hedera[.]tokenops[.]xyz
Riepilogo delle prove
Analysis of hedera.tokenops.xyz shows it was registered on June 29 2022 through Go Daddy, LLC and uses the default GoDaddy nameservers ns53.domaincontrol.com and ns54.domaincontrol.com. The domain does not present an SSL certificate, indicating traffic is served over plain HTTP. DNS resolution points to IP 216.150.1.193, an address owned by Amazon.com, Inc. (ASN 16509) and geolocated to the United States. The site has been classified as a crypto‑related scam and is listed as a generic phishing operation.
Detection services have flagged the domain: two of ninety‑five VirusTotal scanners reported malicious activity, and the domain is currently blocked by the PhishDestroy feed, appearing on one additional security blocklist. The operational status is recorded as offline, and the hosting provider has taken the site down. Evidence confirms that the domain is being used to lure victims into a cryptocurrency fraud, but the exact phishing payload, landing page content, or targeted brands have not been disclosed in the available data. Consequently, the full scope of the campaign—such as the number of victims, credential‑stealing techniques, or command‑and‑control infrastructure—remains uncertain.
Defenders should add hedera.tokenops.xyz to their deny‑list, monitor DNS queries for the associated IP address, and enforce HTTPS‑only policies to mitigate accidental connections. Network sensors should flag any outbound traffic to the listed IP or to the domain, even though the site is currently offline, because the infrastructure may be reused for future campaigns. Continuous ingestion of updated blocklists, including PhishDestroy, will ensure that any re‑appearance is promptly blocked.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Stato del dominio
Raggiungibile → Non raggiungibile
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Registration: tokenops.xyz
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain tokenops.xyz behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo