thexrpbulls-allocation[.]com
“thexrpbulls-allocation.com”
thexrpbulls-allocation.com — 연결 가능 · 액세스가 제한됨 (HTTP 403). 사기 유형: Generic Phishing. 증거 요약: VirusTotal 3/91 (Fortinet, Gridinsoft, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 71/100. 등록기관: NiceNIC.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis indicates that thexrpbulls-allocation.com is an active generic phishing domain presenting itself as a priority allocation program. The observed page title, "Club X · TheXRPBulls Priority Allocation Program," suggests an attempt to imitate a branded allocation or membership offering in order to collect credentials, personal information, or other sensitive user data. Infrastructure analysis shows the domain resolving to IP address 188.114.97.3 located in the US and operating behind network infrastructure associated with AS13335.
Evidence associated with this domain supports a high-risk assessment. The domain was created on June 06, 2026 and remains active at the time of analysis. Registration records identify NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. Detection telemetry shows 3/95 security vendors flagging the domain, and it appears on 1 security blocklist. The domain has additionally been reported and blocked by an independent phishing-tracking source. Certificate information indicates issuance through Google Trust Services / WE1.
Users who visited the site should consider any submitted information potentially exposed. Credentials entered through the page should be changed immediately, with priority given to accounts using the same or similar passwords. Security teams should review authentication logs for unauthorized access attempts, monitor for follow-on phishing activity, and block the domain and associated indicators within network, email, and endpoint security controls. Continued monitoring is recommended while the domain remains active.
네트워크 보안 인텔리전스 Registrar context
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-15 02:48:26 UTC
사용 기술 · 4 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 신뢰도 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 신뢰도 100%VirusTotal 분석
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.