Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@dynadot.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
xn--guada-lp1b[.]com
“Guarda Wallet — Secure Multi-Currency Crypto Wallet | Official Website”
xn--guada-lp1b.com — Belum terverifikasi. Peniruan identitas merek: Across; Jenis penipuan: Wallet/seed Phishing. Ringkasan bukti: VirusTotal 13/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 4 alerts; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 93/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain xn--guada-lp1b.com was registered on March 11, 2026 through Dynadot LLC. It resolves to the IPv4 address 63.251.122.121, which is advertised as part of AS200220 operated by servinga GmbH in Spain. The authoritative name servers are ns1.fornex.com and ns2.fornex.com, and the domain’s MX record points to mail.xn--guada-lp1b.com with priority 10. The site presents an HTTPS endpoint secured by a Let’s Encrypt certificate (R13) and returns HTTP status code 200 on request. Infrastructure analysis shows the web server is running Nginx and serves client‑side scripts including jQuery. The page title reported by the crawler is “Guarda Wallet — Secure Multi-Currency Crypto Wallet | Official Website”, indicating an explicit claim of being the official Guarda Wallet site. This aligns with the listed scam type “seed_phish” and the broader classification of brand impersonation. No additional page content has been disclosed, so visual or functional characteristics remain unverified. Open‑source intelligence recorded the domain in two AlienVault OTX pulses, and VirusTotal aggregates indicate that 12 of 95 security vendors have flagged the domain as malicious. Independent blocklists have listed the domain on three separate watchlists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. The detection rate and the presence on multiple blocklists reinforce the high‑risk rating. Defenders should add xn--guada‑lp1b.com to DNS and proxy deny lists, and ensure that email filters reject any messages originating from its MX host. Continuous monitoring of outbound connections to the 63.251.122.121 address is advised, as is the application of URL filtering rules that block access to the domain. Incident response teams should treat any credential or wallet‑address submissions to this site as compromised and advise users to verify the authenticity of Guarda Wallet communications through official channels.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | xn--guada-lp1b.com |
malicious | Sinkholed |
| Hagezi Threat Feed | xn--guada-lp1b.com |
malicious | Sinkholed |
| DNS4EU | xn--guada-lp1b.com |
malicious | Sinkholed |
| OpenDNS | xn--guada-lp1b.com |
phishing | Phishing Block |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 2 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Keyakinan 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of xn--guada-lp1b.com · checked Mar 24, 2026
Bukti & Laporan Eksternal
PD-20260312-DBE287 Recipient: abuse@dynadot.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive