thorchain-wallet-xyz[.]pages[.]dev
“THORChain Wallet | Secure RUNE Wallet & Cross-Chain Swaps”
thorchain-wallet-xyz.pages.dev — 확인되지 않음. 사기 유형: Crypto Drainer. 증거 요약: VirusTotal 1/91 (LevelBlue); PhishDestroy score 76/100. 등록기관: Cloudflare.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
The domain thorchain-wallet-xyz.pages.dev was registered on April 19, 2026 and currently resolves to the Cloudflare edge address 188.114.97.3, which is geolocated to Cloudflare, Inc. in Canada. The site presents a page titled “THORChain Wallet | Secure RUNE Wallet & Cross‑Chain Swaps”, mimicking the legitimate THORChain user interface. An SSL certificate issued by Google Trust Services (WE1) is active, and the connection is forced through HSTS, indicating a fully TLS‑enabled front end.
Threat intelligence shows the domain holds a Gridinsoft trust score of 0 out of 100, and VirusTotal records a single positive detection out of 95 scanned security vendors. PhishDestroy has already added the domain to its blocklist, and it appears on one additional security blocklist. The HTTP response code is 200, confirming that the site is actively serving content. The risk rating is high and the status is marked as active.
Technical profiling reveals the use of Cloudflare’s CDN services, including HTTP/3 support and enforced HSTS headers. The authoritative nameservers are dara.ns.cloudflare.com and leif.ns.cloudflare.com, both belonging to Cloudflare. No additional infrastructure such as separate hosting or backend servers is observable beyond the published edge IP, which limits direct attribution but confirms reliance on a reputable CDN provider.
Defenders should block or sinkhole thorchain-wallet-xyz.pages.dev at the DNS layer and add the IP 188.114.97.3 to network‑level blocklists. Monitoring of outbound traffic for connections to this address, especially from wallets handling RUNE or other cross‑chain assets, is advised. Incident response teams should treat any credential or private‑key submissions to this site as compromised and advise affected users to rotate keys and revoke any on‑chain authorizations.
네트워크 보안 인텔리전스
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 분석
보관된 증거
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of thorchain-wallet-xyz.pages.dev · checked Apr 19, 2026
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.