Notification and current-status evidence
The sent-report ledger records the first outgoing report at . It contains 2 outgoing records; the latest is dated . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bearcoin[.]cc
“Bearcoin: Most Popular Online Crypto Casino Based on Blockchain”
Résumé des preuves
The domain bearcoin.cc was registered on February 21, 2026 through Porkbun LLC and is currently listed as taken offline. Analysis shows the site presented the page title "Bearcoin: Most Popular Online Crypto Casino Based on Blockchain," indicating an attempt to lure users with a cryptocurrency gambling proposition. The domain resolves to the IPv6 address 2a06:98c1:3121::3, which is hosted within the United States under AS13335, the Cloudflare network. Technical fingerprinting identified the use of Cloudflare services, including Cloudflare Browser Insights, as well as third‑party advertising and tracking components such as Twitter Ads and a Facebook Pixel.
The SSL certificate is identified as WE1, confirming the presence of HTTPS encryption. The site was blocked by the PhishDestroy blocklist and appears on one additional security blocklist, demonstrating that at least one reputable phishing mitigation service has taken action against it. VirusTotal scans recorded 12 positive detections out of 93 security vendors, reinforcing the malicious classification. Threat intelligence tags the activity as a "Crypto Scam" and attributes the underlying phishing kit to a "Gambler Scam" framework, which is commonly used to fabricate fake gambling or casino experiences to harvest credentials or payments.
While the domain is offline, the historical evidence suggests it was employed to target cryptocurrency users seeking online casino services. Defenders should continue to enforce network‑level blocks for bearcoin.cc, monitor related IPv6 ranges within the Cloudflare AS13335 space for similar activity, and update endpoint protection signatures to include the observed kit characteristics. Additional investigation into any residual DNS or TLS artifacts may reveal further command‑and‑control infrastructure, but the current data set provides sufficient confidence to classify bearcoin.cc as a confirmed crypto‑focused phishing operation.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-1767726628-bearcoin.cc- Artefact PDF
- Preuve PDF
Historique des signalements 2
- Signalement 1 ⚠️ ESCALATION #14 (516h active): Phishing - bearcoin[.]cc
- Signalement 2 ⚠️ ESCALATION #15 (791h active): Phishing - bearcoin[.]cc
Data Coverage
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bearcoin.cc |
malicious | Sinkholed |
| OpenDNS | bearcoin.cc |
phishing | Phishing Block |
| Hagezi Threat Feed | bearcoin.cc |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 10/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Technologies
4 technologies identifiées avec une forte confiance
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif