dazzling-sunshine-2bc570[.]netlify[.]app
“Uphold | Login”
dazzling-sunshine-2bc570.netlify.app — Contenuto non disponibile. Tipo di truffa: Credential Phishing. Riepilogo delle prove: VirusTotal 21/94 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLQuery 3 alerts; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 100/100. Registrar: Netlify.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy identifies dazzling-sunshine-2bc570.netlify.app as an active crypto drainer, a high-risk phishing site designed to steal cryptocurrency funds by tricking users into connecting malicious wallet extensions or entering private keys on a fake login portal. This domain leverages Netlify’s hosting infrastructure to host deceptive pages mimicking legitimate crypto services, making it part of a growing trend in crypto-related social engineering campaigns. The scam is specifically engineered to drain digital assets from unsuspecting victims, with indicators pointing to automated fund transfers upon wallet connection or seed phrase submission. This domain was flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category and is blocked by 18 out of 95 VirusTotal security vendors, including multiple threat intelligence platforms specializing in cryptocurrency scams. It resolves to IP address 35.157.26.135, hosted on Netlify’s infrastructure, which is frequently exploited for fast-flux phishing operations due to its legitimate CDN capabilities. While the SSL certificate (issued by DigiCert Inc) appears legitimate at first glance, its presence does not validate the site’s intent—only the encryption channel. The domain’s recent creation and rapid deployment to evade detection further underscore its malicious nature. Mitigation for this crypto drainer threat requires immediate action: users should avoid accessing dazzling-sunshine-2bc570.netlify.app entirely. If any interaction occurred, disconnect the wallet from the browser, revoke any unintended approvals via blockchain explorers (e.g., Etherscan for Ethereum), and transfer remaining funds to a newly generated, secure wallet. Always verify crypto-related URLs through PhishDestroy or official project websites before entering credentials or connecting wallets. Enable hardware wallet signing and multi-factor authentication where possible, and educate users on recognizing fake login prompts and unsolicited wallet connection requests to prevent future exposure.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | dazzling-sunshine-2bc570.netlify.app |
malicious | Sinkholed |
| OpenDNS | dazzling-sunshine-2bc570.netlify.app |
phishing | Phishing Block |
| DNS4EU | dazzling-sunshine-2bc570.netlify.app |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 6 identified
Popular CSS framework for responsive, mobile-first web development.
Platform for deploying and hosting modern web applications.
Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of dazzling-sunshine-2bc570.netlify.app · checked Apr 1, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo