Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@vh-global.net.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bicomy-app.com
“Biconomy”
Evidence Summary
This domain, bicomy-app.com, is flagged as a high-risk generic phishing threat and remains active as of July 17, 2026. Registered through Gname.com Pte. Ltd. on June 13, 2026, the domain resolves to IP address 43.247.132.5. VirusTotal analysis shows 5 of 91 security vendors flagging the domain, indicating moderate but not universal detection across threat intelligence platforms. The domain uses nameservers a.share-dns.com, a2.share-dns.com, b.share-dns.net, and b2.share-dns.net, which are commonly associated with low-cost or transient hosting setups often observed in phishing campaigns. No specific brand, page title, or scam category is available from the provided intelligence, so the exact phishing lure or impersonated entity is not yet identified. The relatively recent registration date and active status suggest ongoing operational risk. Defenders should block the domain and associated IP at network perimeters, monitor for related subdomains or infrastructure sharing the same nameservers or registrar, and review any email or web traffic targeting this domain for signs of credential harvesting or data theft. Further analysis of the hosted content is recommended to determine the specific phishing narrative and potential victims.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bicomy-app.com |
malicious | Sinkholed |
Detection timeline
-
VirusTotal
4 → 8 (+4) (Added: Forcepoint ThreatSeeker, Gridinsoft, SOCRadar, alphaMountain.ai)
Threat Response Pipeline
Public Blocklist Status
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260717-68582C- Captured page title
- Biconomy
Blocklist coverage
11 monitored external feeds · stored snapshot Sep 9, 2026
9 monitored external feeds No match
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
PD-20260717-68582C Recipient: abuse@vh-global.net Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive