tr[.]padisahbet-giris2026[.]org
“PadiÅahbet - PadiÅahbet GiriÅ Adresi - PadiÅahbet Güncel GiriÅ 2026”
tr.padisahbet-giris2026.org — 内容不可用 (HTTP 502). 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 7 detections (engine total unavailable) (BitDefender, Forcepoint ThreatSeeker, G-Data, Gridinsoft, Kaspersky); URLQuery 4 alerts; CF Radar malicious; PhishDestroy score 75/100. 注册商: Squarespace Domains.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
tr.padisahbet-giris2026.org is an active crypto drainer domain impersonating a gaming platform, posing an elevated risk to cryptocurrency users. This site was designed to trick visitors into connecting wallets and draining funds under the guise of a legitimate Turkish betting service ('padisahbet-giris2026'). The threat actor leverages spoofed branding and urgency to harvest private keys and authorize malicious transactions. Security researchers and users should treat this domain with extreme caution and avoid all interactions involving wallet connections or fund transfers.
This domain was flagged by PhishDestroy and confirmed through multiple intelligence sources. It resolves to IP 104.21.22.105, uses a Let’s Encrypt SSL certificate, and was registered on May 07, 2026 through Squarespace Domains LLC. VirusTotal reports 7 out of 95 security vendors detecting malicious activity. The domain is currently blocked by OpenPhish and appears on one public blocklist, indicating confirmed malicious reputation. Despite using a reputable registrar and a valid SSL certificate, these factors do not mitigate the active crypto drainer threat.
Users should immediately block tr.padisahbet-giris2026.org at the network and DNS level. Never connect a cryptocurrency wallet or enter credentials on this site. If funds were drained, report the incident to local law enforcement and your wallet provider. Share indicators of compromise with threat intelligence platforms. Organizations should deploy endpoint protection to detect wallet-draining scripts and block this domain via firewall rules or DNS filtering services.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | tr.padisahbet-giris2026.org |
malicious | Sinkholed |
| OpenDNS | tr.padisahbet-giris2026.org |
phishing | Phishing Block |
| DNS4EU | tr.padisahbet-giris2026.org |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | tr.padisahbet-giris2026.org |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: padisahbet-giris2026.org
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain padisahbet-giris2026.org behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
所用技术 · 4 identified
Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.
www.plesk.com 置信度 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of tr.padisahbet-giris2026.org · checked May 8, 2026
证据与外部报告
PD-20260508-A1467D Recipient: abuse-complaints@squarespace.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。