sso-en-coin-pro-auth[.]square[.]site
“Nur einen Moment…”
sso-en-coin-pro-auth.square.site — 未验证. 证据摘要: VirusTotal 10/91 (ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, Fortinet); CF Radar malicious; PhishDestroy score 88/100. 注册商: MarkMonitor.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This site, sso-en-coin-pro-auth.square.site, presents a page title reading "Nur einen Moment…" (German for "Just a moment…"), a common placeholder for phishing or credential harvesting pages. The domain name structure "sso-en-coin-pro-auth" strongly suggests it impersonates a cryptocurrency platform's single sign-on (SSO) authentication portal. The threat is credential theft: users attempting to log in may have their account credentials stolen, leading to unauthorized access and potential financial loss.
Technical evidence: VirusTotal reports 13 out of 95 security vendors flag the site as malicious, including ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CyRadar. It resides on one blocklist. The domain is hosted at IP 74.115.51.5 (United States), assigned to AS27647 Weebly, Inc. The domain was registered on 2019-02-05 via MarkMonitor, Inc., and uses Let's Encrypt SSL certificate (serial E7). Nameservers are ns-1248.awsdns-28.org, ns-1816.awsdns-35.co.uk, ns-311.awsdns-38.com, and ns-810.awsdns.
Current status: BANNED. Risk level is high due to confirmed malicious detection by multiple vendors, active blocklisting, and clear impersonation of a cryptocurrency authentication page. Immediate action is required to block access and warn users.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: square.site
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain square.site behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 2 identified
Cloud computing platform offering compute, storage, and networking services.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comVirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。