drainer.nexprofits.com
Catégorie : Suspicious
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Les URL détaillées des liens, domaines et iframes de ce site ne sont pas affichées ici : certaines chaînes contiennent du contenu inadapté à un affichage grand public. Les nombres ci-dessus reflètent l’analyse complète.
Description de drainer.nexprofits.com
This website appears to present itself as a cryptocurrency compliance or wallet-screening service under the name "AMLBot." Based on the page title, branding, and homepage text, it claims to help users check whether crypto wallets or transactions are linked to illicit funds, scams, or stolen assets. The content is framed around risk reduction, compliance, and wallet verification for cryptocurrency users.
However, the scanned domain is drainer.nexprofits.com rather than a primary brand domain matching the displayed service name. The subdomain label "drainer" is unusual in this context and may raise questions about the legitimacy or intended purpose of the page. The site appears to use third-party assets related to crypto wallets and blockchain libraries, which is consistent with a web-based cryptocurrency tool, but the available data does not clearly establish who operates it or whether it is officially connected to the brand shown on the page.
Évaluation de sécurité de drainer.nexprofits.com
Scan results indicate mixed but concerning signals at the time of this scan. The domain was flagged by 4 out of 91 security engines, with multiple engines classifying it as phishing or suspicious. In addition, web-classification data associates the site with phishing and fraud-related categories. While blacklist checks and the malware scan did not detect malicious files or blacklist listings at the time of review, those clean results do not fully offset the phishing-related detections.
The domain is also very new, with an age of only 82 days, and it is not ranked among widely visited sites. The page presents itself as "AMLBot," but it is hosted on a different subdomain under nexprofits.com, which may indicate branding inconsistency and could increase the risk of impersonation or deceptive presentation. The subdomain name itself closely aligns with terminology commonly associated with crypto theft, which further adds to the concern.
Based on these findings, this website may pose potential risks to visitors.
Description technique
The site uses a valid Let's Encrypt SSL certificate, which means traffic appears to be encrypted in transit. It is hosted on a LiteSpeed web server at IP address 192.227.159.251, with hosting attributed to HostPapa in Buffalo, United States. The domain uses nameservers under infracloudh.in, and DNSSEC is not enabled, so DNS responses do not appear to have additional authenticity protection.
From a technical scanning perspective, no malicious files were detected in the limited file scan, and no flagged external links or iframes were reported at the time of analysis. Even so, the combination of a newly registered domain, unsigned DNSSEC status, and phishing-related detections from multiple security engines suggests elevated caution may be warranted.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?