VirusTotal
15 / 95
“Flying Tulip”
flyingtulip.finance — コンテンツが利用できません. 詐欺タイプ: Crypto Scam; Drainer: Wallet Connect Abuse. 証拠の概要: VirusTotal 15/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); Spamhaus DBL_SPAM; 1 external blocklist match (ScamSniffer); PhishDestroy score 100/100. レジストラ: NET-USA (ASN: 400992).
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
The domain flyingtulip.finance is currently down, indicating a potential takedown of a generic crypto scam operation. It presented itself as an unbranded crypto operation involved in Wallet Connect Abuse.
Fifteen out of 95 security vendors, including BitDefender, ESET, Fortinet, and Sophos, flagged flyingtulip.finance as malicious. It appears on 2 public blocklists, but Google Safe Browsing has not flagged it.
The domain is registered with NET-USA (ASN: 400992) and resolved to IP 185.245.34.139. It was first seen on 2025-11-17. Block 185.245.34.139 at the network perimeter and submit an abuse report to NET-USA.
このホストに関するクローラーとブラウザの観測データの蓄積に加え、ケイタロ式トラフィック分散システム向けのリアルタイムフィンガープリントチェック。
スキャナーに関する注記: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='flyingtulip.finance', port=80): Max retries exceeded with url: / (Caused by NewConnectionE
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
a.dnspod.comb.dnspod.comc.dnspod.comLocation describes the IP network.
3096ac57b6982a02b09a504c3d4d25f0d3a3b2173946fd8517e4f515af9feb9fSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
15 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
コミュニティの 1 人が報告・初回確認 2025年11月17日
このドメインを操作したり、個人情報を入力したり、暗号通貨ウォレットに接続したりした場合は、直ちに行動を起こしてください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
Template-based draft · optional AI wording assistance requires separate consent
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャン不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポート最近のフィッシングレポートと観察された可用性の変化
監視リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください
推定では $51 billion 2024年に違法な暗号資産ウォレットへと流出した(source). もしあなたが flyingtulip.finance — 今すぐ行動しましょう。
によると、 FBI、最も重要な詳細はトランザクションデータです:
0x5856...35985)flyingtulip.finance)たとえすべての詳細がわかっていなくても―― とにかく報告を提出する. 不完全な情報であっても、捜査には役立つ。
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.