Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is gdpr-masking@gdpr-masked.com.
The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
harmonybitspire-invest[.]net
“Harmony Bitspire - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas”
harmonybitspire-invest.net — No verificado. Suplantación de marca: Argent; Tipo de estafa: Investment Scam. Resumen de las pruebas: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Registrador: PDR.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain harmonybitspire-invest.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently reported as taken offline. Infrastructure analysis shows the domain resolves to IP address 172.67.161.155, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The domain is served without an SSL certificate, indicating an unencrypted HTTP service at the time of observation. The page title retrieved from the live host reads "Harmony Bitspire - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas", suggesting an investment‑oriented façade that targets Spanish‑speaking users.
The site explicitly impersonates the brand "argent" and is classified as an investment scam. Security telemetry indicates that two of ninety‑three VirusTotal scanners flagged the domain, and it appears on a single external blocklist. PhishDestroy has already added the domain to its blocklist, and the Gridinsoft trust score is 0 out of 100, reflecting a high confidence of malicious intent. Nameservers listed are aitana.ns.cloudflare.com and craig.ns.cloudflare.com, both Cloudflare‑managed.
While the site is offline, the observed indicators suggest a short‑lived phishing campaign aimed at harvesting credentials or financial commitments from victims under the guise of a legitimate trading platform. Defenders should continue to block the domain and associated IP address, monitor for any resurgence of the host under new subdomains, and update endpoint and web filtering rules to include the observed page title and the "argent" brand reference. Additional threat‑intel feeds should be consulted for any newly reported artifacts related to this infrastructure.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
PD-20260107-596FB5 Recipient: gdpr-masking@gdpr-masked.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.