save-eth[.]bond
save-eth.bond 网络钓鱼与安全检查
“defi-ETH”
save-eth.bond — 内容不可用 (HTTP 502). 诈骗类型:Crypto Scam. 证据摘要: VT 2/93 (Fortinet, SOCRadar); URLQuery 0; URLScan no malicious verdict; GSB no flag; BL 0; PD 61/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy first observed save-eth.bond on Feb 26, 2026. The captured page title is “defi-ETH”. Stored page analysis classifies the content as crypto scam. Current evidence score: 61/100 (high).
One source contains a positive finding: VirusTotal. VirusTotal recorded 2 detections among 93 engines: Fortinet, SOCRadar on Feb 23, 2026 at 12:19 UTC. Non-positive and contextual checks: AlienVault OTX listed 1 community pulse reference (not vendor detections) on Mar 1, 2026 at 05:59 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:21 UTC.
HTTP 502 was recorded on Aug 7, 2026 at 01:24 UTC; content was unavailable. The recorded creation date for the domain is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 2606:4700:3030::6815:6001 on AS13335 (CLOUDFLARENET, US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Mar 24, 2026 at 01:21 UTC returned 61/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists WE1 as the certificate issuer.
Stored content provides classification context, but only one source contains a positive finding.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
SHORTDOT 域名区 · 公开证据
.bond
为滥用而生,再把“保护”卖回来。
为滥用而生,再把“保护”卖回来。
我们的证据档案追踪 ShortDot 七个域名区内的每一个已注册域名。据估算,该注册局每年的批发收入约为 1260 万美元,但截至目前尚未发现任何经核实的合法企业。我们的评估是:这些域名区几乎只被当作一次性滥用基础设施使用,而同一商业圈内的公司又向品牌方出售防范这些垃圾的“保护”服务。ShortDot 获得收入,互联网得到垃圾场。
取证情报
VirusTotal 分析
证据与外部报告
“The PhishDestroy system has identified this domain as a phishing threat, flagged both by our internal parser and reported by users. We also cross-reference with public databases and other antivirus systems.”
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。