Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is domain@apiname.com.
The latest stored availability evidence still shows the domain reachable; 17 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bnc-invests[.]ltd
“Bnc invest”
bnc-invests.ltd — Não verificado. Resumo das evidências: VirusTotal 19/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 1 alert; Spamhaus DBL_SPAM; PhishDestroy score 95/100. Registrador: Atak Domain Bilgi Tekn….
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain bnc-invests.ltd shows it is actively used in a generic phishing campaign. The domain was registered on February 14, 2026 through Atak Domain Bilgi Teknolojileri A.Ş. and is currently resolved to the IPv4 address 51.68.132.247. Its authoritative name servers are ns1.sagaciousdns.com and ns2.sagaciousdns.com, both of which are publicly listed and point to the same hosting provider that serves the IP address.
VirusTotal scans have recorded detections from 18 of 91 security vendors, indicating that a notable portion of the security community considers the domain malicious. The domain is listed on at least one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing its classification as a phishing vector. No additional public evidence such as page titles, SSL certificate details, or HTTP response codes has been disclosed, leaving the exact content and impersonated brand of the site unknown.
Given the observed infrastructure, defenders should block network traffic to 51.68.132.247 and add bnc-invests.ltd to domain block lists across email gateways, web proxies, and endpoint protection solutions. Continuous monitoring of the domain’s DNS records and any emerging VirusTotal or blocklist entries is recommended to capture potential changes in the threat actor’s tactics. Organizations should also advise users to remain vigilant for unsolicited communications that could reference the domain, as the lack of publicly available page details suggests the attackers may rely on social engineering to drive victims to the site.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bnc-invests.ltd |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 12 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% de confiançaSwiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.
swiperjs.com 100% de confiançaSweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.
sweetalert.js.org 100% de confiançaSmartsupp is a live chat tool that offers visitor recording feature.
www.smartsupp.com 100% de confiançaOWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.
owlcarousel2.github.io 100% de confiançaModernizr is a JavaScript library that detects the features available in a user's browser.
modernizr.com 100% de confiançaQuery Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.
github.com 100% de confiançajQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% de confiançaThe chat button by GetButton takes website visitor directly to the messaging app such as Facebook Messenger or WhatsApp and allows them to initiate a conversation with you.
getbutton.io 100% de confiançaPopper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências arquivadas
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of bnc-invests.ltd · checked Jul 27, 2026
Evidências e relatórios externos
PD-20260727-CEF418 Recipient: domain@apiname.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo