drainer.nexprofits.com
Kategoria: Suspicious
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Szczegółowe adresy URL linków, domen i iframe z tej witryny nie są tu wyświetlane — niektóre ciągi zawierają treści nieodpowiednie do ogólnego wyświetlania. Powyższe liczby odzwierciedlają pełny skan.
Opis drainer.nexprofits.com
This website appears to present itself as a cryptocurrency compliance or wallet-screening service under the name "AMLBot." Based on the page title, branding, and homepage text, it claims to help users check whether crypto wallets or transactions are linked to illicit funds, scams, or stolen assets. The content is framed around risk reduction, compliance, and wallet verification for cryptocurrency users.
However, the scanned domain is drainer.nexprofits.com rather than a primary brand domain matching the displayed service name. The subdomain label "drainer" is unusual in this context and may raise questions about the legitimacy or intended purpose of the page. The site appears to use third-party assets related to crypto wallets and blockchain libraries, which is consistent with a web-based cryptocurrency tool, but the available data does not clearly establish who operates it or whether it is officially connected to the brand shown on the page.
Ocena bezpieczeństwa drainer.nexprofits.com
Scan results indicate mixed but concerning signals at the time of this scan. The domain was flagged by 4 out of 91 security engines, with multiple engines classifying it as phishing or suspicious. In addition, web-classification data associates the site with phishing and fraud-related categories. While blacklist checks and the malware scan did not detect malicious files or blacklist listings at the time of review, those clean results do not fully offset the phishing-related detections.
The domain is also very new, with an age of only 82 days, and it is not ranked among widely visited sites. The page presents itself as "AMLBot," but it is hosted on a different subdomain under nexprofits.com, which may indicate branding inconsistency and could increase the risk of impersonation or deceptive presentation. The subdomain name itself closely aligns with terminology commonly associated with crypto theft, which further adds to the concern.
Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The site uses a valid Let's Encrypt SSL certificate, which means traffic appears to be encrypted in transit. It is hosted on a LiteSpeed web server at IP address 192.227.159.251, with hosting attributed to HostPapa in Buffalo, United States. The domain uses nameservers under infracloudh.in, and DNSSEC is not enabled, so DNS responses do not appear to have additional authenticity protection.
From a technical scanning perspective, no malicious files were detected in the limited file scan, and no flagged external links or iframes were reported at the time of analysis. Even so, the combination of a newly registered domain, unsigned DNSSEC status, and phishing-related detections from multiple security engines suggests elevated caution may be warranted.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?