Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
fasset[.]cc
“Swap Raydium”
Resumo das evidências
This domain, fasset.cc, was registered on 21 February 2026 through Dynadot LLC and is presently taken offline. The site presented a page titled “Swap Raydium”, indicating an attempt to impersonate the Raydium decentralized exchange platform. The SSL certificate presented as “WE1”, issued by Cloudflare, and the host resolves to 172.67.146.5, an address owned by Cloudflare, Inc. in Canada. Technical fingerprinting shows the front‑end stack is built on Node.js with Vue.js and Nuxt.js, and the traffic is served over HTTP/3 with Cloudflare Browser Insights enabled, consistent with a modern web‑app deployment.
VirusTotal analysis recorded six positive detections out of ninety‑three scanners, and the domain is listed on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL. The blocklist entries categorize the activity as a crypto‑scam, matching the observed “Swap Raydium” title. No additional content was captured before the takedown, so the exact payload, credential‑capture mechanisms, or wallet‑drainage logic remain unknown.
Defenders should continue to block resolution of fasset.cc at the DNS level and incorporate the IP 172.67.146.5 into network‑wide deny lists, recognizing that the address is shared by Cloudflare and may host legitimate services. Monitoring of newly issued certificates for the “WE1” issuer and of domains registered through Dynadot LLC for similar Raydium‑related keywords is recommended. Threat‑intel feeds should be updated to reflect the confirmed impersonation of Raydium and the associated crypto‑scam classification, enabling endpoint and browser security solutions to flag any future re‑use of the same infrastructure.
Instantâneo das evidências enviadas
- Enviado
- Registros do livro-razão
- 1
- ID do caso
PD-1771299974-fasset.cc- Artefato PDF
- Evidência em PDF
Histórico de denúncias 1
- Denúncia 1 Phishing Abuse Report: fasset[.]cc
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
Linha do tempo de detecção
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
Tecnologias
6 tecnologias identificadas com alta confiança
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo