Domain security report

duplicate-disabled-155321.invalid

“Buy”

Verdetto di minaccia

CriticoRicorso in materia di domini

Assessment sources

Assessment based on the stored source evidence below. Review sources →

100/100

Evidence score

Disponibilità Contenuto non disponibile Il contenuto non era disponibile nell'ultima osservazione Osservato Oct 17, 01:15 UTC· HTTP probe

Segnali di rischio

Rilevamenti VirusTotal: 12/91 Automated brand label: Bybit

Registrar: CSC
Resolved IP: 43.132.83.231
Registered: 21/02/2026

Stored captures

2 sources

Primary capture · duplicate-disabled-155321.invalid

The capture source is temporarily unavailable.

Fonte: Primary capture
Collected · UTC: 2026-02-26 22:24 UTC

Open capture

Primary capture

URLScan capture

In this reportGet help

Riepilogo del rapporto

Analysis of www.bybitgum.com shows an active high‑risk infrastructure that impersonates the Bybit brand.

L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.

Additional indicators at a glance

VirusTotal

12 det.

OTX references

16 community refs

DNS Security

3/14

CF Radar

Malevolo

URLScan

Segnala ↗

Certificato TLS

Expired or unverified dates

TrustAsia Technologies, Inc. / TrustAsia DV TLS RSA CA 2025 · Hostname coverage not recorded

Età

8 mo

Stato osservato

Contenuto non disponibile

Elenco da eliminare

Presente

Source evidence

8 · sources

These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.

VirusTotal

12 / 91

2026-08-26 03:24:20 UTC

Segnala

Interpretation & limits

Engine detections from this stored analysis. Vendors and collection times may differ from other sources.

CF Radar

provider verdict: malicious

Observation time not recorded

Segnala

Interpretation & limits

A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.

Blocchi DNS

3/14

Observation time not recorded

Interpretation & limits

A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.

OTX

16 community references

2026-03-01 00:31:27 UTC

Segnala

Interpretation & limits

Community publication references, not a vendor verdict or evidence of a common operator.

URLScan capture

rapporto memorizzato

View stored capture ↗

Observation time not recorded

Segnala

Interpretation & limits

A preserved page image documents what the collector received; a capture is not a safety verdict.

URLScan verdict

Analisi completata

2026-07-29 02:50:04 UTC

Segnala

Interpretation & limits

This is the recorded automated analysis. Completion alone is not a safety verdict.

Google Safe Browsing

Checked; no threat flag recorded

2026-03-02 20:53:46 UTC

Segnala

Interpretation & limits

A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.

Public blocklists

0 external matches

2026-10-17 18:20:01 UTC

Dettagli

Interpretation & limits

A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.

Informazioni sulla sicurezza di rete

DNS Provider Blocks 3 / 14

Brand Bybit Cloudflare Family Cloudflare Security

Cloudflare Radar Verdict Malevolo

Security threats Phishing Phishing

Riepilogo delle prove

AI-assisted analysis Stored narrative · generated 2026-07-12 22:43:45 UTC. Provider checks below retain their own observation dates. This narrative is an interpretation of collected evidence, not an independent source verdict.

Analysis of www.bybitgum.com shows an active high‑risk infrastructure that impersonates the Bybit brand. The domain was registered on February 21, 2026 through CSC Corporate Domains, Inc., and resolves to IP 43.132.83.231 located in Japan under ASN AS139341 (ACE). HTTP requests return a 302 redirect and the site presents a page titled “Buy”. Technical fingerprints include Nginx, OpenResty, React, Amazon Web Services, and client‑side integrations for Google Sign‑in, Apple Sign‑in, Yandex.Metrika, and Twitter Ads. The authoritative name servers are ns-1367.awsdns-42.org, ns-1618.awsdns-10.co.uk, ns-7.awsdns-00.com, and ns-7 (truncated). The TLS certificate is issued by TrustAsia Technologies, Inc. under the TrustAsia DV TLS RSA CA 2025. Reputation metrics are poor: Gridinsoft scores the domain 0/100, it appears on one security blocklist and is blocked by PhishDestroy. AlienVault OTX references the domain in sixteen threat‑intel pulses, and VirusTotal reports twelve detections out of ninety‑five scanners. The listed scam type is a crypto‑related scam targeting Bybit users. While the page content has not been independently verified, the convergence of brand impersonation, redirection behavior, low trust scores, and multiple vendor detections indicates a malicious operation. Defenders should block the domain at network perimeter, monitor DNS queries for the listed name servers, and add the IP address to threat‑intel feeds. Continuous re‑evaluation is advised as additional indicators may emerge.

What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.

Recorded dataPartial recordUTC

VirusTotal: 12 / 91 · engine detections2026-08-26 03:24:20 UTC
URLScan analysis: Automated verdict retained2026-07-29 02:50:04 UTC
Google Safe Browsing: Checked; no threat flag recorded2026-03-02 20:53:46 UTC
OTX publications: 16 · community references2026-03-01 00:31:27 UTC
External blocklists: 0 · external matches2026-10-17 18:20:01 UTC
Cloudflare Radar: maliciousCollection time not recorded
DNS security filters: 3 / 14 · provider blocksCollection time not recorded
Spamhaus DBL: Collection time retained; verdict missing2026-09-12 10:35:27 UTC
Domain registration: CSC Corporate Domains, Inc.Collection time not recorded
Network & DNS: 43.132.83.231 · 1 · nameserversCollection time not recorded
Certificato TLS: TrustAsia Technologies, Inc. / TrustAsia DV TLS RSA CA 20252026-03-15 08:11:17 UTC
Page captures: 2 · retained captures2026-02-26 22:24:36 UTC
Page analysis: 1 · automated brand labels2026-07-09 02:21:28 UTC
Observed indicators: 1 · wallet / Telegram indicators2026-07-29 02:28:00 UTC
Detection & evasion: Stored browser and crawler comparison2026-10-17 01:15:30 UTC
PageSpeed performance: 100/100 · mobile performance2026-03-02 21:02:18 UTC
Availability history: 1 · stored state changes2026-10-01 01:54:39 UTC
Source observation history: 1 · stored source events2026-09-25 01:31:10 UTC
Lookalike relationships: 100 · retained relationshipsCollection time not recorded
IP reputation: Network-level observations2026-09-13 04:01:23 UTC

Not recorded in this report 11

These checks have no retained result. This does not mean they passed or that a scan is running.

URLQuery
PhishStats
Gridinsoft
Scamadviser
HTML archives
Site configuration files
Response records
Recorded subdomains
Segnalazioni della comunità
Chainabuse records
Wayback archive

Download the dated observations and supporting metadata.

Extracted from stored page analysis

Observed indicators

0 wallet · 1 Telegram

Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.

https://t.me/BybitEnglishStored page reference

IoC extraction recorded 2026-07-29 02:28:00 UTC

Stato della lista di blocco pubblica

Domain details

Dominio

URLScan verdict Analisi completata score 0 report ↗

Observed indicators0 wallet · 1 Telegram — full values ↗

Reputazione IP abuse score 0/100 0 reports checked 13/09/2026

OTX tags a domainsaaaaaddressaddress domainaddress poadversariesalfperamazon musicapacheappleas133618as15169as16509ascii+6 more

Registrar CSC

(US)

Contatto abusidomainabuse@cscglobal.com

Registro ICANNICANN Lookup (RDAP) →

Ricerca WHOISICANN RDAP per duplicate-disabled-155321.invalid →

RegistrazioneCreato 21/02/2026 (238d)

Cloaking Cloaking Detected Redirect split · score 3/6

unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-155321.invalid', port=80): Max retries exceeded with url: / (Caused by

checked 17/10/2026

Tempo fino alla prima indisponibilità 17 days

Cosa conteggiamo Tempo trascorso dalla prima segnalazione di abuso archiviata alla prima osservazione che il contenuto non era disponibile. Ciò non ne stabilisce la causa.

Cosa contiene ogni rapporto I record archiviati dei report in uscita possono fare riferimento a prove disponibili in quel momento, come verdetti dei fornitori, dati di registrazione, dettagli di hosting, classificazioni o screenshot. Questa pagina non deduce l'esatto carico utile consegnato, la ricevuta, la conferma o l'azione da parte di un destinatario.

Dettagli tecniciProvenance & timestamps

Rilevato per la prima volta26/02/2026

DOM Analysisanalyzed 09/07/2026score 100/1001 brand signal

IoC Extractionscanned 29/07/20260 wallet · 1 Telegram IoC

Favicon Hash

ICANN OVERSIGHT

Accreditamento e contesto RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

L’accreditamento è un contratto, non un sigillo di sicurezza. Verifica le tariffe ICANN Leggi il RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight

Accountability draft Nulla viene inviato automaticamente.

Network & certificates

Stored technical evidence

Network & DNS

Resolved IP: 43.132.83.231
Network ASN: AS139341
Organization: ACE
Observed location: Osaka, JP
Server header: Openresty

Nameserver 1

ns-799.awsdns-35.net

Location describes the IP network.

Certificato TLS

Issuer: TrustAsia Technologies, Inc. / TrustAsia DV TLS RSA CA 2025
Hostname coverage: Hostname coverage not recorded
Collection time: 2026-03-15 08:11:17 UTC
Collection source: PhishDestroy collector

Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.

viewdns.info · 43.132.83.231 rapiddns.io

Latest Classified Outcome 2026-10-17 01:15:30 UTC

Primary outcome Sconosciuto reason: Probe Inconclusive 20% confidence

Attribution source: Current Http Probe

Evidence layers Availability: Unreachable Content: Unknown DNS: Stale Registration: Unknown

Latest HTTP observation Sconosciuto Probe Inconclusive 20% 2026-10-17 01:15:30 UTC

RDAP registration Sconosciuto

Observed timeline last reachable: 2026-09-23 02:11:57 UTC

Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.

Tecnologie · 16 identified

Google Sign-in

Apple Sign-in

Nginx

Web servers Reverse proxies

React

JavaScript frameworks

OpenResty

Web servers

Amazon Web Services

PaaS IaaS

Yandex.Metrika

Twitter Ads

Naver Analytics

MGID

Linkedin Insight Tag

Linkedin Ads

HSTS

Sicurezza

Google Tag Manager

Tag managers

Facebook Pixel

HTTP/3

Miscellaneous

Detected via Cloudflare Radar · Wappalyzer engine

Segnala questo dominio Invia le prove e contribuisci a proteggere gli altri

Analisi di VirusTotal

12 / I fornitori di sicurezza 91 hanno contrassegnato questo dominio

View on VT

Last analyzed 2026-08-26 03:24:20 UTC

ADMINUSLabs

Chong Lua Dao

CyRadar

ESET

Forcepoint ThreatSeeker

Fortinet

Kaspersky

Lionic

SafeToOpen

Seclookup

VIPRE

Webroot

Analisi delle prestazioni del sito

Google PageSpeed Insights — mobile performance audit of duplicate-disabled-155321.invalid · checked Mar 2, 2026

100

Good

Performance

FCP

0.81s

First Contentful Paint

LCP

0.81s

Largest Contentful Paint

CLS

Cumulative Layout Shift

TBT

0ms

Total Blocking Time

0.81s

Speed Index

Registration & observation details1

Availability observations

Last reachable observation: 2026-09-23 02:11:57 UTC

An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.

Prove relative all'individuazione e all'evasione

Cloaking confermato: gli scanner e i visitatori visualizzano contenuti diversi

Osservato A chi utilizzava lo scanner e ai visitatori venivano proposti contenuti diversi 2026-10-17 03:15:30 UTC

La pagina forniva una risposta a un visitatore che utilizzava un browser e un’altra a un crawler o a uno scanner di sicurezza. Il cloaking serve esclusivamente a impedire ai revisori di accedere alla vera pagina di destinazione.

Flag di occultamento memorizzato: Osservato
Tipo di cloaking: redirect_split
Punteggio di cloaking: 3/6
Ultima scansione di occultamento: 2026-10-17 03:15:30 UTC

Nota dello scanner: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-155321.invalid', port=80): Max retries exceeded with url: / (Caused by

Verifica delle impronte digitali in tempo reale TDS

Sette indicatori Keitaro e un confronto tra browser e crawler. Una nuova scansione parte solo premendo il pulsante.

Risultato salvato

Non raggiungibile 2026-10-15 06:46:46 UTC

Forensic History & Detection Timeline

ThreatLifecycleTelemetry

This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.

Domain Status Transition 2026-09-25 01:31:10 UTC
Source: PhishDestroy monitoring
Event details
Domain state transitioned from alive to dead.

Stored observation history2

Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.

2026-10-01 01:54:39 UTC
Availability monitor · Recorded state
Sconosciuto

stale_current_evidence
2026-09-25 01:31:10 UTC
Availability monitor · Recorded state
Raggiungibile→Non disponibile

Pipeline di risposta alle minacce

Scoperta

Analysis

Monitoring

14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.

Minaccia rilevata

duplicate-disabled-155321.invalid rilevati e inseriti in coda per un’analisi completa

26/02/2026

URLScan.io Capture

Memorizzato URLScan report with capture artifacts

Cloudflare Radar Report

A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.

VirusTotal

12/91 recorded on VirusTotal

26/08/2026

OTX Community References

16 community publication references on AlienVault OTX. References are not vendor verdicts and are excluded from the evidence score.

01/03/2026

DNS Security Blocks

Blocked by 3 of 14 checked DNS providers: Brand bybit, Cloudflare family, Cloudflare security

CF Radar: Malicious

Cloudflare Radar classified this domain as Security threats, Phishing, phishing

Brand Impersonation

Impersonation of Bybit

Forensic Evidence Collected

Stored evidence from URLScan.io, stored screenshot

Technical Analysis Recorded

Il report contiene tecnologia archiviata o risultati di analisi forensi.

17/10/2026

Content Observed Unavailable

Il monitoraggio ha registrato una risposta non disponibile; la causa non è stata stabilita in modo indipendente.

25/09/2026

DestroyList pubblicato

Listed in the public PhishDestroy/DestroyList repository

26/02/2026

Content Observed Unavailable

Gli ultimi controlli memorizzati indicano che il contenuto segnalato non è disponibile; questo non stabilisce chi o cosa ha causato il cambiamento.

25/09/2026

Tempo fino alla prima indisponibilità

396 ore trascorse dal rilevamento alla prima osservazione non disponibile.

How we investigate & report

Public scans, evidence and abuse channels

We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.

01Public scans & evidence collection10 sources and tool groups

urlscan.io Screenshot · DOM · HTTP

Capture the rendered page, requests and visible infrastructure.

VirusTotal Multi-engine verdicts

Compare the available engine results and retain the analysis timestamp.

Google Safe Browsing Transparency Report

Check whether Google currently lists the URL as unsafe.

Cloudflare Radar DNS · certificates · categories

Inspect a public scan and its recorded network and classification data.

AlienVault OTX Threat-intelligence pulses

Look for indicator references and related community intelligence.

Wayback Machine Historical evidence

Compare archived captures and preserve historical context.

abuse.ch ThreatFox IOC correlation

Look for matching indicators and associated threat records.

crt.sh Certificate Transparency

Inspect certificate records and related hostnames.

DNS Security Filters Quad9 · AdGuard · CleanBrowsing

Compare security resolver responses and record observed blocking.

Web-Check Surface inspection

Inspect the public DNS, TLS, HTTP and technology surface.

02Abuse reports & follow-upRegistrar, hosting and security channels

Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.

Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.

GoogleSafe Browsing GoogleWeb Risk MicrosoftSmartScreen VirusTotalURL analysis CloudflareRadar / abuse reporting YandexSafe Browsing URLScan.ioPublic scan ESETSample / URL submission BitdefenderURL submission NortonSafe Web SymantecRecensione del sito AviraURL reporting Avast / AVGURL reporting KasperskyOpenTIP Dr.WebOnline scanner NetcraftAbuse reporting PhishTankCommunity reporting APWG eCXPhishing intelligence PhishStatsPublic feed Phish.ReportHosting abuse SpamhausDomain reputation PolySwarmMulti-engine analysis CheckPhishURL scan QutteraMalware scan URLqueryBrowser analysis Criminal IPAsset intelligence CRDFThreat Center ScamadviserReputation check MyWOTCommunity reputation

Domini simili

112 domini simili memorizzati

fybit.com bitsquatting Report interno b-ybit.com hyphenation b.ybit.com subdomain b6bit.com replacement babit.com replacement baybit.com insertion bbit.com omission bbybit.com repetition bbyit.com transposition bgbit.com replacement bhbit.com replacement bibit.com bitsquatting

Mostra tutto (88)

bsbit.com replacement btbit.com replacement bubit.com replacement buybit.com insertion bxbit.com bitsquatting by-bit.com hyphenation byabit.com insertion byb-it.com hyphenation byb.it.com subdomain byb1t.com homoglyph bybbit.com repetition bybet.com vowel-swap bybht.com bitsquatting bybi.com omission bybi4.com bitsquatting bybig.com replacement bybiit.com repetition bybiot.com insertion bybip.com bitsquatting bybir.com replacement bybiu.com bitsquatting bybiut.com insertion bybiv.com bitsquatting bybiy.com replacement bybiz.com replacement bybjt.com replacement byblt.com homoglyph bybmt.com bitsquatting bybot.com replacement bybt.com omission bybti.com transposition bybuit.com insertion bybut.com replacement bydit.com homoglyph bydlit.com homoglyph bydlt.com homoglyph bygit.com replacement byhbit.com insertion byhit.com replacement byibit.com homoglyph byibt.com transposition byit.com omission byjit.com bitsquatting bylbit.com homoglyph byldit.com homoglyph bynit.com replacement bytbit.com insertion byubit.com insertion byvit.com replacement byxbit.com insertion byybit.com repetition clybit.com homoglyph dlybit.com homoglyph dybit.com homoglyph dydit.com homoglyph gybit.com replacement hybit.com replacement nybit.com replacement rybit.com bitsquatting vbybit.com insertion vybit.com replacement xn--bybt-7w5a.com homoglyph ybit.com omission b9bit.com bitsquatting bybat.com bitsquatting bybid.com bitsquatting bybit1.com addition bybit4.com addition bybita.com addition bybitb.com addition bybitc.com addition bybitd.com addition bybite.com addition bybitf.com addition bybitg.com addition bybith.com addition bybiti.com addition bybitj.com addition bybitk.com addition bybitl.com addition bybitm.com addition bybitn.com addition bybito.com addition bybitp.com addition bybitq.com addition bybitr.com addition bybits.com addition bybitt.com addition

Visualizzati 100 di 112

Dati e relazioni esterne

Analisi della sicurezza

URLScan Analyzed VirusTotal 12 det. ChainPatrol URLQuery SSL Laboratori Hostname coverage not recorded CF Radar Malevolo DNS Security 3/14 OTX 16 refs WOT ScamAdviser Verifica lista nera URLVoid Sucuri SiteCheck Osservatorio MDN

OSINT e intelligence

Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Rock Sign-in search IntelX crt.sh Certificati WHOIS Wayback

DNS e rete

nslookup.io DNS bgp.tools ASN /Percorso

SEO e dominio

SpyFu Moz DA/PA Ahrefs Backlink

Analisi approfondita

Help & reporting

Questo sito ti ha influenzato in qualche modo?

5 evidence signal groups linked 0 stored notification records Contenuto non disponibile

Listed domains receive at least one abuse report; this entry has no retained notification history.

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.

Immediate steps Find reporting contacts

Official reporting routes

FBI IC3

Segnala i crimini legati a Internet negli Stati Uniti

Federal tips line1-800-CALL-FBI

Report online

Europol

Trova il canale di segnalazione ufficiale per il tuo paese dell'UE

National police directory

Find your country

Action Fraud

Segnala frodi e crimini informatici in Inghilterra, Galles e Irlanda del Nord

Contact centre0300 123 2040

Report online

PhishDestroy listing review Non un rapporto delle forze dell'ordine

Ricorso in materia di domini

Richiedi una revisione se possiedi questo dominio e ritieni che l'elenco non sia corretto

Attenzione ai truffatori che promettono il recupero dei fondi! I criminali possono contattare nuovamente le vittime fingendo di essere investigatori, avvocati o agenti di recupero. Non pagare commissioni anticipate né condividere credenziali. Scopri di più sulle frodi relative ai sussidi di recupero →

Segnalalo alle autorità locali

Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.

Elenco di 97 paesi

Template-based draft · optional AI wording assistance requires separate consent

Bozza assistita dall'intelligenza artificiale: i dettagli dell'incidente vengono elaborati dal fornitore di intelligenza artificiale · Controllalo e invialo tu stesso

After a phishing incident

Raccomandazioni e consigli per le vittime

Choose the steps that match what you shared. Keep a copy of this report alongside your own records.

Cosa devo fare subito?

Urgente

Stop using the suspicious site. Open the real service through its official app or an address you already trust.

Modifica tutte le password — e-mail, account Exchange, qualsiasi servizio che utilizzi la stessa password
Abilita l'autenticazione a due fattori (2FA) utilizzando un'app di autenticazione (non via SMS). Disattiva il recupero tramite SMS
Carte congelate se hai inserito i tuoi dati bancari sul sito di phishing

Quali informazioni devo raccogliere per la mia relazione?

Linee guida dell'FBI

Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗

Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
Date e orari esatti — di ogni transazione e del primo contatto con il truffatore
Schermate — siti web truffaldini, messaggi in chat, e-mail, transazioni tramite portafoglio digitale, social media
Tutti gli URL e i domini utilizzato dal truffatore (tra cui duplicate-disabled-155321.invalid)
Comunicazioni — e-mail, SMS, numeri di telefono, nomi utente utilizzati dal truffatore

Anche se non conosci tutti i dettagli — sporgere comunque denuncia. Anche le informazioni parziali sono comunque utili alle indagini.

A chi devo segnalare la truffa?

FBI IC3 — Internet Crime Complaint Center (sistema di segnalazione federale degli Stati Uniti)
Europol — Segnalazioni relative alla criminalità informatica in Europa (UE)
Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
Polizia locale — crea un documento ufficiale, anche se non è in grado di agire immediatamente

A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.

How do phishing scams typically work?

Siti web fasulli — cloni perfetti, al pixel, di siti legittimi con domini leggermente modificati
Macellazione dei suini — fiducia conquistata nel corso di settimane tramite Telegram/WhatsApp/app di incontri, per poi rubare i soldi
Truffe legate al recupero dei fondi — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
Truffe basate sull'intelligenza artificiale — i deepfake, il phishing automatizzato e i siti generati dall’intelligenza artificiale rendono più difficile individuare le frodi

Come posso proteggermi in futuro?

Aggiungi i siti ufficiali ai preferiti — Non cliccare mai sui link contenuti nelle e-mail, nei messaggi diretti o negli annunci pubblicitari
Verifica i domini — controllare PhishDestroy prima di interagire. Verifica l'HTTPS, l'ortografia e l'età del dominio
"Troppo bello per essere vero" = truffa — rendimenti garantiti, testimonial di personaggi famosi, scadenze urgenti

Further guidance: NIST · phishing response FBI IC3 · reports & evidence FTC · recovery scams

Verifica qualsiasi dominio

Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica

Scansiona ora

Segnala un tentativo di phishing

Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità

Segnala

Feed in tempo reale sulle minacce

Segnalazioni recenti di phishing e modifiche osservate della disponibilità

Monitora

Rimani informato, rimani al sicuro

Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo

Feed in tempo reale sulle minacce Contesta questo annuncio

Read the evidence in context

Informazioni su questo rapporto: duplicate-disabled-155321.invalid

Questo rapporto presenta le ultime prove archiviate disponibili per PhishDestroy. I timestamp della sorgente vengono mostrati ove disponibili; la disponibilità e i verdetti del fornitore possono cambiare dopo il ritiro.

Il sito catturato mostrava il titolo della pagina “Buy” e potrebbe spacciarsi per Bybit.

Al momento di 2026-08-26 03:24:20 UTC, duplicate-disabled-155321.invalid ha ricevuto rilevamenti dai motori di sicurezza 12.

Each source records a particular observation. A screenshot, an available website, or a result with no detections does not establish that a site is safe. Source results can change after they are collected.

Se ritieni che questo elenco sia impreciso, presentare ricorso. Per conoscere la nostra metodologia, visita Pagina delle domande frequenti.

HTML · IFRAME

Incorpora questo rapporto

Condividi queste informazioni sulle minacce sul tuo sito web o sul tuo blog

embed.html

<iframe
  src="https://phishdestroy.io/it/embed/domain/duplicate-disabled-155321.invalid"
  title="PhishDestroy threat report for duplicate-disabled-155321.invalid"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

duplicate-disabled-155321.invalid

Additional indicators at a glance

Source evidence

VirusTotal

CF Radar

Blocchi DNS

OTX

URLScan capture

URLScan verdict

Google Safe Browsing

Public blocklists

Riepilogo delle prove

Observed indicators

Stato della lista di blocco pubblica

Domain details

Accreditamento e contesto RAA

Registrar accreditation and DNS abuse obligations

Network & certificates

Nameserver 1

Latest Classified Outcome 2026-10-17 01:15:30 UTC

Analisi di VirusTotal

Availability observations

Cloaking confermato: gli scanner e i visitatori visualizzano contenuti diversi

Forensic History & Detection Timeline

Pipeline di risposta alle minacce

Public scans, evidence and abuse channels

Domini simili

Infrastruttura e rapporti correlati

Risultati corrispondenti 4

Bybit usurpazione d'identità 8

Stesso registrar: CSC 6

Rapporti recenti sulle minacce 4

Dati e relazioni esterne

Questo sito ti ha influenzato in qualche modo?

Official reporting routes

Segnalalo alle autorità locali

Raccomandazioni e consigli per le vittime

Verifica qualsiasi dominio

Segnala un tentativo di phishing

Feed in tempo reale sulle minacce

Rimani informato, rimani al sicuro