guolvqi[.]cn
“易欧交易所app下载-权威交易平台【官方网站】”
guolvqi.cn — 未验证. 证据摘要: VirusTotal 5/95 (ADMINUSLabs, alphaMountain.ai, CyRadar, Fortinet, Webroot); PhishDestroy score 78/100. 注册商: 厦门纳网科技股份有限公司.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, guolvqi.cn, presents itself as the official download site for the "易欧交易所" (Yiou Exchange) trading platform, as indicated by its page title. It poses a threat as a potential phishing or malware distribution site, impersonating a legitimate cryptocurrency exchange to deceive users into downloading a malicious application or revealing credentials.
Technical evidence shows the site was flagged by 5 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, CyRadar, Fortinet, and Webroot, and appears on one blocklist. It was created on 2025-08-06 and registered through 厦门纳网科技股份有限公司. The domain resolves to IP address 149.88.92.249, hosted in Hong Kong by AS137899 I LAYER LIMITED. It uses a Let's Encrypt SSL certificate (R13) and has nameservers ns1.judns.com, ns1.julydns.com, ns2.judns.com, and ns2.julydns.com.
The site is currently offline or down. Based on the detection by multiple security vendors and its recent creation date, the risk level is considered high for users who may have interacted with it while it was active.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 1 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 置信度 100%VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。