MALICIOUS — CRITICAL
bevnox.com — Generic Phishing Investigation
bevnox[.]
bevnox.com was registered on 2026-04-02 through TUCOWS.COM, CO.
- VirusTotal
- 14/91
- Blocklists
- No stored match
- Ketersediaan
- Terakhir diketahui aktif · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is domainabuse@tucows.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
bevnox.com — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Genericcrypto; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, ESET); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 100/100. Registrar: TUCOWS.COM, CO.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
bevnox.com was registered on 2026-04-02 through TUCOWS.COM, CO. The domain resolves to IP 188.114.97.3, which is owned by Cloudflare, Inc. and geolocated to Canada. DNS is served by kenneth.ns.cloudflare.com and nancy.ns.cloudflare.com. The site presents the page title “Bevnox: Most Popular Online Crypto Casino Based on Blockchain” and is classified as a brand‑impersonation generic phishing campaign using the Gambler Scam kit. Infrastructure analysis shows the use of Cloudflare services, including Cloudflare Browser Insights, and third‑party trackers such as Twitter Ads and Facebook Pixel. The SSL certificate is issued by Let’s Encrypt (E7). Reputation data indicate a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 1/100. VirusTotal reports 16 of 91 security vendors flagging the domain, and the domain appears on a single blocklist (PhishDestroy). The risk level is high and the campaign remains active. Defenders should add 188.114.97.3 and bevnox.com to deny‑list rules, monitor for traffic to the associated Cloudflare nameservers, and consider disabling any outbound connections to the identified tracking services. Further analysis of the landing page content is required to confirm the exact phishing payload.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cakupan data14 recorded checks
Sinyal Keamanan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 4 identified
Twitter Ads is an advertising platform for Twitter 'microblogging' system.
ads.twitter.com Keyakinan 100%Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Keyakinan 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of bevnox.com · checked May 5, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260505-296485 Recipient: domainabuse@tucows.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.