meteora.markets
“Home | Meteora”
meteora.markets — 확인되지 않음. 브랜드 사칭: Unknown; 사기 유형: Generic Phishing. 증거 요약: VirusTotal 5/91 (alphaMountain.ai, Chong Lua Dao, CRDF, Gridinsoft, Sophos); PhishDestroy score 78/100. 등록기관: Cloudflare.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
증거 요약
The domain meteora.markets is presently active and has been classified as a generic phishing site. As of the report date, July 25, 2026, DNS resolution points to the IPv4 address 188.114.96.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. Authoritative nameservers listed are marek.ns.cloudflare.com and poppy.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare’s edge network. The web service presents an HTTPS endpoint secured by a certificate issued by Google Trust Services under the WE1 label, indicating a valid TLS chain. The HTTP response code returned by the server is 521, a Cloudflare‑specific status that denotes the origin server is refusing connections, which may be used to obscure backend activity.
Detected technologies include Cloudflare’s CDN and HTTP/3 support, both typical of modern hosting but not indicative of benign intent. VirusTotal analysis shows that 6 of 95 security vendors have flagged the domain, suggesting a moderate level of consensus about malicious behavior. The site appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of high risk.
The page title returned by the server is "Home | Meteora," but no further content has been harvested, leaving the exact phishing payload or credential‑ harvesting mechanisms unknown. Given the combination of Cloudflare‑based hosting, a low trust score, multiple vendor detections, and active blocklist listings, defenders should treat meteora.markets as malicious. Recommended mitigations include adding the domain to outbound allow‑list exclusions, updating intrusion‑prevention signatures to drop traffic to 188.114.96.3, and monitoring DNS logs for queries to the associated nameservers.
Forensic History & Detection Timeline
-
Cloudflare Radar Scan Mar 7, 2026 · 15:42 UTCCloudflare Radar scan registered: View Radar report.
-
Cloudflare Radar Scan Mar 7, 2026 · 07:10 UTCCloudflare Radar scan registered: View Radar report.
-
VirusTotal Detections Update Feb 27, 2026 · 02:02 UTCVirusTotal scanner detections updated from 6 to 5. Resolved alerts: CRDF.
-
Domain Status Transition Feb 27, 2026 · 02:02 UTCDomain state transitioned from alive to dead.
위협 대응 Pipeline
공개 차단 목록 상태
탐지 회피 분석
클로킹 및 트래픽 분산 점검
관찰되지 않음
저장된 스캔 결과에서는 클로킹 현상이 관찰되지 않았습니다.
이 호스트에 대해 저장된 크롤러 대 브라우저 관측 데이터와, 케이타로 스타일의 트래픽 분배 시스템을 위한 실시간 지문 확인 정보.
- 저장된 은신 플래그
- 관찰되지 않음
- 클로킹 점수
- 0/6
- 마지막 은폐 스캔
스캐너 메모: timeout: raw=timeout; http=0; via=http_proxy; error=HTTPConnectionPool(host='82.23.222.104', port=6410): Read timed out. (read timeout=7)
저장된 캡처 · 2 sources
도메인 인텔리전스
기술 세부 정보DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
기술 · 2 identified
VirusTotal 분석
보관된 증거
커뮤니티 신고
커뮤니티 구성원 1명이 신고 · 최초 확인 2025년 10월 29일
- 저장된 신고
- 1
- 신고된 고유 URL
- 1
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.