VirusTotal
15 / 89 engine detections
Abrir relatório“Wielgór Funder | Investment Platform | Official Website”
Golpe de investimento cripto: wielgor-funder-engine.com — Conteúdo indisponível. Resumo das evidências: VirusTotal 15/89 (alphaMountain.ai, BitDefender, CRDF…
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
15 / 89 engine detections
Abrir relatório4 threat-system alerts
Abrir relatórioMalicioso
Abrir relatório5 community references
Abrir relatórioNo threat flag
Abrir relatórioNo malicious flag
Abrir relatórioResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | wielgor-funder-engine.com |
malicious | Sinkholed |
| Cloudflare DNS | wielgor-funder-engine.com |
malicious | Sinkholed |
| DNS4EU | wielgor-funder-engine.com |
malicious | Sinkholed |
| Quad9 DNS | wielgor-funder-engine.com |
malicious | Sinkholed |
PhishDestroy threat report
wielgor-funder-engine.com is an investment scam platform that presented itself as "Wielgór Funder | Investment Platform | Official Website." It targeted people looking for high-return investment or crypto trading opportunities. PhishDestroy first detected it on 2026-09-20. The site has been offline since 2026-09-26, and as of 2026-10-19 its DNS is inactive.
Platforms like this one pose as legitimate funds or trading services, using an "Official Website" label and a polished dashboard to look trustworthy. Victims are encouraged to register and make a deposit, often in cryptocurrency, after which the account shows fabricated profits to encourage larger top-ups. When a victim tries to withdraw, new obstacles appear, such as "taxes," "verification fees" or minimum balance rules, and the money is never returned. Victims lose everything they deposit and may also hand over identity documents and contact details that can be reused in follow-up recovery scams.
On 2026-09-21, VirusTotal showed 15 of 89 security engines flagging the domain. The flagging vendors included alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet and G-Data. The domain also appears in 5 AlienVault OTX threat pulses and is listed on the PhishDestroy blocklist.
The domain was registered on 2026-02-10 through MainReg Inc., about seven months before PhishDestroy detected it. It resolved to 172.67.202.161 on Cloudflare, Inc. network space, which is geolocated to Canada. Its TLS certificate was issued by Google Trust Services (WE1), so the padlock shown in browsers said nothing about whether the site was legitimate.
If you deposited money on this platform, stop all further payments, including any "fees" requested to unlock a withdrawal. Contact your bank or the exchange you sent funds from right away, and report the fraud to local police or your national cybercrime unit with transaction IDs and screenshots. If you uploaded ID documents or reused a password, change your credentials, enable two-factor authentication and watch for identity misuse. Be wary of anyone who later offers to recover your funds, because that is a common second-stage scam. Defenders should block the domain and its resolving IP at DNS and proxy level and add the domain to their threat-intelligence feeds.
A reputação do Edge-IP não é atribuída a este domínio.
clara.ns.cloudflare.comishaan.ns.cloudflare.commail.wielgor-funder-engine.compriority 10Location describes the IP network.
f1aa058f3551c22a34c05f06f3cb32375176d0f809dc3be01ea1729b7d595ffcSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of wielgor-funder-engine.com · checked Sep 20, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
wielgor-funder-engine.com
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
dns_inactive
dns_nxdomain
Acessível→Indisponível
Acessível
No threat flag
View source5 community references
View source15/89 engine detections
View sourcePD-20260920-741D8F
Page captured
View sourcewielgor-funder-engine.com
View sourcePD-20260920-741D8F Recipient: complain@mainreg.com Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
wielgor-funder-engine.com)Mesmo que você não tenha todos os detalhes — registre uma ocorrência mesmo assim. Mesmo informações parciais ainda ajudam nas investigações.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraEnvie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarRelatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMonitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.