alternative-financepartners[.]com
“Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | A F P”
alternative-financepartners.com — İçerik kullanılamıyor (HTTP 502). Marka kimliğine bürünme: Ethereum; Dolandırıcılık türü: Fake Exchange. Kanıt özeti: VirusTotal 2/93 (SOCRadar, URLQuery); PhishDestroy score 56/100.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Analysis of alternative-financepartners.com shows a short‑lived infrastructure that was created on February 21, 2026 and subsequently taken offline before the report date of July 24, 2026. The domain resolves to IP address 45.152.162.78, which is registered to AS200019 ALEXHOST SRL in France. The site presented a page titled "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | A F P," a title that aligns with the reported scam type of a fake cryptocurrency exchange and explicitly targets the Ethereum brand. Technical fingerprints collected from the landing page include a Node.js back‑end, client‑side libraries such as Chart.js, Vue.js and Nuxt.js, as well as Cloudflare CDN, jsDelivr asset delivery, HSTS enforcement and a Facebook Pixel tag.
The SSL certificate is identified as "E7," indicating a publicly visible TLS certificate, but no further trust indicators were observed. VirusTotal scans recorded detections by 2 of 93 security vendors, and the domain appears on a single blocklist operated by PhishDestroy, confirming that at least some security products consider the site malicious. While the domain is currently offline, its brief activity window suggests an opportunistic credential‑stealing or fund‑extraction campaign aimed at users seeking to trade Ethereum.
The evidence does not reveal the exact phishing pages or credential capture mechanisms, leaving the precise attack flow uncertain. Defenders should continue to block the domain and its associated IP address at perimeter filters, monitor DNS logs for any re‑registration attempts, and incorporate the observed technology stack into heuristic rules for detecting similar fake exchange sites. Continuous threat‑intel feeds should be consulted for any resurgence of the domain or related infrastructure, and users should be warned against any unsolicited offers referencing Ethereum trading on sites matching the observed page title.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 9 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
Progressive JavaScript framework for building user interfaces.
Hybrid Vue framework for server-side rendering and static sites.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comFree public CDN for open-source projects, serving files from npm and GitHub.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Conversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comVirusTotal Analizi
Kanıtlar ve Dış Raporlar
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin