cryptoslam-marketing[.]io
“Cryptoslam”
cryptoslam-marketing.io — 内容不可用. 诈骗类型:Banking Phishing. 证据摘要: VirusTotal 13/94 (ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, ESET); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 89/100. 注册商: Dynadot.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis indicates that the domain cryptoslam-marketing.io was registered on 11 February 2026 through Dynadot LLC and immediately pointed to the Cloudflare network (AS13335) with the IP address 172.67.209.118. The domain resolves to Cloudflare’s edge service and utilizes modern web technologies including Vue.js, HTTP/3, HSTS, and Cloudflare Browser Insights, suggesting a legitimate hosting profile that can obscure malicious payloads. The page title returned by the server is “Cryptoslam”, and the site is classified as a banking‑phishing operation targeting users of cryptocurrency services.
Reputation metrics are uniformly negative: the Gridinsoft trust score is 0 / 100, the domain appears on three independent security blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans report that 13 of 94 antivirus engines flag the domain, reinforcing the malicious assessment. The nameservers ali.ns.cloudflare.com and eric.ns.cloudflare.com are standard Cloudflare delegations, providing no additional attribution.
As of the report date, the site has been taken offline, but the infrastructure footprint remains observable and could be re‑activated or leveraged for other malicious campaigns. Defenders should continue to deny DNS resolution for the domain, enforce blocklist entries, monitor traffic to the associated Cloudflare IP range for anomalous activity, and consider adding the domain to internal phishing‑prevention feeds. Ongoing vigilance is advised because the underlying hosting arrangement allows rapid redeployment of the site under the same domain or similar identifiers.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | cryptoslam-marketing.io/assets/index.3042f21d.js |
malware | Detects file containing Telegram Bot API |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 5 identified
Progressive JavaScript framework for building user interfaces.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of cryptoslam-marketing.io · checked Mar 16, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。