dravexalix[.]com
dravexalix.com — 未验证. 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 7/93 (ADMINUSLabs, alphaMountain.ai, CRDF, Google Safebrowsing, Gridinsoft); Google Safe Browsing flagged; PhishDestroy score 80/100. 注册商: Hosting Concepts.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain dravexalix.com was registered on February 21, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently active. It resolves to the IP address 185.53.179.136, which is hosted in Germany and associated with the TEAM‑INTERNET network. The site is delivered via Cloudflare and supports HTTP/3, returning an HTTP 200 response despite the absence of an SSL certificate. Reputation services have assigned a trust score of 0 out of 100, and the domain appears on three security blocklists.
Independent blocklists from PhishDestroy, MetaMask and SEAL have already listed the host as malicious. Google Safe Browsing flags the site for social engineering, and VirusTotal reports that seven of ninety‑three scanning engines have identified the domain as malicious. The identified scam type is brand impersonation, indicating that the site is likely being used to lure victims by pretending to represent a legitimate brand. Nameservers ina1.registrar.eu, ina2.registrar.eu and ina3.registrar.eu are consistent with the registrar’s infrastructure.
No SSL certificate is present, which may hinder encrypted communications but does not prevent credential harvesting. Defenders should immediately block traffic to dravexalix.com and its resolved IP 185.53.179.136 at the network perimeter, update intrusion detection signatures to include the domain and associated nameservers, and monitor for any changes in the hosting configuration or certificate deployment. Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any evolving payloads. Organizations should also educate users about the risk of brand‑impersonation attacks and reinforce verification of legitimate communications, especially when URLs differ from expected corporate domains.
威胁响应 Pipeline
公共封禁名单状态
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。