Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
changeiiy[.]click
“Cryptocurrency Exchange - Crypto & Altcoin Swap Platform with Lowest Fees”
Resumen de las pruebas
Analysis of the domain changeiiy.click indicates it was a phishing site targeting cryptocurrency users, operational as of July 2026. The domain was registered on February 21, 2026, through Global Domain Group LLC and resolved to the IP address 62.60.226.213, hosted under AS214351 (FEMO IT SOLUTIONS LIMITED) in Germany. The page title, 'Cryptocurrency Exchange - Crypto & Altcoin Swap Platform with Lowest Fees,' suggests an attempt to impersonate a legitimate cryptocurrency trading platform, though no specific brand name was confirmed in the available data. The site was flagged by 12 of 95 security vendors on VirusTotal and appeared on at least one security blocklist, including PhishDestroy.
Scamadviser assigned a trust score of 1/100, further supporting its classification as malicious. The domain used Google Cloud nameservers (ns-cloud-a1.googledomains.com and others), a common infrastructure choice for both legitimate and malicious sites. No SSL certificate was detected, which is unusual for a purported financial service and increases the risk of credential interception. As of the report date, the domain was offline, though its prior activity and detection history warrant continued monitoring.
Defenders should treat any prior interaction with this domain as a potential compromise of cryptocurrency credentials or personal data. Organizations are advised to block the domain and IP at network perimeters and alert users who may have visited it. Given the elevated risk level, incident responders should review logs for connections to 62.60.226.213 or the domain name in proxy, DNS, or endpoint telemetry.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260213-82258F- Título de la página capturada
- Cryptocurrency Exchange - Crypto & Altcoin Swap Platform with Lowest Fees
- Artefacto PDF
- Evidencia en PDF
Fundamento jurídico
Texto completo de la evidencia
Section 1.1 of the AUP: The domain changeiiy.click is engaged in phishing activities, which are explicitly prohibited as they involve deception and fraud aimed at obtaining sensitive information from individuals.
Section 3.2 of the TOS: The registrar reserves the right to suspend or terminate services for any activities that violate laws or regulations. The ongoing use of this domain for phishing constitutes a clear violation of this provision.
Applicable Laws (US):
Computer Fraud and Abuse Act (18 U.S.C. § 1030): This law prohibits unauthorized access to computers and the use of such access to commit fraud or obtain information.
CAN-SPAM Act (15 U.S.C. §§ 7701-7713): This act regulates commercial email and prohibits deceptive practices, including misleading subject lines and sender information, which are often associated with phishing schemes.
Wire Fraud (18 U.S.C. § 1343): Engaging in schemes to defraud individuals via electronic communications, including phishing, falls under this statute and is subject to severe penalties.
Regulatory Note: Failure to act on this matter may expose your organization to legal liability and regulatory scrutiny. Immediate action is recommended to mitigate potential risks associated with this domain's fraudulent activities.
Data Coverage
Señales de seguridad
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | changeiiy.click |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Estado del dominio
Inaccesible → Accesible
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.