bellabit[.]site
“Bellabit | Offensive Security & CTF Team”
Ringkasan bukti
Analysis of bellabit.site indicates a high-risk phishing domain targeting individuals interested in offensive security and Capture The Flag (CTF) activities. The domain was registered on December 16, 2025, through NameCheap, Inc., and currently resolves to IP 104.21.70.209, hosted on Cloudflare's network (AS13335). The page title, 'Bellabit | Offensive Security & CTF Team,' suggests an attempt to impersonate a legitimate security team or platform, though no specific brand or organization is confirmed as the target. The domain is flagged by at least one security blocklist and has a Gridinsoft trust score of 0/100, reinforcing its malicious classification. Two of 93 security vendors on VirusTotal detect the domain as malicious, though this does not rule out further detections as analysis continues.
Infrastructure analysis reveals the use of Cloudflare services, including Cloudflare Browser Insights and HTTP/3, which may obscure the true origin of the phishing content. The domain's nameservers (dawn.ns.cloudflare.com and felicity.ns.cloudflare.com) and SSL certificate (issued by Google Trust Services / WE1) are consistent with Cloudflare-protected sites, a common tactic to evade takedowns and IP-based blocking. The HTTP status code 530, often associated with Cloudflare access restrictions or misconfigurations, suggests the site may be actively managed to avoid automated scanning or direct access. Defenders should treat this domain as an active phishing threat.
Block access to 104.21.70.209 and monitor for related subdomains or newly registered domains with similar naming patterns. Given the use of Cloudflare, traditional IP-based blocking may be insufficient; DNS-level blocking or endpoint protection rules targeting the domain name are recommended. The site's content has not been fully analyzed, so the exact phishing mechanism (e.g., credential harvesting, malware distribution) remains uncertain.
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of bellabit.site · checked Mar 2, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive