predeposit-stable[.]net

The domain predeposit-stable.net is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. No specific brand or cryptocurrency drainer kit was identified in association with this domain. As of the latest verification, predeposit-stable.net has been taken offline, though it previously exhibited elevated risk indicators.

Technical analysis reveals that predeposit-stable.net was flagged by 3 of 95 security vendors on VirusTotal, including Fortinet, Gridinsoft, and SOCRadar. The domain was registered through NiceNIC International Group Co., Limited on November 05, 2025, and resolved to the IP address 104.21.62.180, hosted by Cloudflare, Inc. in the United States. It appeared on 2 security blocklists, PhishDestroy and ScamSniffer, and had no SSL certificate, as indicated by the absence of an issuer. The observed page title was 'Just a moment...', and Gridinsoft assigned it a trust score of 0 out of 100. The domain used Cloudflare nameservers: kami.ns.cloudflare.com and matteo.ns.cloudflare.com.

Users who may have interacted with predeposit-stable.net should immediately change any exposed passwords and enable two-factor authentication on affected accounts. Monitor financial statements and credit reports for signs of fraudulent activity. Report the domain to relevant authorities or platforms such as Google Safe Browsing, the Anti-Phishing Working Group (APWG), or local cybercrime units to aid in mitigation efforts.