cevabit[.]com
cevabit.com 网络钓鱼与安全检查
“Cryptocurrency Exchange – cevaBIT”
cevabit.com — 最后已知的活跃状态 (HTTP 200). 诈骗类型:Generic Phishing. 证据摘要: VT 13/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 2 det.; URLScan no malicious verdict; GSB no flag; Spamhaus DBL_PHISH; BL 2 (MetaMask, SEAL); PD 100/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy first observed cevabit.com on Apr 2, 2026. Positive findings were recorded by VirusTotal, MetaMask, SEAL, Spamhaus DBL, and URLQuery. Evidence score: 100/100.
VirusTotal recorded 13 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, Fortinet, G-Data on Aug 5, 2026 at 14:27 UTC. The external blocklist snapshot contained 2 matches (MetaMask, SEAL) on Aug 7, 2026 at 14:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 13, 2026 at 22:32 UTC. URLQuery recorded 2 detections. Google Safe Browsing returned no flag on Apr 2, 2026 at 15:16 UTC. URLScan completed without a malicious verdict (score 0). PhishStats returned no feed match on Apr 2, 2026 at 15:17 UTC.
HTTP 200 was recorded on Aug 7, 2026 at 10:37 UTC. Latest classified outcome: protected; cause captcha; mechanism challenge on Aug 7, 2026 at 00:40 UTC. Registration records list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar and Apr 2, 2026 as the registration date. At collection time, the domain resolved to 104.21.60.65. Captured page title: “Cryptocurrency Exchange – cevaBIT”. PhishDestroy classified the observed content as Generic Phishing. IoC extraction completed on Jul 29, 2026 at 02:07 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.
Stored full analysis2026年7月13日
As of July 12, 2026, the domain cevabit.com is flagged as a high-risk generic phishing site. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 02, 2026, and currently resolves to the IP address 104.21.60.65, which is located in Canada and is managed by Cloudflare, Inc. The site's SSL certificate is issued by Let's Encrypt, which is a common certificate authority used by both legitimate and malicious sites. The page title 'Cryptocurrency Exchange – cevaBIT' suggests that the domain may be attempting to mimic a legitimate cryptocurrency exchange, although the exact content of the site has not been analyzed. The domain appears on three security blocklists and has a Gridinsoft trust score of 0/100, indicating a significant risk. It is also blocked by PhishDestroy, MetaMask, and SEAL. Defenders should exercise caution and avoid interacting with this domain until further analysis confirms its legitimacy or malice. Given the high risk level and active status, it is advisable to monitor for any suspicious activity and to educate users about the dangers of phishing sites, especially those purporting to be cryptocurrency exchanges.
网络安全情报 Registrar Integrity Alert
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
ICANN 收到了钱。问责却没有到来。
对于这个 gTLD,上述注册商依据与 ICANN 签订的合同运营。ICANN 收取与注册、续费和转移相关的年度费用、浮动费用及按交易计收的费用。
认证:已变现。问责:请稍后再来查看。
接着,魔法开始了:ICANN 写下 RAA §3.18,注册商调查自身客户群体内部的滥用行为,受害者免费提交证据,而每一层都在等待其他人采取行动。如果这能让受害者觉得更安全,那真是太好了——看来账单确实起作用了。
Latest Classified Outcome 2026-08-07 02:40:34 UTC
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。