dashboard[.]profitbuildersteam[.]org
“Profit Builders Team - Home”
dashboard.profitbuildersteam.org — コンテンツが利用できません. ブランドの偽装: Steam; 詐欺タイプ: Gaming Scam. 証拠の概要: VirusTotal 1/93 (Gridinsoft); PhishDestroy score 56/100.
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
On July 24, 2026 analysts recorded the appearance of the domain dashboard.profitbuildersteam.org, a newly registered site created on February 21, 2026. The domain resolves to the IPv4 address 148.251.246.72, which is advertised as part of the Hetzner Online GmbH network (AS24940) and geolocated to Germany. An SSL certificate with an E6 rating was observed for the host, indicating a low‑grade encryption profile. The page title returned by the web server is "Profit Builders Team - Home," which does not reference the targeted brand but aligns with the listed brand target of Steam and a declared scam type of Gaming Scam. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist.
VirusTotal scans show that one out of ninety‑three security vendors flagged the domain, suggesting limited detection coverage. The site has been taken offline and is currently listed as blocked by the PhishDestroy service. The evidence points to an infrastructure designed to impersonate Steam‑related services, likely to lure gamers into credential harvesting or financial fraud. However, the exact payload, phishing page structure, and any associated command‑and‑control infrastructure remain unverified because the site is no longer reachable.
The low trust score, modest blocklist presence, and minimal VirusTotal detections indicate that the domain may have been newly deployed and quickly shuttered, limiting exposure. Defenders should add dashboard.profitbuildersteam.org to internal blocklists, monitor for any DNS or HTTP requests to the associated IP 148.251.246.72, and watch for similar naming patterns that combine "profitbuilder" with Steam‑related terms. Given the Hetzner hosting, threat‑hunting teams may also consider querying Hetzner abuse contacts for further context. Continuous re‑scanning of the domain and its IP is advised in case the infrastructure resurfaces under a different subdomain or host name.
脅威対応 Pipeline
公開ブロックリスト登録状況
フォレンジックインテリジェンス
VirusTotalによる分析
証拠および外部報告書
“They create channel in telegram to make people trust them with free signals or investment with very high yield returns then after that. They will make you deposit using usdt to their accounts then after that they will keep on asking more like example 300$ for a swaps fee”
このサイトによって何か影響を受けましたか?
アカウント資格情報、個人情報、支払い情報を入力した場合、またはこのドメインからファイルをダウンロードした場合は、すぐに対処してください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
お住まいの地域の当局へ報告してください
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
任意のドメインを確認する
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャンフィッシングを報告する
不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポートリアルタイム脅威情報フィード
最近のフィッシングレポートと観察された可用性の変化
監視最新情報を入手し、安全を確保しましょう
リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください