btcbull-snapshot[.]co
“404 Not Found”
btcbull-snapshot.co — Belum terverifikasi. Peniruan identitas merek: Genericcrypto; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLScan malicious verdict; PhishDestroy score 92/100. Registrar: OwnRegistrar.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of btcbull-snapshot.co as of July 23, 2026 indicates an active high‑risk crypto‑scam infrastructure. The domain was registered on February 21, 2026 through OwnRegistrar, Inc. and is currently resolved to the Cloudflare edge address 104.21.16.64, which belongs to AS13335 Cloudflare, Inc. in the United States. Authoritative nameservers are KELLY.NS.CLOUDFLARE.COM and ARTURO.NS.CLOUDFLARE.COM, confirming the use of Cloudflare’s DNS and CDN services; HTTP/3 is also observed. The site presents an HTTP 200 response while the HTML title is “404 Not Found”, suggesting a placeholder or intentionally obscured content. The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS connection but not mitigating the malicious intent.
Threat intelligence shows the domain appears on three security blocklists and has been flagged by multiple industry‑specific filters, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 13 of 93 scanners labeling the domain as malicious, and AlienVault OTX references the domain in one pulse. The classification provided is “Crypto Scam”, aligning with the broader generic phishing label. Despite these indicators, the exact payload or credential‑harvesting mechanisms have not been publicly disclosed, and the specific targeting vector remains uncertain.
Defenders should immediately add btcbull-snapshot.co to network‑level deny lists, enforce DNS sink‑hole routing, and monitor outbound connections to the Cloudflare address 104.21.16.64. Email gateways should block URLs containing the domain and any URLs that resolve to the same IP range. Incident response teams should treat any authentication attempts to crypto‑related services originating from this domain as compromised, and users should be warned to avoid providing private keys or wallet credentials. Continuous re‑evaluation is advised as further intelligence may emerge.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
Teknologi · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive