crypto-com-web[.]square[.]site
“Crypto.com: Securely Buy, Sell and Trade Bitcoinδ | Crypto.com login”
Observação armazenada
Contraste de títulos observado
Resumo das evidências
The domain crypto-com-web.square.site has been identified as a credential phishing site specifically targeting users of the cryptocurrency exchange Crypto.com. Analysis confirms the domain was designed to impersonate the legitimate platform, presenting a fraudulent login interface under the page title 'Crypto.com: Securely Buy, Sell and Trade Bitcoinδ | Crypto.com login.' The site is currently offline, but prior activity indicates a clear intent to harvest user credentials for unauthorized account access. Infrastructure analysis reveals the domain was registered through MarkMonitor, Inc. on March 14, 2026, and resolved to the IP address 74.115.51.5, hosted under AS27647 (Weebly, Inc.) in the United States. The SSL certificate was issued by Let's Encrypt (serial number E7). Security telemetry shows the domain was flagged by 17 of 95 vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. The creation date discrepancy (2026) suggests potential domain spoofing or incorrect registration records, a common tactic in phishing operations. While the domain is currently offline, the infrastructure remains a potential risk vector. Organizations and users are advised to block the domain and its associated IP (74.115.51.5) at the network level. Security teams should monitor for re-registration or re-emergence under similar subdomains. Users who may have interacted with the site should reset their Crypto.com credentials immediately and enable multi-factor authentication. Additional scrutiny of domains registered via the same registrar or resolving to the same IP range is recommended.
Data Coverage
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | crypto-com-web.square.site |
malicious | Sinkholed |
| OpenDNS | crypto-com-web.square.site |
phishing | Phishing Block |
| DNS4EU | crypto-com-web.square.site |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
VirusTotal
0 → 19
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Registration: square.site
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain square.site behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias
5 tecnologias identificadas com alta confiança
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of crypto-com-web.square.site · checked Mar 14, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo