Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@ifastnet.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bellkinpower[.]xo[.]je
“Masuk - Belkin Power Bank”
bellkinpower.xo.je — 확인되지 않음. 사기 유형: Generic Phishing. 증거 요약: VirusTotal 4/91 (CRDF, CyRadar, Gridinsoft, URLQuery); URLQuery 3 alerts; Spamhaus DBL_PHISH; PhishDestroy score 70/100. 등록기관: Ifastnet.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
The domain bellkinpower.xo.je hosts a fraudulent login page titled "Masuk - Belkin Power Bank," likely designed to impersonate the Belkin brand. The page poses a credential theft threat by tricking users into entering sensitive account information under the guise of a legitimate power bank product portal.
Technical analysis reveals the site is flagged by 4 out of 95 VirusTotal vendors, including LevelBlue, Seclookup, SOCRadar, and URLQuery. It is listed on 1 blocklist. The domain IP address is 185.27.134.138, located in Great Britain and hosted by I FastNet LTD. The domain was registered through Ifastnet registrar on 2026-03-23. The SSL certificate is issued by ZeroSSL / ZeroSSL ECC Domain Secure Site CA.
The site is currently down or offline. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 56, indicating a moderate to high risk level despite the site being inactive.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | bellkinpower.xo.je |
malicious | Sinkholed |
| Quad9 DNS | bellkinpower.xo.je |
malicious | Sinkholed |
| DigiCert UltraDNS | files.catbox.moe |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 3 identified
Google platform for building mobile and web applications with backend services.
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Web platform based on Nginx with LuaJIT for scalable web apps.
VirusTotal 분석
증거 및 외부 보고서
PD-20260323-FD6346 Recipient: abuse@ifastnet.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.