drainer.nexprofits.com
Categorie: Suspicious
Om het product met alle functies te gebruiken, moet u een licentie voor Combo Cleaner aanschaffen. Beperkte gratis proefperiode van zeven dagen beschikbaar. Combo Cleaner is eigendom van en wordt beheerd door RCS LT, het moederbedrijf van PCRisk.com.
Gedetailleerde link-, domein- en iframe-URL's van deze site worden hier niet getoond - sommige tekenreeksen bevatten inhoud die niet geschikt is voor weergave aan een algemeen publiek. De aantallen hierboven weerspiegelen de volledige scan.
Beschrijving van drainer.nexprofits.com
This website appears to present itself as a cryptocurrency compliance or wallet-screening service under the name "AMLBot." Based on the page title, branding, and homepage text, it claims to help users check whether crypto wallets or transactions are linked to illicit funds, scams, or stolen assets. The content is framed around risk reduction, compliance, and wallet verification for cryptocurrency users.
However, the scanned domain is drainer.nexprofits.com rather than a primary brand domain matching the displayed service name. The subdomain label "drainer" is unusual in this context and may raise questions about the legitimacy or intended purpose of the page. The site appears to use third-party assets related to crypto wallets and blockchain libraries, which is consistent with a web-based cryptocurrency tool, but the available data does not clearly establish who operates it or whether it is officially connected to the brand shown on the page.
Veiligheidsbeoordeling voor drainer.nexprofits.com
Scan results indicate mixed but concerning signals at the time of this scan. The domain was flagged by 4 out of 91 security engines, with multiple engines classifying it as phishing or suspicious. In addition, web-classification data associates the site with phishing and fraud-related categories. While blacklist checks and the malware scan did not detect malicious files or blacklist listings at the time of review, those clean results do not fully offset the phishing-related detections.
The domain is also very new, with an age of only 82 days, and it is not ranked among widely visited sites. The page presents itself as "AMLBot," but it is hosted on a different subdomain under nexprofits.com, which may indicate branding inconsistency and could increase the risk of impersonation or deceptive presentation. The subdomain name itself closely aligns with terminology commonly associated with crypto theft, which further adds to the concern.
Based on these findings, this website may pose potential risks to visitors.
Technische beschrijving
The site uses a valid Let's Encrypt SSL certificate, which means traffic appears to be encrypted in transit. It is hosted on a LiteSpeed web server at IP address 192.227.159.251, with hosting attributed to HostPapa in Buffalo, United States. The domain uses nameservers under infracloudh.in, and DNSSEC is not enabled, so DNS responses do not appear to have additional authenticity protection.
From a technical scanning perspective, no malicious files were detected in the limited file scan, and no flagged external links or iframes were reported at the time of analysis. Even so, the combination of a newly registered domain, unsigned DNSSEC status, and phishing-related detections from multiple security engines suggests elevated caution may be warranted.
Deel uw ervaring met deze website. Was deze veilig? Bent u problemen tegengekomen?