02-billing[.]link
Domain Security & Threat Intelligence Report
Analyst Security Overview
AI-GeneratedThe domain 02-billing.link is currently active and is engaging in credential phishing activities. With a VirusTotal detection score of 18 out of 95, it raises significant red flags. The domain appears to impersonate legitimate billing services, targeting users seeking to manage their accounts, which makes it particularly dangerous for individuals looking for assistance with payment issues.
Registered through GMO Internet, Inc., this domain is relatively new, at 165 days old, and operates from the IP address 199.59.243.228. It has already been blocklisted twice, indicating prior incidents of misuse. The presence of these warnings suggests that it could be utilizing shared or less secure hosting services, which are often favored by cybercriminals for such schemes.
Currently, 02-billing.link is live and continues to pose a risk. PhishDestroy has been actively monitoring the domain and has reported it for its phishing activities to relevant authorities. Ongoing vigilance is essential to mitigate potential impacts on unsuspecting users.
Threat Response Pipeline
Public Blocklist Status
Website Screenshot
Domain Intelligence
ns2.bodis.com
proxy@whoisprotectservice.com
abuse+arin@bodis.com
abuse@internet.gmo
VirusTotal Analysis
Evidence & External Reports
URLScan Report
VirusTotal
URLQuery
Wayback Machine
WHOIS Lookup
Cloudflare Radar 
Shodan
ScamAdviser
ChainAbuse
Were You Affected by This Site?
If you have interacted with this domain, entered personal information, or connected a cryptocurrency wallet — take immediate action. Below are resources to help you report the incident and protect yourself.
Report to Your Local Authorities
Select your country to see local cybercrime reporting contacts and complaint templates.
Related Domain Reports
Other Domains on 199.59.243.228
More Domains at GMO Internet, Inc.
Stay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive