Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@internet.gmo.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
defiancesecurities[.]com
defiancesecurities.com 피싱 및 보안 점검
“Defiance ETFs: ETFs Built For The Next Generation”
defiancesecurities.com — 마지막으로 알려진 활성 (HTTP 200). 사기 유형: Crypto Scam. 증거 요약: VirusTotal 2/91 (CRDF, Gridinsoft); URLQuery 1 det.; PhishDestroy score 75/100. 등록기관: GMO Internet Group.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Evidence Analysis
This domain, defiancesecurities.com, is identified as a crypto drainer, a type of malicious infrastructure designed to siphon cryptocurrency from connected wallets. The site impersonates Defiance ETFs, a legitimate exchange-traded fund provider, to deceive users into engaging with fraudulent investment opportunities. As of the latest analysis, the domain is offline, but prior activity indicates it was actively used for cryptocurrency theft through deceptive wallet-draining scripts.
Infrastructure analysis reveals the domain was registered on February 21, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com. It resolves to the IP address 188.114.96.3 and employs Nginx and OpenResty as detected technologies. The domain holds a Gridinsoft trust score of 0/100 and appears on one security blocklist. VirusTotal reports indicate that 3 of 95 security vendors flagged the domain as malicious. The SSL certificate is issued by GoDaddy.com, Inc., which, while not inherently malicious, is commonly used in both legitimate and fraudulent domains to establish a veneer of credibility.
The domain is currently offline, but its prior operational status and technical indicators suggest it was part of a broader campaign targeting cryptocurrency users. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users who may have interacted with the site should immediately disconnect any linked wallets, revoke smart contract approvals, and monitor accounts for unauthorized transactions. Security teams should treat any residual DNS or cached references to this domain as high-risk and conduct forensic analysis if prior exposure is suspected.
데이터 적용 범위12 recorded checks
네트워크 보안 인텔리전스
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
사용 기술 · 2 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Web platform based on Nginx with LuaJIT for scalable web apps.
VirusTotal 분석
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of defiancesecurities.com · checked Mar 6, 2026
증거 및 외부 보고서Independent lookups and source reports
PD-20260211-8B245D Recipient: abuse@internet.gmo Victim safety and official reportingImmediate actions and verified reporting channels
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.