OTX
无社区引用
打开报告clearspools.pages.dev:冒充 Ethereum,PhishDestroy 于 2026-10-22 检测到。风险:关键(75/100)。注册商:Cloudflare。托管:AS13335 Cloudflare, Inc。请勿输入登录凭据,也不要连接钱包。
冒充 Ethereum: clearspools.pages.dev — 未验证. 证据摘要: URLScan capture; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 75/100. 注册商…
The evidence summary below uses retained observations. Each source keeps its own collection date.
结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a1656e-7d20-75bc-a126-6c10ae1b7064 |
|---|---|
| Final url | https://clearspools.pages.dev/ |
| 状态 | 200 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://clearspools.pages.dev/",
"from": "http://clearspools.pages.dev/",
"status": 307
}
] |
| Ip | 172.66.44.77 |
| Contacted domains | [
"api.web3modal.com",
"cdnjs.cloudflare.com",
"relay.walletconnect.com",
"verify.walletconnect.com",
"fonts.googleapis.com",
"cdn.jsdelivr.net"
] |
| Contacted IP addresses | [
"104.20.35.94",
"142.250.154.95",
"104.18.29.72",
"104.17.207.5",
"104.17.25.14",
"172.66.44.77"
] |
| Asns | [
"13335",
"15169"
] |
| Countries | [
"US"
] |
| Linked domains | [
"clearpool.finance",
"docs.clearpool.finance",
"www.bloomberg.com",
"www.coindesk.com",
"blockworks.co",
"www.theblock.co",
"techcrunch.com",
"twitter.com",
"t.me",
"github.com",
"clearpool.medium.com",
"discord.gg",
"youtube.com",
"vest.clearpool.finance"
] |
| Social | [
"https://twitter.com/ClearpoolFin",
"https://t.me/clearpoolofficial",
"https://github.com/clearpool-finance",
"https://clearpool.medium.com",
"https://discord.gg/YYzxscA4nu",
"https://youtube.com/@Clearpool"
] |
| Document hash | 62375c90f73ffa04cd597b78abd1815bb703948ad8cd7c2d3cb9a9970968e4f6 |
| Script hashes | [
"c23401963dd0f17097ff02739884edd35c35192354fa03092a299e67dd089aaa",
"d606b02985e195a054040592a5d28cde6d583fe84bee81ed8b4b0327e354d0ff"
] |
| Globals | [
"__p_1975024398",
"__p_7225869659",
"__p_0025289187",
"__getGlobal",
"__globalObject",
"__TextDecoder",
"__Uint8Array",
"__String",
"__Array",
"utf8ArrayToStr",
"__p_9198485754",
"__p_3892706063",
"__p_3222198873",
"__p_6682806237",
"__p_4589215934",
"__p_8683109659",
"__p_9946335330",
"__p_0842098557",
"__p_3319181055",
"__p_1111113659",
"__p_3967831545_calc",
"__p_0215176124",
"__p_0334860562",
"_0x1d3a99",
"_0x1d41",
"_0x4724",
"__p_3328859022",
"__p_2969246991",
"CryptoJS",
"_ethers",
"ethers",
"litPropertyMetadata",
"reactiveElementVersions",
"litHtmlVersions",
"litElementVersions",
"Buffer",
"global",
"process",
"walletConnectVars",
"MerkleTree"
] |
| Storage keys | [
"wagmi.store"
] |
| Tls | {
"san": [
"clearspools.pages.dev",
"*.clearspools.pages.dev"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "clearspools.pages.dev",
"protocol": "QUIC",
"valid_to": "2026-12-12T03:33:13Z",
"valid_from": "2026-09-13T02:34:28Z"
} |
| 域名年龄(天) | 807 |
| Apex age days | 807 |
| Tls age days | 39 |
| TLS 有效天数 | 90 |
| Requests | 87 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 96,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"genericcrypto"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Generic Crypto"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin"
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 49,
"malicious": 8,
"suspicious": 1,
"undetected": 34
} |
|---|---|
| Vendor labels | {
"ESET": "phishing",
"G-Data": "phishing",
"Sophos": "phishing",
"Fortinet": "phishing",
"Kaspersky": "phishing",
"LevelBlue": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "suspicious",
"Forcepoint ThreatSeeker": "phishing"
} |
| Reputation | 0 |
| 注册商 | CloudFlare, Inc. |
| 创建 | 2020-09-02T02:33:29Z |
| Expires | 2026-09-02T02:33:29Z |
| Updated | 2025-03-17T14:56:22Z |
| 首次发现 | 2024-08-06T09:38:37Z |
| DNS 记录 | [
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "kate.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "kate.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:310c::ac42:2fb3"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:310c::ac42:2c4d"
},
{
"ttl": 300,
"type": "A",
"value": "172.66.47.179"
},
{
"ttl": 300,
"type": "A",
"value": "172.66.44.77"
},
{
"ttl": 21600,
"type": "NS",
"value": "tanner.ns.cloudflare.com"
}
] |
| Dns at | 2026-10-22T00:47:42Z |
| Jarm | 27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6 |
| Certificate | {
"san": [
"clearspools.pages.dev",
"*.clearspools.pages.dev"
],
"issuer": "Google Trust Services / WE1",
"serial": "ac15bcc44151e11b0eb2de0e5a5aaca2",
"sha256": "716997dd8bf3b34ffdc3705e120817d06082f1ded54b06d4e7d0808bae9eb551",
"subject": "clearspools.pages.dev",
"valid_to": "2026-12-12T03:33:13Z",
"valid_from": "2026-09-13T02:34:28Z"
} |
| 注册记录 | {
"registrar": "CloudFlare, Inc.",
"registrar_iana_id": "1910",
"registrar_url": "None",
"created": "2020-09-02T02:33:29Z",
"updated": "2023-09-04T18:15:07Z",
"expires": "2026-09-02T02:33:29Z",
"status": [
"clientDeleteProhibited",
"clientTransferProhibited",
"clientUpdateProhibited",
"clientdeleteprohibited",
"clienttransferprohibited",
"clientupdateprohibited"
],
"nameservers": [
"adi.ns.cloudflare.com",
"karl.ns.cloudflare.com"
],
"dnssec": "unsigned"
} |
不是。PhishDestroy 将 clearspools.pages.dev 归类为“冒充 Ethereum”(风险:关键,75/100),首次检测于 2026-10-22。请将该网站视为不安全。
不安全。请勿在 clearspools.pages.dev 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
最近检查
Edge-IP 声誉不属于此域。
kate.ns.cloudflare.comtanner.ns.cloudflare.com位置信息描述的是 IP 网络。
716997dd8bf3b34ffdc3705e120817d06082f1ded54b06d4e7d0808bae9eb551clearspools.pages.dev*.clearspools.pages.dev已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
可访问
已存储 52 个仿冒域名
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
clearspools.pages.dev
列入名单的域名至少会收到一份滥用举报;此条目没有保留的通知记录。
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
clearspools.pages.dev)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。