VirusTotal
8 / 92
“zipcoin — the currency from Snowmoon, shipped”
voting-zipcoin.sbs — Останній відомий активний (HTTP 200). Уособлення бренду: MetaMask; Тип шахрайства: Impersonation. Зведення доказів: VirusTotal 8/92 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. Реєстратор: NiceNIC.
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
8 / 92
DBL_PHISH
3 community references
Повідомитиprovider verdict: suspicious
Повідомитизбережений звіт
Повідомити Аналіз завершено
ПовідомитиChecked; no threat flag recorded
ПовідомитиThe domain voting-zipcoin.sbs was recorded on 2026-10-07 with inclusion in two external blocklists, MetaMask and SEAL. On the same date, a PageSpeed performance score of 55 was measured for the domain.
MetaMask and SEAL both listed voting-zipcoin.sbs in their blocklists as of 2026-10-07. VirusTotal checked the domain on 2026-10-07 and reported 0 detections out of 92 scanners. OTX referenced voting-zipcoin.sbs in three pulses as of 2026-10-07. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-10-03, and its SSL certificate was issued by Let's Encrypt / YE2, last scanned on 2026-10-07.
These records show that voting-zipcoin.sbs was noted by multiple security and performance sources on the same date. The inclusion in MetaMask and SEAL blocklists provides a record of external monitoring, while VirusTotal and OTX offer additional perspectives from their respective platforms.
For ongoing assessment of voting-zipcoin.sbs, reference the MetaMask and SEAL blocklist entries and VirusTotal's scan results. Preserve OTX pulse records and compare them with future observations to track any changes in how voting-zipcoin.sbs is recorded by these sources.
Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.
0x1813A541FB107C5E9b46e9cbB04e67140bCE7730Format validated · Domain analysis0x4E67DB19044549fF420860834c91b45BaD298722Format validated · Domain analysis0x6d0eBA4D1E2665bF2256507E8b0124C647ada422Format validated · Domain analysis0x7a8DA01D241C3cFcF7803cdB007EcE5663749193Format validated · Domain analysis0x7d942ef2681bc82eb1cd6c46305598489fbbf402Format validated · Domain analysis0x992550B536749125D63d5F9c19fea765232D6928Format validated · Domain analysisIoC extraction recorded 2026-10-08 04:00:28 UTC
Збережені дані спостережень за взаємодією веб-сканера та браузера для цього хоста, а також перевірка відбитків у режимі реального часу для систем розподілу трафіку типу «Кейтаро».
cloudflareПримітка щодо сканера: alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Репутація Edge-IP не пов’язана з цим доменом.
joselyn.ns.cloudflare.comyahir.ns.cloudflare.comLocation describes the IP network.
da414340b8751da19729d0091f3215571220f1d3bc3c0fb5a7bd70a03e7cccbfSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of voting-zipcoin.sbs · checked Oct 7, 2026
104.21.61.63. 13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Збережено 79 схожих доменів
Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.
Template-based draft · optional AI wording assistance requires separate consent
Аналіз загроз за допомогою збереженого списку блокувань, WHOIS, DNS і загальнодоступних доказів сканування
Сканувати заразДодавайте підозрілі домени до нашої бази даних загроз — захищайте спільноту
ПовідомитиОстанні звіти про фішинг і помічені зміни доступності
ВідстежуватиСлідкуйте за актуальними загрозами або оскаржте цей запис, якщо вважаєте, що це помилкова тривога