tanpa deteksi tidak menjamin keamanan.

Request a correction or appeal How PhishDestroy works

Sematkan laporan iniWidget ringkas dengan tautan ke bukti

HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html

<iframe
  src="https://phishdestroy.io/id/embed/domain/walletelectrum.com"
  title="PhishDestroy threat report for walletelectrum.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>