transitswap[.]club
“Transit”
transitswap.club — 콘텐츠를 사용할 수 없음 (HTTP 502). 사기 유형: Crypto Scam. 증거 요약: VirusTotal 1/95 (SOCRadar); PhishDestroy score 55/100. 등록기관: Gname.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis of transitswap.club, observed on July 24, 2026, confirms the presence of a crypto‑related phishing infrastructure. The site was registered on June 16, 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare‑owned address 188.114.96.3, which is announced as belonging to AS13335 in the United States. The domain is protected by a Google Trust Services / WE1 TLS certificate issued by Cloudflare, and DNS resolution is handled by the Cloudflare nameservers augustus.ns.cloudflare.com and coraline.ns.cloudflare.com. The page title returned by the server is "Transit", matching the limited metadata available. Technical fingerprinting shows a modern web stack comprising Node.js, Vue.js, Nuxt.js, jQuery, and Cloudflare Browser Insights, with HTTP/3 enabled, indicating a deliberately fast delivery platform.
Threat intelligence sources have classified the site as a crypto scam; this classification aligns with the observed page title and the broader pattern of phishing domains targeting cryptocurrency users. Gridinsoft assigns a trust score of 48 out of 100, reflecting a moderate risk rating. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis reports that one of ninety‑five scanning engines flagged the domain, providing additional corroboration of malicious intent.
The site is currently taken offline, limiting immediate exposure but leaving the underlying infrastructure intact. Defenders should continue to block the domain at DNS and proxy layers, monitor the associated IP address for any re‑activation, and update endpoint detection rules to flag any traffic to the listed technologies and the specific TLS certificate chain. Further investigation is needed to determine the exact phishing payload or credential‑harvesting mechanisms, as the site content has not been publicly captured.
보안 신호
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
사용 기술 · 7 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 신뢰도 100%Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org 신뢰도 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 신뢰도 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 신뢰도 100%VirusTotal 분석
보관된 증거
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.