Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@vercel.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
wedefine[.]ai
“wedefine.ai — Focused apps for a noisy world”
wedefine.ai — 隐形 · 可达. 诈骗类型:Crypto Drainer. 证据摘要: VirusTotal 9/91 (alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, Fortinet); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 93/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, wedefine.ai, is currently under investigation for operating as a crypto drainer, a type of malicious infrastructure designed to siphon cryptocurrency from victim wallets through deceptive transaction prompts or smart contract exploits. No specific drainer kit or brand impersonation has been confirmed at this stage, but the domain exhibits characteristics consistent with wallet-draining campaigns, including the use of privacy-focused registration and minimal detection on public scanning platforms.
Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 216.198.79.65, was registered on April 13, 2026, and is hosted behind Cloudflare, Inc. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. As of the latest scan, VirusTotal reports 0 detections out of 95 security engines, and the domain is not currently listed on Google Safe Browsing or other major blocklists. The creation date is notably in the future, suggesting potential inaccuracies in WHOIS data or deliberate obfuscation of domain provenance.
The domain remains active and unblocked across most security platforms, with no confirmed takedown or sinkholing efforts observed. Users are advised to treat wedefine.ai as high-risk for cryptocurrency transactions, particularly if prompted to connect wallets or sign smart contracts. Wallet interactions should be avoided until further analysis confirms the domain's legitimacy. Organizations are encouraged to monitor network traffic for connections to 216.198.79.65 and implement DNS-based blocking as a precautionary measure. Given the lack of detections, this domain may represent an emerging threat, warranting continued scrutiny.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 置信度 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 置信度 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of wedefine.ai · checked Jun 29, 2026
证据与外部报告
PD-20260629-A72658 Recipient: abuse@vercel.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。