MALICIOUS — CRITICAL
equilibriumreward.com Safety Check — Crypto Drainer Detected
equilibriumreward[.]
PhishDestroy identifies equilibriumreward.com as a live crypto drainer page masquerading as Equilibrium Games’ reward portal.
- VirusTotal
- 2/92
- Blocklists
- 3 · MetaMask, ScamSniffer
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
equilibriumreward.com — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Equilibrium; Tipo di truffa: Fake Airdrop. Riepilogo delle prove: VirusTotal 2/92 (Ermes); URLQuery 1 alert; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 74/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
PhishDestroy identifies equilibriumreward.com as a live crypto drainer page masquerading as Equilibrium Games’ reward portal. The site lures victims with a fake claim page titled 'Claim Your $EQ Tokens | Equilibrium Games Reward Allocation,' prompting wallet connections and token approvals designed to drain crypto assets. This is a classic crypto-drainer operation using brand impersonation to harvest private keys and approval signatures.
This domain was flagged by VirusTotal with a detection ratio of 1 out of 95 security vendors as of the latest scan. It resolves to IP 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 03, 2026. The SSL certificate is issued by Let's Encrypt, which is commonly abused due to low validation barriers. Google Safe Browsing (GSB) has not yet blacklisted this domain, and there are no public blocklist entries in known threat intelligence feeds at this time.
As of the most recent check, equilibriumreward.com remains active and is actively serving the malicious page. Immediate action is required: block the domain at DNS and network levels, warn users who may have visited the site, and revoke any wallet approvals made on this page. Remaining risk is high due to ongoing availability, low detection by vendors, and active lure content targeting cryptocurrency users.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | equilibriumreward.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 03:53:45 UTC
Tecnologie · 4 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterneIndependent lookups and source reports
PD-20260511-C2B0AD Recipient: abuse@nicenic.net Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.