changenowio.com — Bilinen son aktif (HTTP 301). Dolandırıcılık türü: Crypto Drainer. Kanıt özeti: VirusTotal 12/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); Spamhaus DBL_SPAM; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 96/100. Kayıt kuruluşu: Hosting Concepts.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Kanıt özeti
PhishDestroy first observed changenowio.com on Jun 3, 2026. The captured page title is “ChangeNOW : The Fastest Crypto Swap Exchange”. Stored page analysis classifies the content as crypto drainer. Evidence score: 96/100 (critical).
5 independent sources recorded positive findings: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and DNS security resolvers. VirusTotal recorded 12 detections among 91 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data on Jul 28, 2026 at 02:37 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 06:20 UTC. Spamhaus DBL: DBL_SPAM on Jul 13, 2026 at 14:32 UTC. DNS security checks returned 3 blocking results across 14 tested policies: Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained.
HTTP 301 was recorded on Aug 9, 2026 at 01:54 UTC. Registration records for the domain list Hosting Concepts B.V. d/b/a Registrar.eu as the registrar and Jun 3, 2026 as the creation date. At collection time, the hostname resolved to 130.12.180.128 on AS202412 (Omegatech LTD). The evidence archive retains 2 visual captures from PhishDestroy and URLQuery.
Veri kapsamı12 recorded checks
Ağ Güvenliği İstihbaratı
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of changenowio.com · checked Jun 3, 2026
Site Yapılandırma Analizi
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
PD-20260603-F40314 Recipient: abuse@registrar.eu Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.