VirusTotal
14 / 91 engine detections
打开报告transitswap.finance:钓鱼,PhishDestroy 于 2026-06-18 检测到。风险:关键(100/100)。注册商:Dynadot。状态:最后已知的活跃状态。托管:CLOUDFLARENET - Cloudflare, Inc., US。PhishDestroy 已发送1 份滥用举报。VirusTotal:14/91 个引擎标记。请勿输入登录凭据,也不要连接钱包。
“Web3 Connect Demo”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@dynadot.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
钓鱼: transitswap.finance — 最后已知的活跃状态 (HTTP 301). 证据摘要: VirusTotal 14/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); CF Radar malicious…
The evidence summary below uses retained observations. Each source keeps its own collection date.
14 / 91 engine detections
打开报告恶意
打开报告已检查 — 无检出记录
打开报告19 community references
打开报告无威胁标记
打开报告无恶意标记
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
PhishDestroy threat report
该域名 transitswap.finance 通过伪造 Web3 连接演示页面,诱骗受害者批准恶意交易权限,从而清空关联钱包中的资产。域名注册于 2025 年 12 月 2 日,托管在 Amazon 网络(AS16509),尽管 VirusTotal 仅 9/91 检出,但已被 PhishDestroy 列入黑名单。攻击者利用 Let's Encrypt 证书增强可信度,属于典型的短期高破坏性盗币活动。用户应立即撤销钱包授权并终止所有会话,检查交易历史以防资产损失。
不是。PhishDestroy 将 transitswap.finance 归类为“钓鱼”(风险:关键,100/100),首次检测于 2026-06-18。VirusTotal:14/91 个引擎标记。请将该网站视为不安全。
不安全。请勿在 transitswap.finance 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
对于该 gTLD,上述注册商依据 ICANN 认证协议运营。以下链接提供官方收费标准及现行的 DNS 滥用合规指南。
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP 声誉不属于此域。
ns1.dyna-ns.netns2.dyna-ns.net位置信息描述的是 IP 网络。
9abbfeaa9c386c9eca684e69444b4f53b293fa9d4ab15ed93c32634959de6366verify-connect-outputmint4k3dyjzvzp8emzwuxbbcjevwskk6r.one*.verify-connect-outputmint4k3dyjzvzp8emzwuxbbcjevwskk6r.one已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
redirect: raw=redirect_301; http=301; via=https_proxy; location=https://webkey.finance
transitswap.finance
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 019edc1a-9c58-714b-afe3-587788763690 |
|---|---|
| Final url | https://verify-connect-outputmint4k3dyjzvzp8emzwuxbbcjevwskk6r.one/ |
| 状态 | 200 |
| 已重定向 | off-domain |
| Redirects | [
{
"to": "https://verify-connect-outputmint4k3dyjzvzp8emzwuxbbcjevwskk6r.one/",
"from": "https://transitswap.finance/",
"status": 301
}
] |
| Ip | 104.21.23.22 |
| Contacted domains | [
"wallet-448.pages.dev",
"static.cloudflareinsights.com",
"transitswap.finance"
] |
| Contacted IP addresses | [
"172.66.47.82",
"1.1.1.1",
"104.16.79.73",
"104.21.23.22",
"54.215.31.113"
] |
| Asns | [
"13335",
"16509"
] |
| Countries | [
"US"
] |
| Document hash | 358883ecb54026bb2c04e276f7e16323a01bb0084d2d81e8e5e1e4aee3733c2d |
| Script hashes | [
"5e236d1aae005a5427cc3a19522e70fb99a711f05c023b31deaf6470207bc9e2",
"791ccca994f319d230ce6b51cdf631b0f5444742e84f7794c9971a3df00c1f09"
] |
| Globals | [
"__cfBeacon",
"__k2h78xqBridgeParent",
"__k2h78xqApiUrl",
"__k2h78xqBridgeConnect",
"__k2h78xqBridgeOpenPicker",
"noirEvmConnect",
"__n",
"settingsObject",
"__k2h78xqOpenModal",
"__k2h78xqConnectWallet"
] |
| Cookies | [
"cf_clearance"
] |
| Storage keys | [
"_enr",
"__k2h78xqVisitorToken",
"__k2h78xqSessionToken"
] |
| Tls | {
"san": [
"verify-connect-outputmint4k3dyjzvzp8emzwuxbbcjevwskk6r.one",
"*.verify-connect-outputmint4k3dyjzvzp8emzwuxbbcjevwskk6r.one"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "verify-connect-outputmint4k3dyjzvzp8emzwuxbbcjevwskk6r.one",
"protocol": "QUIC",
"valid_to": "2026-09-16T15:11:27Z",
"valid_from": "2026-06-18T14:12:41Z"
} |
| 域名年龄(天) | 0 |
| Apex age days | 0 |
| Tls age days | 0 |
| TLS 有效天数 | 90 |
| Requests | 19 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 100,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html"
} |
观察到: · Retrieved:
| Uuid | 1ca93ac4-6e28-45db-b1f1-85736ad9be01 |
|---|---|
| Final url | https://outputmint4k3dyjzvzp8mzwuxbbcjevwskk6r.cfd/ |
| 状态 | 403 |
| 已重定向 | off-domain |
| History | [
{
"url": "http://transitswap.finance/",
"status": 307
},
{
"url": "https://transitswap.finance/",
"status": 301
},
{
"url": "https://outputmint4k3dyjzvzp8mzwuxbbcjevwskk6r.cfd/",
"status": 403
}
] |
| DOM structure hash | f4a3984d647910a3ff04b7a0d92f6cc94471c5b7ce3e90077c32c21c857e411d |
| Document hash | f0e7100628e3ef990a7e9140b2fd1f0201277d7556fbb9dae85476736df706f3 |
| 域名风险 | [
"DGA Domains",
"Security threats",
"Newly Seen Domains",
"Security Risks",
"New Domains",
"CIPA Filter",
"CIPA"
] |
| DNS 记录 | [
{
"name": "outputmint4k3dyjzvzp8mzwuxbbcjevwskk6r.cfd",
"type": "A",
"value": "104.21.36.13"
},
{
"name": "outputmint4k3dyjzvzp8mzwuxbbcjevwskk6r.cfd",
"type": "A",
"value": "172.67.183.14"
},
{
"name": "outputmint4k3dyjzvzp8mzwuxbbcjevwskk6r.cfd",
"type": "AAAA",
"value": "2606:4700:3034::6815:240d"
},
{
"name": "outputmint4k3dyjzvzp8mzwuxbbcjevwskk6r.cfd",
"type": "AAAA",
"value": "2606:4700:3035::ac43:b70e"
}
] |
| DNSSEC 有效 | false |
| Ip | 104.21.36.13 |
| Verdict | {
"tags": [
"dga domains"
],
"malicious": true,
"categories": [
"dga domains"
]
} |
| 注册记录 | {
"registrar": "Dynadot Inc",
"created": "2026-06-19T06:05:12Z",
"updated": "2026-06-19T06:05:33Z",
"expires": "2027-06-19T23:59:59Z",
"nameservers": [
"addilyn.ns.cloudflare.com",
"marvin.ns.cloudflare.com"
]
} |
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
未知→redirected
http_redirect
redirected
http_redirect
PD-20260618-3932E1 Recipient: abuse@dynadot.com Registrar: Dynadot LLC / Dynadot Inc (United States) Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
IC3 does not accept attachments. Keep original evidence for investigators. IC3 guidance
Federal tips line1-800-CALL-FBICurrent service: Report Fraud. England, Wales and Northern Ireland. Scotland: 101.
Contact centre0300 123 2040选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
transitswap.finance)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
AI 辅助分析的撰写时间: 。该分析描述的是当时可获得的证据;之后的来源核查结果可能有所变化。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。