testament[.]be

The domain www.testament.be is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform ankr. It does not deploy a crypto drainer kit but instead poses an elevated risk through fraudulent representation of the ankr brand to deceive visitors into disclosing sensitive information or transferring assets. As of the latest verification, www.testament.be has been taken offline, though prior activity remains a concern for potential victims.

Technical indicators reveal limited but notable detection: 1 of 95 VirusTotal security vendors flagged www.testament.be as malicious, while Google Safe Browsing has not issued any warnings. The domain appears on a single security blocklist, PhishDestroy. Registered through X-plose BVBA on March 15, 2002, the site resolves to the IP address 217.19.232.178, hosted by Combell NV in Belgium. The SSL certificate is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36 authority. Observed technologies include Windows Server, Microsoft ASP.NET, IIS, Cloudflare, Google Tag Manager, Google Analytics, and cdnjs. Nameservers are ns5.computerkliniek.be and ns6.computerkliniek.com.

Individuals who interacted with www.testament.be should immediately change any credentials entered on the site and enable two-factor authentication on all related accounts. Monitor financial and cryptocurrency wallets for unauthorized transactions. Report the phishing domain to the impersonated brand, ankr, and submit the URL to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.