eomf[.]deribitltd[.]cc
“Deribit”
Riepilogo delle prove
This domain, eomf.deribitltd.cc, is a confirmed brand impersonation phishing site targeting the cryptocurrency exchange brand Deribit, as indicated by the page title 'Deribit' and the scam classification in threat intelligence sources. Registered on December 10, 2025, through Gname.com Pte. Ltd., the domain resolved to IP 188.239.22.205, hosted on AS136907 (HUAWEI CLOUDS) in Singapore. Nameservers a4.share-dns.com and b4.share-dns.net were in use, a configuration often observed in low-reputation or bulletproof hosting environments. Analysis reveals the domain was flagged by 14 of 93 security vendors on VirusTotal, while Google Safe Browsing classified it as social engineering.
The domain appears on at least one security blocklist and was assigned a trust score of 0/100 by Gridinsoft. No SSL certificate was detected, increasing the likelihood of interception or user distrust. The domain was blocked by PhishDestroy and is currently offline as of the report date, though historical resolution and detection data remain relevant for retrospective threat hunting. Defenders should treat this domain as high-risk for Deribit brand impersonation, particularly in cryptocurrency-related phishing campaigns.
The infrastructure—hosting provider, nameservers, and lack of encryption—aligns with patterns used in credential harvesting or fraudulent transaction schemes. Network defenders are advised to block the domain, IP, and associated nameservers at perimeter controls. Security teams should review logs for connections to 188.239.22.205 or DNS queries for eomf.deribitltd.cc, particularly from endpoints involved in cryptocurrency transactions or financial operations. No further page content analysis is available; additional context may emerge from endpoint or proxy logs.
Data Coverage
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 10/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
-
VirusTotal
8 → 14
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo