claim-paradex[.]trade
“Portfolio | Paradex”
claim-paradex.trade — 서버 오류 (HTTP 502). 사기 유형: Crypto Scam. 증거 요약: VirusTotal 4/91 (ChainPatrol, alphaMountain.ai, Fortinet, Gridinsoft); URLQuery 3 alerts; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 70/100. 등록기관: NiceNIC.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
claim-paradex.trade was registered on 12 March 2026 through NiceNIC International Group Co., Limited. The domain resolves to 188.114.97.3, an IP address owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. DNS resolution uses Cloudflare’s authoritative nameservers kim.ns.cloudflare.com and scott.ns.cloudflare.com. No TLS certificate is presented, indicating the site is served over plain HTTP.
The site’s HTML title reads "Portfolio | Paradex", which aligns with the listed scam type of a crypto scam. Automated analysis by VirusTotal recorded a single positive detection out of 95 scanned security vendors, suggesting at least one vendor flagged the domain for malicious activity. The domain appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the assessment of a crypto‑drainer operation. Front‑end libraries identified include Ant Design, jsDelivr, crypto‑js, cdnjs, and Cloudflare’s HTTP/3 support, a stack commonly leveraged by malicious actors to deliver obfuscated JavaScript payloads that can interact with cryptocurrency wallets.
The current operational status is offline, which may be a temporary takedown or a shift in infrastructure. While the available evidence confirms the domain’s involvement in a crypto‑drainer scheme, the exact content that was served, the specific payloads used, and the victims targeted remain unknown because the site is no longer reachable. Defenders should continue to block the domain at network perimeter, add the IP address 188.114.97.3 to deny lists, and monitor for any resurgence under related sub‑domains or new Cloudflare‑hosted IPs. Analysts should request full VirusTotal reports to identify the vendor that raised the detection and review any archived snapshots to extract malicious code signatures for broader threat‑intel sharing.
네트워크 보안 인텔리전스 Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | claim-paradex.trade |
malicious | Sinkholed |
| DNS4EU | claim-paradex.trade |
malicious | Sinkholed |
| Quad9 DNS | claim-paradex.trade |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-17 02:55:26 UTC
사용 기술 · 6 identified
Free public CDN for open-source projects, serving files from npm and GitHub.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 분석
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of claim-paradex.trade · checked Mar 12, 2026
증거 및 외부 보고서
PD-20260312-4515C8 Recipient: abuse@nicenic.net, compliance@icann.org 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.