raikupool[.]xyz
raikupool.xyz — 服务器错误 (HTTP 502). 诈骗类型:Investment Scam. 证据摘要: VirusTotal 5/93 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 65/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of the domain raikupool.xyz indicates it was associated with an investment scam operation, as classified by one security blocklist. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and resolved to the IP address 104.21.61.29, which is part of AS13335 (Cloudflare, Inc.) located in the United States. Nameservers for the domain were chin.ns.cloudflare.com and conrad.ns.cloudflare.com, further confirming Cloudflare as the hosting and DNS provider. The SSL certificate was issued by Google Trust Services (WE1), a common configuration for domains leveraging Cloudflare’s infrastructure. At the time of investigation, the domain was flagged by five out of 93 security vendors on VirusTotal, suggesting detection by a subset of the security community.
It also appeared on one security blocklist, specifically PhishDestroy. The page title captured during initial scans was 'Just a moment...', a default response often seen when Cloudflare’s security or caching mechanisms are active, which may indicate attempts to obscure malicious content or evade automated detection. Technologies detected on the domain included Cloudflare Browser Insights and HTTP/3, consistent with Cloudflare’s standard service offerings. The domain is currently offline, reducing immediate risk to end users. However, the infrastructure remains registered and could be reactivated.
Defenders should monitor for re-emergence of this domain or similar patterns, such as domains registered through the same registrar or resolving to the same IP range. Network-level blocking of 104.21.61.29 and related Cloudflare IPs may mitigate risk if the domain resurfaces. Given the investment scam classification, organizations in financial sectors should prioritize awareness and detection of related phishing attempts. No additional details about the specific content or targets of the scam are available at this time.
网络安全情报 Registrar context
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-15 03:16:34 UTC
所用技术 · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of raikupool.xyz · checked Apr 11, 2026
证据与外部报告
PD-20260214-A3F6AC Recipient: abuse@nicenic.net 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。