heaviescoin.com
“HEAVIES”
heaviescoin.com — Terselubung · dapat dijangkau (HTTP 200). Peniruan identitas merek: Unknown; Jenis penipuan: Crypto Drainer. Ringkasan bukti: VirusTotal 2/89 (Chong Lua Dao, Gridinsoft); cloaking observed; PhishDestroy score 86/100. Registrar: Porkbun.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
This report analyzes the domain heaviescoin.com, which is classified as a crypto drainer phishing threat. The domain is currently offline and remains under investigation. Analysis indicates the site impersonated the HEAVIES brand to deceive visitors into connecting cryptocurrency wallets, likely for asset theft.
Infrastructure analysis reveals heaviescoin.com was registered on August 28, 2025, through Porkbun LLC. The domain resolves to IP address 216.150.1.129 and employs technologies including Vercel and HSTS. VirusTotal shows 0 detections out of 95 vendors, meaning no security engines flagged the domain during scanning. GridinSoft assigns a trust score of 0 out of 100, and the domain appears on 1 security blocklist (PhishDestroy). The SSL certificate was issued by Let's Encrypt.
As of this report, heaviescoin.com is taken offline and blocked by PhishDestroy. Recommendations include monitoring for similar domains registered through Porkbun LLC and checking network logs for connections to IP 216.150.1.129. Users should avoid interacting with HEAVIES-branded sites not verified through official channels and enable browser-based phishing protections.
Intelijen Keamanan Jaringan
Forensic History & Detection Timeline
-
Domain Status Transition Sep 12, 2026 · 00:17 UTCDomain state transitioned from dead to alive.
-
Domain Status Transition Sep 11, 2026 · 00:26 UTCDomain state transitioned from alive to dead.
-
VirusTotal Detections Update Jun 27, 2026 · 05:36 UTCVirusTotal scanner detections updated from 1 to 0. Resolved alerts: Gridinsoft.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Evasion evidence
Cloaking confirmed: scanners and victims see different content
The page served one response to a browser-like visitor and another to a crawler or security scanner. Cloaking exists only to keep reviewers away from the real landing page.
- Stored cloaking flag
- Observed
- Jenis penyamaran
status_split- Skor penyamaran
- 1/6
- Last cloaking scan
- Server header seen by scanner
openresty
Scanner note: expired: raw=parked; http=200; via=https_proxy; server=openresty
Teknologi · 2 identified
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of heaviescoin.com · checked Jun 27, 2026
Laporan komunitas
Dilaporkan oleh 1 anggota komunitas; pertama terlihat 02/09/2025
- Laporan tersimpan
- 1
- URL unik yang dilaporkan
- 1
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive