wienerdogaifixs[.]pages[.]dev
“Hub Restore Node - We are here to help you resolve your crypto related issues”
wienerdogaifixs.pages.dev — Conteúdo indisponível. Representação da marca: Genericcrypto; Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 6/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, G-Data); URLScan malicious verdict; PhishDestroy score 73/100. Registrador: Cloudflare.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain wienerdogaifixs.pages.dev indicates it was actively involved in credential phishing targeting cryptocurrency users, as evidenced by its page title 'Hub Restore Node - We are here to help you resolve your crypto related issues.' The domain was registered through Cloudflare, Inc. on March 23, 2026, and resolved to the IP address 172.66.45.33, hosted under Cloudflare's infrastructure in Canada. Nameservers annalise.ns.cloudflare.com and zeus.ns.cloudflare.com further confirm Cloudflare's role in its hosting environment. The SSL certificate, issued by Google Trust Services (WE1), aligns with Cloudflare's standard configuration. At the time of assessment, six of ninety-four security vendors on VirusTotal flagged the domain as malicious, while it appeared on one security blocklist, specifically PhishDestroy.
The domain's Gridinsoft trust score of 0/100 reinforces its classification as high-risk. Technologies detected on the site include Select2, jQuery, HSTS, EmailJS, and HTTP/3, suggesting a structured phishing framework rather than a hastily assembled page. The HTTP status returned a 403 error, indicating the domain was taken offline or restricted by July 24, 2026. While the exact brand impersonation remains unconfirmed beyond the generic 'crypto support' theme in the page title, the infrastructure and detection patterns align with credential harvesting campaigns.
Defenders should treat this domain as part of a broader phishing operation, particularly in contexts involving cryptocurrency-related communications. Network-level blocking of the IP 172.66.45.33 and monitoring for related subdomains under pages.dev are recommended. Given the domain's offline status, further forensic analysis may be limited, but historical DNS and SSL certificate logs could provide additional indicators of compromise.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Inteligência forense
Tecnologias · 6 identified
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Client-side email sending service — often used to exfiltrate form data without a server.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of wienerdogaifixs.pages.dev · checked Mar 22, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo