Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
tyc138[.]app
“iq9ce.jqoss.vip”
संग्रहीत अवलोकन
देखा गया शीर्षक अंतर
साक्ष्य सारांश
The domain tyc138.app has been identified as a generic phishing threat, specifically designed to impersonate cryptocurrency wallet services to steal login credentials and private keys. This domain is currently offline, which may indicate that it was taken down by hosting providers or security researchers after being flagged for malicious activity. The site likely presented a fake login interface mimicking popular crypto wallets, tricking users into entering sensitive information.
According to threat intelligence data, tyc138.app was flagged by 12 out of 95 security vendors on VirusTotal, indicating moderate but significant detection. It appears on 1 security blocklist, suggesting limited yet confirmed malicious reputation. The domain was registered on December 2, 2025, through Key-Systems LLC, and resolves to IP address 45.144.136.33. The SSL certificate was issued by Let's Encrypt (R13), which is commonly abused by phishing sites due to its free and automated issuance. These technical indicators, combined with the generic phishing classification, point to a targeted attempt to harvest cryptocurrency assets.
Given that tyc138.app is now offline, the immediate risk is reduced, but users who may have interacted with the site should take precautions. PhishDestroy recommends that anyone who entered credentials or seed phrases on this domain assume they are compromised and immediately transfer funds to a new, secure wallet. Always verify the legitimacy of crypto platforms by checking official sources and using tools like PhishDestroy to scan domains before entering any sensitive information. Stay vigilant against similar phishing attempts that may resurface under different domains.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260530-9D2966- कैप्चर किए गए पेज का शीर्षक
- 世界杯指定网站(中国区)有限公司
- PDF दस्तावेज़
- PDF प्रमाण
कानूनी आधार
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain tyc138.app is engaged in phishing activities, which constitutes a clear violation of your AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The use of this domain for fraudulent purposes violates your TOS, which reserves the right to suspend or terminate services for any activities that contravene legal standards.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law criminalizes unauthorized access to computers and networks, which is relevant given the phishing nature of the domain.
Wire Fraud Statute (18 U.S.C. § 1343): This law prohibits schemes to defraud individuals or entities through electronic communications, applicable to the fraudulent activities associated with this domain.
Anti-Phishing Consumer Protection Act: This act aims to combat phishing by imposing penalties on those who engage in deceptive practices to obtain sensitive information.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Compliance with your AUP and applicable laws is imperative to mitigate risks associated with domain abuse.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | hg111222.cc |
malicious | Sinkholed |
| DigiCert UltraDNS | tyc138.app |
malicious | Sinkholed |
| Cloudflare DNS | tyc138.app |
malicious | Sinkholed |
| DNS4EU | tyc138.app |
malicious | Sinkholed |
| DNS4EU | 1.21302132.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।