VirusTotal
3 / 91
“Spydoge ($SPYD) - Meme Coin Operation | Best Crypto Presale”
The domain www.spydoge.com is currently active and classified as a critical‑risk crypto drainer that impersonates Binance.
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
The domain www.spydoge.com is currently active and classified as a critical‑risk crypto drainer that impersonates Binance. Registration records show the domain was created on August 26, 2025 through GoDaddy.com, LLC and is hosted on an Amazon.com, Inc. infrastructure (AS16509) located in the United States, resolving to IP address 216.150.16.193. DNS resolution uses the Vercel‑provided nameservers ns1.vercel-dns.com and ns2.vercel-dns.com, and the site serves an HTTPS certificate issued by Let’s Encrypt (R13). HTTP requests return a 200 status code, and the page title reads “Spydoge ($SPYD) – Meme Coin Operation | Best Crypto Presale”, indicating a token‑presale façade. Technical fingerprints include Tailwind CSS, Vercel hosting, enforced HSTS, and embedded Google Analytics. The site employs a Token Presale phishing kit combined with a Wallet Connect abuse drainer module, aligning with the observed crypto‑drain behavior.
Detection telemetry shows the domain is listed on the PhishDestroy blocklist and appears on one additional security blocklist. Gridinsoft assigns a trust score of 0 / 100, and AlienVault OTX references the domain in a single threat‑intelligence pulse. VirusTotal analysis reports three of ninety‑three scanning vendors flagging the domain, reinforcing its malicious profile. The combination of low trust scoring, blocklist presence, and vendor detections confirms a high likelihood of credential or wallet compromise attempts.
Defenders should immediately block DNS resolution for www.spydoge.com at the network perimeter and update endpoint protection signatures to include the associated IP 216.150.16.193. Monitoring for Wallet Connect traffic to unfamiliar contract addresses is advised, as the drainer kit specifically targets that protocol.
Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.
https://t.me/spydogeStored page referencehttps://t.me/spydoge007Stored page referenceIoC extraction recorded 2026-07-29 02:39:42 UTC
このページは、ブラウザのような訪問者にはあるレスポンスを返し、クローラーやセキュリティスキャナーには別のレスポンスを返していました。クローキングは、レビュー担当者を実際のランディングページから遠ざけることのみを目的としています。
content_splitスキャナーに関する注記: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-43562.invalid', port=80): Max retries exceeded with url: / (Caused by N
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP の評判はこのドメインに起因しません。
ns1.vercel-dns.comns2.vercel-dns.comLocation describes the IP network.
5b21c1121ad0ccdf222dc1babf03b0fdccb93d45d74f255b3a34e19fe046e735spydoge.comSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-43562.invalid · checked Mar 6, 2026
13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
保存された類似ドメイン:187 件
187 件中 100 件を表示
このドメインを操作したり、個人情報を入力したり、暗号通貨ウォレットに接続したりした場合は、直ちに行動を起こしてください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
Template-based draft · optional AI wording assistance requires separate consent
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャン不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポート最近のフィッシングレポートと観察された可用性の変化
監視リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください
推定では $51 billion 2024年に違法な暗号資産ウォレットへと流出した(source). もしあなたが duplicate-disabled-43562.invalid — 今すぐ行動しましょう。
によると、 FBI、最も重要な詳細はトランザクションデータです:
0x5856...35985)duplicate-disabled-43562.invalid)たとえすべての詳細がわかっていなくても―― とにかく報告を提出する. 不完全な情報であっても、捜査には役立つ。
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.