跳转到安全报告
域安全和威胁情报
o-nedvip.net 的网站图标

o-nedvip.net

“Crypto Node”

注册商
Gname
Resolved IP
172.67.132.20
Registered
2026年10月8日
PhishDestroy assessment 中等
可用性 最后已知的活跃状态 最新存储的可达性观察 观察到 · HTTP probe
存储的 PhishDestroy 威胁列表 诈骗类型:Crypto Drainer 年轻域名:14 天龄
OTX: 4 refs 2026年10月22日 CDN
API
Suspicious Domain — Listed on PhishDestroy
存储的 PhishDestroy 威胁列表. VirusTotal analysis stored; no vendor detections were recorded at check time. 请格外小心——不要输入凭据或个人信息。
VirusTotal
engine detections
Google Safe Browsing
OTX
community references
页面快照
打开图库
域名年龄
报告概览

o-nedvip.net — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 0/92; URLScan capture; PhishDestroy score 25/100. 注册商: Gname.

The evidence summary below uses retained observations. Each source keeps its own collection date.

来源证据VirusTotal 0 / 92 · OTX 4 references 6 sources

VirusTotal

0 / 92 engine detections

打开报告

Google Safe Browsing

无威胁标记

打开报告

结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。

已采集的来源详情

已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。

URLScan · 2026-10-22T17:10:06Z

观察到: · Retrieved:

Uuid
01a16496-ff7a-7627-9f22-591b326fba71
Final url
https://o-nedvip.net/
状态
200
已重定向
https-only
Redirects
[
    {
        "to": "https://o-nedvip.net/",
        "from": "http://o-nedvip.net/",
        "status": 307
    }
]
Ip
172.67.132.20
Contacted domains
[
    "apifwegr.top",
    "static.cloudflareinsights.com"
]
Contacted IP addresses
[
    "172.64.80.1",
    "104.16.79.73",
    "172.67.132.20"
]
Asns
[
    "13335"
]
Document hash
c3de37f9205fde65dd61203603caa0c28a51e14691065b4d508d365751db898e
Script hashes
[
    "cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151",
    "c1a9ccbd23dc0138efa0265bffcecc3a3a31a444fbcf3b458c38759be3f8c404",
    "1e8382f580974cbb1bf2da60e27b495361ac4151e101a2d315bebfda613db86a",
    "c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd",
    "bc0ee7b030469d7b92b0d448924dd2244de2574e05487b7230fa579dca06a6e4"
]
Globals
[
    "__ACChat",
    "addLink",
    "addMeta",
    "TradingView",
    "lib",
    "rem",
    "dpr",
    "__VUE_INSTANCE_SETTERS__",
    "__INTLIFY_PROD_DEVTOOLS__",
    "__INTLIFY_JIT_COMPILATION__",
    "__INTLIFY_DROP_MESSAGE_COMPILER__",
    "__VUE_I18N_FULL_INSTALL__",
    "__VUE_I18N_LEGACY_API__",
    "PubSub",
    "regeneratorRuntime",
    "_pdfjsCompatibilityChecked",
    "setImmediate",
    "clearImmediate",
    "__config",
    "__theme",
    "__VUE__",
    "__vite_is_modern_browser",
    "__cfBeacon",
    "ACChat"
]
Storage keys
[
    "CRYPTONODE_THEME",
    "main",
    "CRYPTONODE_LANGUAGE"
]
Tls
{
    "san": [
        "*.o-nedvip.net",
        "o-nedvip.net"
    ],
    "cipher": "AES_128_GCM",
    "issuer": "YE1",
    "subject": "o-nedvip.net",
    "protocol": "QUIC",
    "valid_to": "2027-01-06T14:36:27Z",
    "valid_from": "2026-10-08T14:36:28Z"
}
域名年龄(天)
12
Apex age days
12
Tls age days
14
TLS 有效天数
89
Requests
24
Provider verdicts
{
    "engines": {
        "tags": [
            "urlscan-ml",
            "urlscan-ml-60c5e22"
        ],
        "score": 95,
        "malicious": true
    },
    "overall": {
        "score": 0,
        "malicious": false
    }
}
HTTP headers
{
    "server": "cloudflare",
    "content-type": "text/html",
    "strict-transport-security": "max-age=31536000"
}
Cloudflare Radar · 2026-10-22T17:09:40Z

观察到: · Retrieved:

Uuid
95e95799-f013-4f83-9e54-c72feeb5e90c
Final url
https://o-nedvip.net/
状态
200
History
[
    {
        "url": "https://o-nedvip.net/",
        "status": 200
    }
]
DOM structure hash
a0bade3d1725ebf308d604d6ac968a4bc155f22c3d915a955fef03603ae0c5c8
Document hash
c3de37f9205fde65dd61203603caa0c28a51e14691065b4d508d365751db898e
域名风险
[
    "New Domains",
    "Security Risks"
]
Radar rank
{
    "bucket": ">200000"
}
DNS 记录
[
    {
        "name": "o-nedvip.net",
        "type": "A",
        "value": "104.21.4.125"
    },
    {
        "name": "o-nedvip.net",
        "type": "A",
        "value": "172.67.132.20"
    },
    {
        "name": "o-nedvip.net",
        "type": "AAAA",
        "value": "2606:4700:3037::6815:47d"
    },
    {
        "name": "o-nedvip.net",
        "type": "AAAA",
        "value": "2606:4700:3036::ac43:8414"
    }
]
DNSSEC 有效
false
Ip
104.21.4.125
注册记录
{
    "registrar": "Gname.com Pte. Ltd.",
    "created": "2026-10-08T15:29:17Z",
    "updated": "2026-10-08T15:32:30Z",
    "expires": "2027-10-08T15:29:17Z",
    "nameservers": [
        "carla.ns.cloudflare.com",
        "vasilii.ns.cloudflare.com"
    ]
}
VirusTotal · 2026-10-22T17:51:58Z

观察到: · Retrieved:

Vendor result counts
{
    "timeout": 0,
    "harmless": 53,
    "malicious": 0,
    "suspicious": 0,
    "undetected": 39
}
Reputation
0
注册商
Gname.com Pte. Ltd.
创建
2026-10-08T15:29:17Z
Expires
2027-10-08T15:29:17Z
Updated
2026-10-08T15:32:32Z
首次发现
2026-10-08T22:32:43Z
DNS 记录
[
    {
        "ttl": 21600,
        "type": "NS",
        "value": "vasilii.ns.cloudflare.com"
    },
    {
        "ttl": 300,
        "type": "A",
        "value": "104.21.4.125"
    },
    {
        "ttl": 300,
        "type": "A",
        "value": "172.67.132.20"
    },
    {
        "ttl": 1800,
        "type": "SOA",
        "rname": "dns.cloudflare.com",
        "value": "carla.ns.cloudflare.com"
    },
    {
        "ttl": 300,
        "type": "AAAA",
        "value": "2606:4700:3036::ac43:8414"
    },
    {
        "ttl": 300,
        "type": "AAAA",
        "value": "2606:4700:3037::6815:47d"
    },
    {
        "ttl": 21600,
        "type": "NS",
        "value": "carla.ns.cloudflare.com"
    }
]
Dns at
2026-10-22T17:57:29Z
Jarm
27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c
Certificate
{
    "san": [
        "*.o-nedvip.net",
        "o-nedvip.net"
    ],
    "issuer": "Let's Encrypt / YE1",
    "serial": "6bd3f6e0dbddb41f1f671b078d1a5557bb",
    "sha256": "a82833686fc2d04b4af6241b14e304112957d835411464f4c87d5e5420967457",
    "subject": "o-nedvip.net",
    "valid_to": "2027-01-06T14:36:27Z",
    "valid_from": "2026-10-08T14:36:28Z"
}
注册记录
{
    "registrar": "Gname.com Pte. Ltd.",
    "registrar_iana_id": "1923",
    "registrar_url": "http://www.gname.com",
    "created": "2026-10-08T15:29:17Z",
    "updated": "2026-10-08T15:32:30Z",
    "expires": "2027-10-08T15:29:17Z",
    "status": [
        "clientTransferProhibited"
    ],
    "nameservers": [
        "carla.ns.cloudflare.com",
        "vasilii.ns.cloudflare.com"
    ],
    "dnssec": "unsigned"
}
Registry data
{
    "status": [
        "client transfer prohibited"
    ],
    "events": {
        "expiration": "2027-10-08T15:29:17Z",
        "registration": "2026-10-08T15:29:17Z",
        "last update of RDAP database": "2026-10-22T15:32:34Z"
    }
}
Website checks · 2026-10-22T17:11:54Z
Mail configuration
{
    "spf_lookups": 0
}
CAA 记录
{
    "domain": "o-nedvip.net"
}
Protective DNS results
{
    "resolvers": 12,
    "blocked_count": 0
}
Web archive observations
{
    "last": "2026-10-22T17:09:44Z",
    "first": "2026-10-09T15:43:18Z",
    "changes": 1,
    "days_archived": 3,
    "scans_per_day": 0.15,
    "avg_page_bytes": 3653
}
页面标题与元数据
{
    "title": "Crypto Node",
    "robots": "all",
    "ogImage": "./platform/CryptoNode/logo_144.png?2.2.1777578516831",
    "ogTitle": "Crypto Node",
    "keywords": "Crypto Node",
    "themeColor": "#ffffff",
    "description": "Crypto Node",
    "ogDescription": "Crypto Node"
}
Trackers
{
    "requests": 16
}
表单与混合内容
{
    "third_party_scripts": 0
}
状态
{
    "up": true,
    "code": 200,
    "timings": {
        "dns": 17,
        "tls": 21,
        "wait": 310,
        "connect": 8,
        "download": 0
    },
    "response_ms": 356
}
TLS connection
{
    "alpn": "h2",
    "cipher": "TLS_AES_256_GCM_SHA384",
    "protocol": "TLSv1.3",
    "versions": [
        "TLSv1",
        "TLSv1.1",
        "TLSv1.2",
        "TLSv1.3"
    ],
    "authorized": true,
    "forward_secrecy": true
}
Ports
{
    "open": [
        80,
        443,
        8080
    ]
}
Carbon
{
    "bytes": 6387,
    "co2_grams": 0.0002,
    "cleaner_than": 81
}
Dns server
{
    "ns": [
        {
            "ip": "172.64.35.26",
            "host": "vasilii.ns.cloudflare.com"
        },
        {
            "ip": "162.159.38.86",
            "host": "carla.ns.cloudflare.com"
        }
    ],
    "zone": "o-nedvip.net"
}
Location
{
    "ip": "2606:4700:3037::6815:47d",
    "asn": "13335",
    "org": "Cloudflare, Inc.",
    "city": "Toronto",
    "country": "CA"
}
Ssl
{
    "issuer": "Let's Encrypt / YE1",
    "subject": "o-nedvip.net"
}
DNS 记录
{
    "A": [
        "104.21.4.125",
        "172.67.132.20"
    ],
    "NS": [
        "vasilii.ns.cloudflare.com",
        "carla.ns.cloudflare.com"
    ],
    "SOA": "{\"nsname\": \"carla.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416959408, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
    "AAAA": [
        "2606:4700:3037::6815:47d",
        "2606:4700:3036::ac43:8414"
    ]
}
Dnssec
{
    "ds": false,
    "rrsig": false,
    "dnskey": false
}
Hsts
{
    "header": "max-age=31536000",
    "message": "HSTS header does not include all subdomains."
}
HTTP security policies
{
    "xFrameOptions": false,
    "referrerPolicy": false,
    "xXSSProtection": false,
    "permissionsPolicy": false,
    "xContentTypeOptions": false,
    "contentSecurityPolicy": false,
    "strictTransportPolicy": "max-age=31536000",
    "crossOriginOpenerPolicy": false,
    "crossOriginEmbedderPolicy": false,
    "crossOriginResourcePolicy": false
}
Firewall
{
    "waf": "Cloudflare",
    "has_waf": true
}
Get ip
{
    "ip": "2606:4700:3037::6815:47d",
    "family": 6
}
Redirects
{
    "chain": [
        "https://o-nedvip.net"
    ]
}
Tech stack
{
    "technologies": [
        "Vue.js",
        "PubSubJS",
        "HSTS",
        "Cloudflare",
        "PDF.js",
        "Vite",
        "Open Graph",
        "HTTP/3"
    ]
}
注册记录
{
    "registrar": "Gname.com Pte. Ltd.",
    "created": "2026-10-08T15:29:17Z",
    "updated": "2026-10-08T15:32:30Z",
    "expires": "2027-10-08T15:29:17Z",
    "status": [
        "clientTransferProhibited https://icann.org/epp"
    ],
    "nameservers": [
        "carla.ns.cloudflare.com",
        "vasilii.ns.cloudflare.com"
    ]
}
HTTP headers
{
    "headers": {
        "server": "cloudflare",
        "content-type": "text/html",
        "strict-transport-security": "max-age=31536000"
    }
}

延伸阅读

Blocklist matchesPhishDestroy 1
PhishDestroy PhishDestroy list 查看来源

已保存的截图 · 6 张截图

域名详情

域名
IP Context Cloudflare shared edge origin IP hidden Edge-IP 声誉不属于此域。
OTX tags 2026-10activeall-domainsblocklistcontentcrypto域名drainerfraudlivemonthlyphishdestroyphishingscam
注册商 Gname US(US)
滥用举报联系方式complaint@gname.com
ICANN 注册管理机构ICANN Lookup (RDAP) →
注册信息创建 2026年10月8日 (14d · Very New!) — Expires 2027年10月8日
HTTP 状态码200
技术详情Provenance & timestamps
首次发现2026年10月22日
DOM Analysisanalyzed 2026年10月22日score 5/100
Submitted URLhttp://o-nedvip.net/
Favicon Hash
案件 ID
Observed page title
Crypto Node
TLS 证书
颁发者 Let's Encrypt / YE1 · 存储的有效期将在 75 天后结束

网络 & 证书

已存档技术证据

网络 & DNS

Shared CDN edge
Resolved IP
172.67.132.20
网络 ASN
AS13335
Organization
Cloudflare, Inc.
Observed location
Toronto, CA
Server header
cloudflare

Edge-IP 声誉不属于此域。

域名服务器 2

  • carla.ns.cloudflare.com
  • vasilii.ns.cloudflare.com

位置信息描述的是 IP 网络。

TLS 证书

Issuer
Let's Encrypt / YE1
生效时间
2026-10-08 14:36:28
到期时间
2027-01-06 14:36:27
Hostname coverage
已存档证书日期有效
Validity
在存档的有效期内
采集来源
PhishDestroy collector
证书指纹a82833686fc2d04b4af6241b14e304112957d835411464f4c87d5e5420967457
证书名称 · 2 个 SAN
  • *.o-nedvip.net
  • o-nedvip.net

已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。

举报此域名 提交证据,帮助保护他人
网站性能分析

Google PageSpeed Insights — 移动端性能审核: o-nedvip.net · checked Oct 22, 2026

55
Needs Work
Performance
FCP
10.25s
首次内容绘制
LCP
14.85s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
126ms
Total Blocking Time
SI
10.25s
Speed Index
数据来源: Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
已存档快照证据 1 snapshot

由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。

Archived HTTP response HTTP 200
Requested URL: http://o-nedvip.net/
Crypto Node
Crypto Node
响应
HTTP 200
HTML body
6.2 KB
Compressed
2.2 KB
Links
0 internal · 0 external
Detected technologies
cloudflare
Selected response headers
Content-Type: text/html
Server: cloudflare
CF-Cache-Status: DYNAMIC
Content-Encoding: gzip
Security headers present
Strict-Transport-Security
HSTS: observed DNSSEC:未观测到 WAF / firewall: observed 伪装标记:未观测到
Favicon fingerprint: a47762da05b5973e3173e983a58b27f3c9d0838b3abdea3f34291e0046b84b6b
Open Graph 标题: Crypto Node
Open Graph 描述: Crypto Node
Saved response-header values · 14
alt-svc
h2=":443"; ma=60
cf-cache-status
DYNAMIC
CF-RAY
a4ea1a64c9267da6-FRA
Connection
keep-alive
Content-Encoding
gzip
Content-Type
text/html
Date
Thu, 22 Oct 2026 17:08:16 GMT
Last-Modified
Fri, 01 May 2026 03:48:36 GMT
Nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rkDjOb6Npy8L0PVt4RchTiaiGF9P1Vv%2F6IT50aK5NEO0MWqhOaBGRyisObQ5Qb67nD4nNso26yyBBzqgCd9vWbC44q%2ByeXBlxLo%2FFuyfOg0mQlcJ4%2BqUgafihGH0z%2BM%3D"}]
Server
cloudflare
Strict-Transport-Security
max-age=31536000
Transfer-Encoding
chunked
Vary
Accept-Encoding

由采集器保留的数值;较长的值可能在采集时被截短。

Registration & observation details1

Availability observations

最近一次可访问观测

估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。

已存档的观测历史1

由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。

  1. 可用性监测 · 首次采集记录

    可访问

已记录的活动

5 entries
  1. AlienVault OTX

    4 community references

    查看来源
  2. Google Safe Browsing

    无威胁标记

    查看来源
  3. VirusTotal

    0/92 engine detections

    查看来源
  4. URLScan

    Page captured

    查看来源
  5. 已添加至 PhishDestroy

    o-nedvip.net

    查看来源

伪装检测

比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。

o-nedvip.net

证据与外部报告

深度分析
Help & reporting

您是否受到本网站的影响?

4 个证据信号组已关联 0 条已存档通知记录 最后已知的活跃状态

列入名单的域名至少会收到一份滥用举报;此条目没有保留的通知记录。

如果凭据已泄露,请立即报告。 切勿理会声称可追回资金的诈骗者。

如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。

Official reporting routes

警惕“数据恢复”诈骗! 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →

向当地主管部门报告

选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。

97个国家目录

Template-based draft · optional AI wording assistance requires separate consent

AI辅助草稿——事件详细信息由AI提供商处理 · 自行审核并提交
After a phishing incident

针对受害者的建议与指导

请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。

我应该立即采取什么措施?

紧急

停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。

  • 更改所有密码 — 电子邮件、Exchange 账户,以及任何使用同一密码的账户
  • 启用双因素认证 使用身份验证器应用(而非短信)。禁用基于短信的恢复功能
  • 冻结卡片 如果您在钓鱼网站上输入了银行信息

我应该为报告收集哪些信息?

联邦调查局(FBI)指南

请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗

  • 付款记录 — 如果已付款,请保存收据、金额、日期、支付服务商和收款方信息。
  • 确切日期和时间 — 每笔交易的详情以及与诈骗者的首次接触
  • 屏幕截图 — 诈骗网站、聊天消息、电子邮件、钱包交易、社交媒体
  • 所有网址和域名 诈骗者使用的(包括 o-nedvip.net)
  • 通信 — 诈骗者使用的电子邮件、短信、电话号码、用户名

即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。

我应该向哪里举报这起诈骗?

  • 联邦调查局(FBI)IC3 — 互联网犯罪投诉中心(美国联邦举报渠道)
  • 欧洲刑警组织 — 欧洲网络犯罪报告(欧盟)
  • Your bank or payment provider — 如果资金或银行卡信息已泄露,请通过官方联系方式尽快联系其反欺诈团队。
  • 当地警方 — 即使无法立即采取行动,也能留下正式记录

举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。

How do phishing scams typically work?

  • 虚假网站 — 与正规网站完全一致的克隆网站,仅域名略有改动
  • 猪的屠宰 — 通过Telegram/WhatsApp/交友软件花数周时间建立信任,随后钱被骗走
  • 退款诈骗 — 诈骗者冒充资金追回机构并索要预付费用。在独立核实服务方之前,切勿分享助记词或付款
  • 利用人工智能实施的诈骗 — 深度伪造、自动化网络钓鱼以及人工智能生成的网站,使得欺诈行为更难被察觉

将来我该如何保护自己?

  • 将官方网站添加到书签 — 切勿点击来自电子邮件、私信或广告中的链接
  • 验证域名 — 查看 PhishDestroy 在进行互动之前,请检查HTTPS、拼写和域名注册时间。
  • “好得令人难以置信”=骗局 — 保证收益、名人代言、紧迫的截止日期

Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams

随时掌握最新信息,确保安全

请实时监控威胁,或者如果您认为这是误报,请对该条目提出异议

实时威胁动态 对该列表提出异议
关于本报告来源、观测日期与更正

本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。

快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。

嵌入此报告附带证据链接的紧凑型小组件
HTML · IFRAME

嵌入此报告

在您的网站或博客上分享此威胁情报

embed.html
<iframe
  src="https://phishdestroy.io/zh/embed/domain/o-nedvip.net"
  title="PhishDestroy threat report for o-nedvip.net"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>