whitewalletlist[.]top
“AML Check”
whitewalletlist.top — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Csgo; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 6/93 (ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker); URLQuery 3 alerts; URLScan malicious verdict; 3 external blocklist matches (Polkadot, Enkrypt, Codeesura); PhishDestroy score 95/100. Registrar: Web Commerce Communica….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, whitewalletlist.top, was observed actively serving a crypto‑scam page titled “AML Check” that pretends to be associated with the CS:GO brand. The domain was registered on 21 February 2026 through Web Commerce Communications Limited and points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution uses the Cloudflare nameservers hugh.ns.cloudflare.com and itzel.ns.cloudflare.com. No TLS certificate is presented, and the site returns no HTTPS response.
VirusTotal scans show six of ninety‑three security vendors flagging the domain as malicious, and the host is listed on four external blocklists. Commercial blocklist providers PhishDestroy, Polkadot, Enkrypt and Codeesura have also marked the domain as hostile. The infrastructure is currently offline, so active probing is not possible, but the historical evidence confirms a pattern of brand impersonation aimed at CS:GO users and a crypto‑draining campaign, as indicated by the “AML Check” page title and the classification as a crypto scam.
Uncertainty remains regarding the exact attack flow, such as whether credential harvesting or wallet address substitution was used, because the live page content has not been captured. Defenders should continue to block the domain at network perimeter and DNS layers, add 188.114.96.3 to IP‑based deny lists, and monitor for any re‑registration attempts or similar Cloudflare‑hosted domains that reference CS:GO or crypto‑related terminology. Threat intel feeds that reference the six VirusTotal detections and the four blocklist entries should be updated to reflect the confirmed malicious status of whitewalletlist.top.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260107-15060A Recipient: compliance_abuse@webnic.cc Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive