Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@porkbun.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
btcpay[.]bitcoinguide[.]one
“Sign in”
btcpay.bitcoinguide.one — No verificado. Suplantación de marca: Bitcoin; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 65/100. Registrador: Porkbun.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain btcpay.bitcoinguide.one is a cryptocurrency brand impersonation phishing site designed to mimic Bitcoin services, specifically targeting users with a fake sign-in page to steal credentials. It poses an elevated risk as a scam, but has been taken offline. The site was identified as a threat due to its use of a Let's Encrypt SSL certificate and a page title of 'Sign in', which are common indicators of credential harvesting.
Technical analysis shows that btcpay.bitcoinguide.one is flagged by 1 of 95 VirusTotal vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through Porkbun LLC on February 21, 2026, and resolves to IP address 150.136.239.27, located in the US under AS31898 Oracle Corporation. The SSL certificate was issued by Let's Encrypt / R12, and the site uses technologies such as Bootstrap, Vue.js, Nginx, Moment.js, jQuery, HSTS, and Clipboard.js. Google Safe Browsing did not flag the domain, and the Gridinsoft trust score is 0/100.
Users who may have interacted with btcpay.bitcoinguide.one should take immediate safety steps. Since this is a credential phishing site, change any passwords used on the fake sign-in page and enable two-factor authentication on all associated accounts. Monitor for unauthorized activity and report the domain to PhishDestroy or other cybersecurity authorities. If cryptocurrency tokens were involved, revoke any token approvals and move funds to a new wallet.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Registration: bitcoinguide.one
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain bitcoinguide.one behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 7 identified
Popular CSS framework for responsive, mobile-first web development.
Progressive JavaScript framework for building user interfaces.
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of btcpay.bitcoinguide.one · checked Mar 2, 2026
Datos y informes externos
PD-20260211-2DEBB8 Recipient: abuse@porkbun.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.