Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@identitydigital.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
volhandelsburg-nl[.]live
“Vol Handelsburg | Officieel Platform voor AI-ondersteunde Handel”
volhandelsburg-nl.live — पहुंच योग्य · पहुंच प्रतिबंधित (HTTP 403). ब्रांड प्रतिरूपण: Bitcoin; घोटाले का प्रकार: Fake Exchange. साक्ष्य सारांश: VirusTotal 6/91 (ADMINUSLabs, alphaMountain.ai, CRDF, Fortinet, Gridinsoft); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 74/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain volhandelsburg-nl.live was registered on May 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the Cloudflare address 172.67.205.155, belonging to AS13335 Cloudflare, Inc., and is served from a United States edge node. The site presents a valid Let’s Encrypt certificate (issuer E7) and returns HTTP 200 over HTTP/3, indicating a fully operational web service.
The front‑end is titled “Vol Handelsburg | Officieel Platform voor AI‑ondersteunde Handel” and explicitly claims to be an exchange platform. The page mimics the Bitcoin brand, positioning itself as a fake exchange that attempts to lure cryptocurrency traders. Front‑end assets are loaded from popular CDNs such as unpkg, jsDelivr, and jQuery, while IPinfo and Cloudflare Browser Insights scripts are used for visitor analytics. These libraries are typical of opportunistic phishing kits that rely on third‑party resources to reduce hosting costs.
Threat intelligence scores reinforce the malicious nature of the site. Gridinsoft assigns a trust score of 0 / 100, and VirusTotal records a single detection out of 95 security vendors. The domain appears on one external blocklist and has already been flagged by the PhishDestroy feed, yet the site remains active as of the report date. The combination of a newly created domain, low trust rating, and active phishing classification suggests a high‑confidence indicator of a brand‑impersonation campaign targeting Bitcoin users.
Defenders should add volhandelsburg-nl.live to network and email filtering rules, enforce DNS blocklists that include the domain, and monitor Cloudflare‑associated IP ranges for similar activity. Endpoint detection should flag any attempts to load resources from unpkg or jsDelivr that resolve to the same IP. Continuous re‑verification of the domain’s status is advised, as the operator may shift hosting or regenerate certificates to evade takedown efforts.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | volhandelsburg-nl.live |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-20 02:48:35 UTC
थ्रेट इंटेलिजेंस क्रॉस-रेफ़रेंस · source references
तकनीकें · 7 identified
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100% विश्वासjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% विश्वासCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of volhandelsburg-nl.live · checked Jun 1, 2026
साइट कॉन्फ़िगरेशन विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260601-B3974D Recipient: abuse@identitydigital.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।