Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@publicdomainregistry.com.
The latest stored availability evidence still shows the domain reachable; 30 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bestchange[.]digital
“AML check of a crypto address — BestChange”
bestchange.digital — असत्यापित. ब्रांड प्रतिरूपण: Across; घोटाले का प्रकार: Aml Scam. साक्ष्य सारांश: VirusTotal 4/89 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, SOCRadar); URLQuery 1 alert; PhishDestroy score 65/100. रजिस्ट्रार: PDR.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
साक्ष्य सारांश
PhishDestroy first observed bestchange.digital on Sep 7, 2026. Stored content metadata identifies Across as the apparent target. The captured page title is “AML check of a crypto address — BestChange”. Page analysis recorded additional brand references to Arbitrum, Avalanche, Ethereum, Ledger, Polygon, Solana, Telegram, Ton, and Tron. Stored page analysis classifies the content as aml scam. Current evidence score: 65/100 (high).
Positive findings are stored from 2 sources: VirusTotal and URLQuery. VirusTotal recorded 4 detections among 89 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, SOCRadar on Sep 8, 2026 at 18:48 UTC. URLQuery recorded 1 threat-system alert on Sep 7, 2026 at 15:31 UTC. Non-positive and contextual checks: AlienVault OTX listed 13 community pulse references (not vendor detections) on Sep 8, 2026 at 18:49 UTC. The separate external-blocklist snapshot contained no matches on Sep 8, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Sep 8, 2026 at 18:48 UTC. URLScan completed without a malicious verdict (score 0) on Sep 7, 2026 at 17:08 UTC.
The collector marked the hostname reachable on Sep 7, 2026 at 15:29 UTC, but did not retain the HTTP response code. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Sep 1, 2026 as the creation date. Registration preceded first observation by 6 days. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Sep 7, 2026 at 18:22 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 4 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Nov 30, 2026; checked Sep 7, 2026 at 16:02 UTC.
The content indicators and 2 positive source findings support the current Across-themed aml scam classification.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bestchange.digital |
malicious | Sinkholed |
Detection timeline
-
VirusTotal
stage4.timeline.transition (+1) (Added: SOCRadar)
-
VirusTotal
stage4.timeline.transition (+1) (Added: CRDF)
-
VirusTotal
stage4.timeline.transition (+1) (Added: alphaMountain.ai)
-
VirusTotal
stage4.timeline.transition (+1) (Added: Forcepoint ThreatSeeker)
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260907-E14CF8
Blocklist coverage
stage4.blocklist.scope_plural
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 7 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% विश्वासExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com 100% विश्वासSweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.
sweetalert2.github.io 100% विश्वासJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100% विश्वासCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of bestchange.digital · checked Sep 7, 2026
तकनीकें
stage4.technology.identified_plural
साक्ष्य और बाहरी रिपोर्टें
PD-20260907-E14CF8 Recipient: abuse@publicdomainregistry.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।