Lompat ke laporan keamanan
Checked 09/08/2026 Ref 100C74D5

MALICIOUS — CRITICAL

bevnox.com — Generic Phishing Investigation

bevnox[.]com

bevnox.com was registered on 2026-04-02 through TUCOWS.COM, CO.

100/100 evidence score · Critical
VirusTotal
14/91
Blocklists
No stored match
Ketersediaan
Terakhir diketahui aktif · HTTP 200
2026-05-05 04:31 UTCTerakhir diketahui aktif · HTTP 200

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 14. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is domainabuse@tucows.com. The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
3 months
Reports sent
1
Latest case ID
PD-20260505-296485
Current status
HTTP 200 at latest stored check
Jump to section
Ringkasan laporan

bevnox.com — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Genericcrypto; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, ESET); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 100/100. Registrar: TUCOWS.COM, CO.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Ref 100C74D5

bevnox.com was registered on 2026-04-02 through TUCOWS.COM, CO. The domain resolves to IP 188.114.97.3, which is owned by Cloudflare, Inc. and geolocated to Canada. DNS is served by kenneth.ns.cloudflare.com and nancy.ns.cloudflare.com. The site presents the page title “Bevnox: Most Popular Online Crypto Casino Based on Blockchain” and is classified as a brand‑impersonation generic phishing campaign using the Gambler Scam kit. Infrastructure analysis shows the use of Cloudflare services, including Cloudflare Browser Insights, and third‑party trackers such as Twitter Ads and Facebook Pixel. The SSL certificate is issued by Let’s Encrypt (E7). Reputation data indicate a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 1/100. VirusTotal reports 16 of 91 security vendors flagging the domain, and the domain appears on a single blocklist (PhishDestroy). The risk level is high and the campaign remains active. Defenders should add 188.114.97.3 and bevnox.com to deny‑list rules, monitor for traffic to the associated Cloudflare nameservers, and consider disabling any outbound connections to the identified tracking services. Further analysis of the landing page content is required to confirm the exact phishing payload.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
14 det.
URLScan
URLScan
Gridinsoft
1/100
ScamAdviser
Scamadviser
1/100
Sertifikat TLS
Let's Encrypt
Usia
4 mo
Status terpantau
Terakhir diketahui aktif 200
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data14 recorded checks
VirusTotal 14 / 91 URLQuery checked — no detections recorded PhishStats checked — no match recorded OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict malicious Pemblokiran DNS 14 diperiksa — tidak ada blokir TLS valid certificate, 57d WHOIS 4 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki Gridinsoft 1/100 Scamadviser 1/100
Sinyal Keamanan
GS Gridinsoft Analysis 1 / 100
3 0 2 1 33

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
11/12
Ancaman Telah Diterima
bevnox.com telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
05/05/2026
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
URLScan returned a malicious verdict · score 100
29/07/2026
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
14/91 recorded on VirusTotal
09/08/2026
Google Safe Browsing
05/05/2026
Brand Impersonation
Impersonation of Genericcrypto
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.
09/08/2026
Sent Report Recorded
Stored sent-report record for registrar TUCOWS.COM, CO., hosting provider, 1 abuse contact
domainabuse@tucows.com
05/05/2026
Daftar yang Dihapus Telah Dipublikasikan
05/05/2026
Monitoring Continues
Domain tetap dapat dijangkau atau aksesnya dibatasi; pemeriksaan di masa depan dapat memperbarui pengamatan ini.

Status Daftar Blokir Publik

Tangkapan tersimpan

Judul Halaman
Bevnox: Most Popular Online Crypto Casino Based on Blockchain
Sertifikat TLS
Valid transport encryption · Diterbitkan oleh Let's Encrypt · valid for 57 days

Intelijen Domain

Domain
URLScan Verdict Berbahaya score 100 Phishing report ↗
Server / ASN cloudflare · AS13335 Cloudflare, Inc.
IP Context Cloudflare shared edge origin IP hidden Reputasi Edge-IP tidak dikaitkan dengan domain ini.
Registrar TUCOWS.COM, CO KN(KN)
Alamat IP 188.114.97.3 CDN
LokasiCA Toronto, CA
JaringanAS13335 · CloudFlare, Inc.
IP asal tersembunyi di balik proksi CDN. Hasil IP terbalik untuk alamat edge berisi penyewa yang tidak terkait; menemukan asal memerlukan DNS pasif atau data transparansi sertifikat.
PendaftaranDibuat 02/04/2026 (129d)
Elapsed Since First Report 9 days
Yang kami hitung Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Terakhir diketahui aktif.
Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi05/05/2026
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttps://bevnox.com/
Server namakenneth.ns.cloudflare.comnancy.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 02/04/2026scanned 05/05/2026
Favicon Hash
Case ID
ICANN OVERSIGHT

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Tidak ada yang dikirim secara otomatis.
Teknologi · 4 identified
Twitter Ads
Advertising

Twitter Ads is an advertising platform for Twitter 'microblogging' system.

ads.twitter.com Keyakinan 100%
Facebook Pixel
Analytics

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

facebook.com Keyakinan 100%
Cloudflare Browser Insights
Analytics RUM

Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.

www.cloudflare.com Keyakinan 100%
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com Keyakinan 100%
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

14 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed Previous stored snapshot: 16 detections
ADMINUSLabs
alphaMountain.ai
BitDefender
Chong Lua Dao
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Kaspersky
Lionic
SafeToOpen
Sophos
VIPRE
Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of bevnox.com · checked May 5, 2026

56
Needs Work
Performance
FCP
1.36s
First Contentful Paint
LCP
13s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
708ms
Total Blocking Time
SI
2.71s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Bukti & Laporan EksternalIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html
<iframe
  src="https://phishdestroy.io/id/embed/domain/bevnox.com"
  title="PhishDestroy threat report for bevnox.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.