btcpayserver[.]oxtr[.]dev
Pemeriksaan phishing dan keamanan btcpayserver.oxtr.dev
“Sign in”
btcpayserver.oxtr.dev — Belum terverifikasi. Jenis penipuan: Crypto Scam. Ringkasan bukti: VT 2/93 (Fortinet, SOCRadar); URLQuery 0; URLScan no malicious verdict; GSB no flag; BL 0; PD 61/100. Registrar: Tucows.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
btcpayserver.oxtr.dev is a subdomain of oxtr.dev. PhishDestroy first recorded this hostname on Feb 11, 2026. The stored content classification is crypto scam. The assembled evidence scores 61/100 (elevated).
One independent source is positive: VirusTotal. VirusTotal recorded 2 detections among 93 engines: Fortinet, SOCRadar on Jul 18, 2026 at 18:45 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. URLQuery recorded no positive detection on Feb 11, 2026 at 09:55 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:35 UTC. URLScan completed without a malicious verdict (score 0) on Mar 28, 2026 at 11:55 UTC.
The collector marked the hostname reachable on Aug 6, 2026 at 22:14 UTC, but did not retain the HTTP response code. Registration records for the registrable domain oxtr.dev list Tucows Domains Inc. as the registrar. At collection time, the hostname resolved to 170.75.164.145 on AS174 (COGENT-174 - Cogent Communications, LLC, US). The associated network metadata labels the endpoint as AS174 Cogent Communications, LLC in Toronto, CA. The stored server header is nginx. Captured page title: “Sign in”. DOM analysis completed on Jul 27, 2026 at 02:21 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 02:37 UTC; stored 0 format-validated wallet addresses and 1 Telegram indicator. TLS metadata lists Let's Encrypt / R12 as the certificate issuer with validity through May 8, 2026; checked Mar 15, 2026 at 06:01 UTC.
No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: oxtr.dev
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
ICANN Sudah Dibayar. Akuntabilitas Tak Kunjung Datang.
For the registrable domain oxtr.dev behind this subdomain, the registrar above operates under an ICANN contract. ICANN collects annual, variable and transaction-based fees tied to registrations, renewals and transfers.
Akreditasi: dimonetisasi. Akuntabilitas: silakan periksa kembali nanti.
Lalu keajaiban dimulai: ICANN menulis RAA §3.18, registrar menyelidiki penyalahgunaan di dalam basis pelanggannya sendiri, dan para korban menyerahkan bukti secara cuma-cuma sementara setiap lapisan menunggu pihak lain bertindak. Jika itu membuat para korban merasa lebih aman, bagus sekali—ternyata tagihannya bekerja.
Teknologi · 7 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com Keyakinan 100%Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org Keyakinan 100%Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Keyakinan 100%Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.
momentjs.com Keyakinan 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of btcpayserver.oxtr.dev · checked Mar 2, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive