MALICIOUS — CRITICAL
Verifica phishing e sicurezza per cryptip.me
cryptip[.]
This domain, cryptip.me, is flagged as a high-risk phishing site targeting cryptocurrency users.
- VirusTotal
- 7/91
- Blocklists
- No stored match
- Disponibilità
- Ammantato · raggiungibile · HTTP 307
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
cryptip.me — Ammantato · raggiungibile (HTTP 307). Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 7/91 (ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, CRDF, Gridinsoft); URLQuery 1 alert; cloaking observed; PhishDestroy score 93/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
This domain, cryptip.me, is flagged as a high-risk phishing site targeting cryptocurrency users. Registered on March 26, 2026, through Cloudflare, it resolves to the IP address 216.198.79.1, hosted under Lefkoff Industries in the United States. Infrastructure analysis reveals the use of Node.js, React, Vercel, Next.js, and Webpack, alongside HSTS enforcement and a Let's Encrypt SSL certificate (R12). The domain's page title, 'CRYPTIP - Accept crypto tips and build a community,' suggests it impersonates a legitimate crypto tipping or community-building platform, though no specific brand is confirmed in available data. The domain is currently active, returning an HTTP 307 redirect status, and is blocked by at least one security vendor (PhishDestroy). It appears on one security blocklist, and one of 94 security vendors on VirusTotal flags it as malicious. Nameservers are hosted under Cloudflare (tanner.ns.cloudflare.com and tia.ns.cloudflare.com). The Gridinsoft trust score of 0/100 further indicates high suspicion. While the domain's infrastructure and hosting choices are consistent with legitimate services, the combination of a recent registration, low detection but active blocking, and the crypto-focused theme aligns with known phishing tactics. Defenders should treat this domain as malicious, monitor for related indicators, and consider blocking or sinkholing the IP and domain to prevent potential credential theft or fraudulent transactions. The exact content and functionality of the site remain unanalyzed, but the available evidence supports a high-risk classification.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | www.cryptip.me |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 6 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
Cloud platform for frontend deployment, optimized for Next.js.
React framework for production with hybrid static and server rendering.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Module bundler for modern JavaScript applications.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of cryptip.me · checked Mar 26, 2026
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.