0xkh9546e0ej5kbl[.]bond
“Confirm Your Action”
0xkh9546e0ej5kbl.bond — 콘텐츠를 사용할 수 없음. 브랜드 사칭: Binance; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 11/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET); URLQuery 2 alerts; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 95/100. 등록기관: Global Domain Group.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
As of July 23, 2026, the domain 0xkh9546e0ej5kbl.bond is flagged for brand impersonation targeting Binance, a well-known cryptocurrency exchange. The domain was registered through Global Domain Group LLC on February 21, 2026. It currently has no SSL certificate, which is a common indicator of a phishing site. Infrastructure analysis reveals that the domain is hosted in the United States under the AS13335 Cloudflare, Inc. network, and it resolves to the IP address 188.114.96.3.
The domain has been taken offline, but it previously served a page titled 'Confirm Your Action,' which is consistent with a crypto scam aiming to trick users into confirming actions that could lead to financial loss. PhishDestroy has blocked this domain, and it appears on one security blocklist. While the domain is currently offline, it is important for defenders to remain vigilant and monitor for any reactivation or similar domains.
The domain's use of Cloudflare technologies, such as Cloudflare Browser Insights and HTTP/3, suggests an attempt to appear legitimate and evade detection. Given the elevated risk level, network administrators should ensure that security measures are in place to prevent users from accessing this domain if it becomes active again. Additionally, regular updates to security lists and user education on recognizing phishing attempts can help mitigate the potential impact of such scams.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | 0xkh9546e0ej5kbl.bond |
malicious | Sinkholed |
| Hagezi Threat Feed | 0xkh9546e0ej5kbl.bond |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
SHORTDOT 영역 · 공개 증거
.bond
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
사용 기술 · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 분석
보관된 증거
증거 및 외부 보고서
PD-20260213-35929F Recipient: abuse@globaldomaingroup.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.