Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bit-coin[.]cyou
“bit-coin.cyou | 522: Connection timed out”
Osservazione memorizzata
Contrasto dei titoli osservato
Riepilogo delle prove
This domain, bit-coin.cyou, operates as a brand impersonation threat specifically targeting Bitcoin users. The infrastructure is designed to deceive visitors into believing they are accessing a legitimate cryptocurrency wallet service, likely harvesting credentials or private keys for unauthorized transactions. Analysis indicates the site employs social engineering tactics common in cryptocurrency fraud, including replica interfaces and urgent messaging to prompt user action. Infrastructure analysis reveals multiple red flags. The domain was registered on May 28, 2026, through Spaceship, Inc., and currently resolves to the IP address 188.114.97.3. Security vendors on VirusTotal flagged the domain at a rate of 2/95, while it appears on three separate security blocklists. The site uses Cloudflare with HTTP/3 and a Let's Encrypt SSL certificate, which, while common for legitimate services, is frequently exploited by malicious actors to appear trustworthy. The page title, bit-coin.cyou | 522: Connection timed out, suggests recent takedown efforts or infrastructure instability. Users who visited bit-coin.cyou should take immediate action to secure their assets. If any credentials, private keys, or recovery phrases were entered on the site, affected parties must transfer funds to a new wallet and revoke any connected authorizations. Monitor transaction histories for unauthorized activity and enable multi-factor authentication on all cryptocurrency accounts. Report the incident to relevant platforms and consider notifying local cybersecurity authorities to assist in tracking the fraudulent infrastructure.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260530-99495C- Artefatto PDF
- Prova in PDF
Base giuridica
Testo completo delle prove
Section 3.1 of AUP: The domain bit-coin.cyou is engaged in fraudulent activities, specifically phishing, which is a direct violation of your Acceptable Use Policy prohibiting illegal activities.
Section 5.2 of TOS: The registrar reserves the right to suspend or terminate services for any domain involved in deceptive practices. This domain is actively misleading users into providing sensitive information.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and the fraudulent use of information obtained through such access.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, which applies to phishing activities.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in deceptive practices to obtain personal information.
Regulatory Note: Failure to act on this report may result in liability for facilitating illegal activities and could expose your organization to regulatory scrutiny and potential penalties. Immediate action is recommended to mitigate these risks.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
8 fonti esterne monitorate Nessuna corrispondenza
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ZONA SHORTDOT · PROVE PUBBLICHE
.cyou
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie
2 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Analisi della configurazione del sito
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo