Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@cosmotown.com.
The latest stored availability evidence still shows the domain reachable; 12 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
hfxprime247[.]com
hfxprime247.com için kimlik avı ve güvenlik kontrolü
“HFX-Prime|| Investment solutions designed with elegance and finesse”
hfxprime247.com — Bilinen son aktif (HTTP 200). Marka kimliğine bürünme: Investmentscam; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 7/91 (alphaMountain.ai, BitDefender, CRDF, ESET, G-Data); URLQuery 2 alerts; URLScan malicious verdict; PhishDestroy score 88/100. Kayıt kuruluşu: TuringSign.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
As of July 27, 2026, the domain hfxprime247.com remains active and is flagged as a generic phishing site. The domain was registered on August 23, 2025, through TuringSign Inc. d/b/a Cosmotown, a registrar known for its association with various online activities. The domain resolves to the IP address 188.114.97.3, which is hosted by Cloudflare, as indicated by the nameservers bjorn.ns.cloudflare.com and erin.ns.cloudflare.com.
This setup suggests the use of Cloudflare's DNS and potentially other services, which can sometimes be leveraged to obscure the true nature of the hosting infrastructure behind the domain. The domain appears on one security blocklist, specifically PhishDestroy, indicating that it has been identified as a potential threat by at least one security organization. One of 91 security vendors on VirusTotal has flagged this domain, which is a relatively low detection rate but still noteworthy.
The exact content and purpose of the site have not been fully analyzed, but the current evidence points to it being used for phishing activities. Defenders should be cautious and consider blocking this domain to prevent potential compromise of user credentials or other sensitive information. Given the domain's relatively recent creation date and its presence on a security blocklist, further monitoring and analysis are recommended to understand the scope and targets of the phishing campaign.
Ağ Güvenliği İstihbaratı
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 9 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com %100 güvenSwiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.
swiperjs.com %100 güvenOWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.
owlcarousel2.github.io %100 güvenjQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.
jqueryui.com %100 güvenjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com %100 güvenCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com %100 güvenCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of hfxprime247.com · checked Jul 27, 2026
Kanıtlar ve Dış Raporlar
PD-20260727-D71964 Recipient: abuse@cosmotown.com Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin