Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is trustandsafety@support.aws.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bytecoin-blockchain[.]com
Phishing- und Sicherheitsprüfung für bytecoin-blockchain.com
“ByteCoin Blockchain”
bytecoin-blockchain.com — Letzter bekanntermaßen aktiv (HTTP 200). Markenidentität: Blockchain.com; Betrugstyp: Brand Impersonation. Zusammenfassung der Beweislage: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Registrar: Amazon.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain bytecoin-blockchain.com is currently active and has been classified as a brand‑impersonation campaign targeting Blockchain.com. The site presents the page title “ByteCoin Blockchain,” which aligns with the reported impersonation objective. The domain was created on 23 April 2025 and is hosted behind Cloudflare infrastructure, as indicated by the presence of Cloudflare Browser Insights, Cloudflare services, and HTTP/3 support. DNS resolution points to IP 172.67.205.173, a Cloudflare‑owned address located in Canada. The SSL certificate is issued by Google Trust Services under the WE1 identifier, and the authoritative name servers are aaron.ns.cloudflare.com and sreeni.ns.cloudflare.com. Registration was performed through Amazon Registrar, Inc. VirusTotal analysis shows that 3 of 91 security vendors flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100. The domain appears on one security blocklist and is listed as blocked by PhishDestroy. While the exact page content has not been examined, the available indicators confirm a high‑risk brand‑impersonation operation. Defenders should consider adding the domain to blocklists, monitoring for related DNS queries, and inspecting traffic for any attempts to interact with the site. Further analysis of the site’s content and any associated payloads is recommended to fully assess the threat.
Datenabdeckung13 recorded checks
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologien · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100 % KonfidenzCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % KonfidenzHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of bytecoin-blockchain.com · checked May 7, 2026
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260507-6AF18D Recipient: trustandsafety@support.aws.com Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.