VirusTotal
12 / 93
“Flare Network - EVM Hub for Web 3.0”
linkconnectsyncflr.online — İçerik kullanılamıyor. Marka kimliğine bürünme: Argent; Dolandırıcılık türü: Crypto Scam. Kanıt özeti: VirusTotal 12/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); URLScan malicious verdict; 4 external blocklist matches; PhishDestroy score 100/100. Kayıt kuruluşu: Global Domain Group.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
This domain is flagged as a high-risk brand impersonation threat designed to deceive users of the Argent cryptocurrency wallet. Analysis indicates the domain mimics legitimate Flare Network infrastructure, leveraging social engineering tactics to exploit trust in Web 3.0 platforms. The specific threat involves credential harvesting and unauthorized transaction requests under the guise of an EVM-compatible service, with potential financial loss for victims. Infrastructure analysis reveals the domain was registered on November 13, 2025, through Global Domain Group LLC, resolving to IP address 195.20.18.201 (AS48753, AVA HOST SRL, Moldova). VirusTotal reports 12 out of 95 security vendors detecting malicious activity, while the domain appears on five independent security blocklists. The SSL certificate (R13) lacks extended validation, further reducing legitimacy. Detection engines including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura have blocked this domain, corroborating its fraudulent nature. The page title "Flare Network - EVM Hub for Web 3.0" directly impersonates Argent’s ecosystem partners to enhance credibility. Mitigation requires immediate domain takedown coordination with the registrar and hosting provider, alongside blacklisting of the associated IP (195.20.18.201). Network defenders should update firewalls and DNS filters to block resolution, while wallet providers must integrate real-time domain reputation checks to prevent interaction. End users should verify domain registration dates via WHOIS and cross-reference official communications channels before entering credentials. Cryptocurrency platforms are advised to implement multi-factor authentication and transaction confirmation delays to counteract impersonation attacks.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='linkconnectsyncflr.online', port=80): Max retries exceeded with url: / (Caused by NewConne
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Location describes the IP network.
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
1 topluluk üyesi tarafından bildirildi; ilk görülme 25.11.2025
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin