global1[.]b-krx[.]top
“GlobalKRX”
global1.b-krx.top — Contenuto non disponibile. Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 1/94 (SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: NameSilo.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain global1.b-krx.top was registered on March 12, 2026 through NameSilo, LLC and is currently listed as offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is served via Cloudflare infrastructure, as indicated by the presence of HSTS, Cloudflare Browser Insights, and HTTP/3 support, and the authoritative nameservers phil.ns.cloudflare.com and simone.ns.cloudflare.com. No SSL certificate was observed for the site, meaning HTTPS connections would rely on Cloudflare's default TLS handling rather than a domain‑specific certificate.
The page title returned from the site is "GlobalKRX," suggesting an attempt to impersonate a service or brand identified by that name, although no additional branding or content details are available. Security telemetry shows the domain has been flagged by three blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis reported a single detection out of ninety‑four scanning engines, indicating at least one vendor identified malicious behavior. The elevated risk rating reflects the combination of recent creation, use of reputable CDN services to obscure origin, and the presence of a detection.
Defenders should continue to block the domain at network perimeters, update URL filtering rules, and monitor for any resurgence of activity, especially given the low‑cost registration timeline that may be leveraged for future campaigns. Because the site is offline, no live payload or credential‑harvesting pages can be examined, leaving the exact phishing vector uncertain. Ongoing observation of the IP address and associated Cloudflare edge nodes is recommended to detect potential re‑use of the infrastructure for new malicious domains.
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Registration: b-krx.top
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain b-krx.top behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 4 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of global1.b-krx.top · checked Mar 12, 2026
Dati e relazioni esterne
PD-20260312-9422F9 Recipient: abuse@namesilo.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo