VirusTotal
18 / 89
“Site not found”
sendusdt00.netlify.app — Контент недоступний (HTTP 404). Тип шахрайства: Impersonation. Зведення доказів: VirusTotal 18/89 (alphaMountain.ai, BitDefender, CyRadar, Ermes, ESET); 1 external blocklist match (ScamSniffer); CF Radar malicious; PhishDestroy score 100/100. Реєстратор: Netlify.
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
18 / 89
provider verdict: malicious
Повідомити15/100
Повідомитиno community references
Повідомитизбережений звіт
ПовідомитиАналіз завершено
ПовідомитиChecked; no threat flag recorded
ПовідомитиOn 2026-10-01, sendusdt00.netlify.app returned HTTP status 404 according to the recorded HTTP check. The same domain appears in one external blocklist, ScamSniffer, per the blocklist check dated 2026-10-01.
ScamSniffer recorded sendusdt00.netlify.app in its external blocklist as of 2026-10-01. VirusTotal recorded 18 detections across 89 scanners for the domain on 2026-09-21. The SSL certificate was issued by DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1, scanned on 2026-09-19. The domain was first observed on 2026-09-12, and the IP address 35.157.26.135 is associated with AWS EC2 (eu-central-1) in DE.
The ScamSniffer listing and VirusTotal scan were recorded on different dates, so their observations cannot be treated as a single snapshot. The SSL scan on 2026-09-19 and the HTTP check on 2026-10-01 also fall in separate windows, which limits direct comparison of those records. Because the observation dates differ, each source reflects conditions at its own recorded time rather than a shared moment.
Retain the dated records for sendusdt00.netlify.app, including the ScamSniffer listing, VirusTotal result, SSL scan, and HTTP response, so later checks can be compared against them. When reviewing sendusdt00.netlify.app, avoid submitting personal, financial, or credential information. Compare any subsequent observations with the existing dated entries to identify changes over time.
Збережені дані спостережень за взаємодією веб-сканера та браузера для цього хоста, а також перевірка відбитків у режимі реального часу для систем розподілу трафіку типу «Кейтаро».
NetlifyПримітка щодо сканера: http_other: raw=http_404; http=404; via=http_proxy; server=Netlify
Репутація Edge-IP не пов’язана з цим доменом.
Location describes the IP network.
bc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478netlify.appSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
35.157.26.135. 13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
1 повідомлення спільноти
КатегоріяPHISHING
Wallet-drainer collection address observed in the JavaScript of 1 phishing site: sendusdt00.netlify.app. The page impersonates Trust Wallet. The page prompts a victim to connect a wallet and sign a transfer or approval to this address rather than harvesting credentials. The addr
“Wallet-drainer collection address observed in the JavaScript of 1 phishing site: sendusdt00.netlify.app. The page impersonates Trust Wallet. The page prompts a victim to connect a wallet and sign a transfer or approval to this address rather than harvesting credentials. The address was extracted from a destination context (transfer target / approval operator) in the page's script bundle, not merely referenced. Verified as an externally-owned account (not a contract) via eth_getCode across 6 EV”
Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.
Template-based draft · optional AI wording assistance requires separate consent
Аналіз загроз за допомогою збереженого списку блокувань, WHOIS, DNS і загальнодоступних доказів сканування
Сканувати заразДодавайте підозрілі домени до нашої бази даних загроз — захищайте спільноту
ПовідомитиОстанні звіти про фішинг і помічені зміни доступності
ВідстежуватиСлідкуйте за актуальними загрозами або оскаржте цей запис, якщо вважаєте, що це помилкова тривога