MALICIOUS — HIGH
فحص التصيد والأمان للنطاق bitzfoinz.com
bitzfoinz[.]
Analysis of bitzfoinz.com indicates a high‑confidence malicious infrastructure used for brand impersonation and cryptocurrency fraud.
- VirusTotal
- 5/93
- Blocklists
- No stored match
- التوفر
- المحتوى غير متوفر · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
bitzfoinz.com — المحتوى غير متوفر (HTTP 502). انتحال العلامة التجارية: Across; نوع الاحتيال: Crypto Scam. ملخص الأدلة: VirusTotal 5/93 (alphaMountain.ai, CyRadar, Fortinet, G-Data, Netcraft); PhishDestroy score 65/100. مسجّل النطاق: TuringSign.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
Analysis of bitzfoinz.com indicates a high‑confidence malicious infrastructure used for brand impersonation and cryptocurrency fraud. The domain was registered on February 21, 2026 through TuringSign Inc. d/b/a Cosmotown and resolves to IP address 163.61.188.5, which is assigned to AS153568 NEW DHAKA HARDWARE located in the United States. The site presented a page title of "Bitfoniz" and is categorized as a Crypto Scam that impersonates across multiple targets. It was flagged by PhishDestroy and appears on one public security blocklist.
VirusTotal scans show that five of ninety‑three security vendors flagged the domain, providing independent corroboration of suspicious activity. The SSL certificate associated with the site is identified as R12, suggesting an anomalous or self‑signed certificate not typically trusted by browsers. Current operational status is offline, confirming that the site is no longer reachable at the time of reporting. Defenders should treat any prior resolutions to 163.61.188.5 as malicious and block the domain at network perimeters and endpoint security solutions.
Because the site is offline, threat actors may attempt to relocate the payload to a new domain or reuse the same hosting provider; continuous monitoring of the registrar TuringSign Inc. and the associated ASN is advised. Additionally, security products should update detection rules to incorporate the observed VirusTotal detections and the specific page title "Bitfoniz" as indicators of compromise. While the exact content of the page beyond the title has not been publicly captured, the combination of registrar, hosting, SSL anomaly, and multiple vendor detections strongly supports classifying bitzfoinz.com as a malicious crypto‑related impersonation site. Organizations should remain vigilant for any resurgence and incorporate the domain into threat intelligence feeds for proactive defense.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات13 recorded checks
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
تحليل VirusTotal
الأدلة والتقارير الخارجيةIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.