Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@globconnex.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bybit-scan[.]cc
Проверка домена bybit-scan.cc на фишинг и безопасность
“BYBIT — AML Service”
bybit-scan.cc — Непроверенный. Олицетворение бренда: Bybit; Тип мошенничества: Aml Scam. Сводка доказательств: VirusTotal 14/93 (ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, Ermes); URLQuery 3 alerts; PhishDestroy score 92/100. Регистратор: Cloudflare.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
PhishDestroy first observed bybit-scan.cc on Feb 11, 2026. The hostname explicitly references Bybit; stored content metadata identifies the same apparent target. The captured page title is “BYBIT — AML Service”. Stored page analysis classifies the content as aml scam. Current evidence score: 92/100 (critical).
Positive findings are stored from 2 sources: VirusTotal and URLQuery. VirusTotal recorded 14 detections among 93 engines: ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, Ermes, Emsisoft, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, Lionic, Netcraft, SOCRadar, Sophos, Webroot on Jul 18, 2026 at 18:45 UTC. URLQuery recorded 3 threat-system alerts on Feb 11, 2026 at 04:40 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 10:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:23 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:54 UTC.
The collector marked the hostname reachable on Aug 7, 2026 at 22:14 UTC, but did not retain the HTTP response code. Registration records for the domain list Cloudflare, Inc. as the registrar. At collection time, the hostname resolved to 185.138.90.227 on AS215540 (GCS-AS GLOBAL CONNECTIVITY SOLUTIONS LLP, GB). The IP and ASN identify shared CDN edge infrastructure; the origin server is not established by this address. The stored server header is Apache/2.4.52 (Ubuntu). DOM analysis on Jul 27, 2026 at 02:20 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt / R12 as the certificate issuer with validity through Jun 4, 2026; checked Mar 15, 2026 at 05:58 UTC.
The content indicators and 2 positive source findings support the current Bybit-themed aml scam classification.
Данные сетевой безопасности
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | www.bybit.com/common-static/cht-static/security-svc/js/finger_device.js |
malware | Unique code from Jetriz, Swid & Jeniva of the Tetris framework |
| DNS4EU | bybit-scan.cc |
malicious | Sinkholed |
| DigiCert UltraDNS | wcs.naver.com |
malicious | Sinkholed |
Процесс реагирования на угрозы
Статус в публичных блок-листах
Технологии · 15 identified
Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.
developers.google.com 100% уверенностиNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% уверенностиReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% уверенностиOpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.
openresty.org 100% уверенностиAmazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 100% уверенностиTwitter Ads is an advertising platform for Twitter 'microblogging' system.
ads.twitter.com 100% уверенностиLinkedIn Insight Tag is a lightweight JavaScript tag that powers conversion tracking, website audiences, and website demographics.
business.linkedin.com 100% уверенностиLinkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.
business.linkedin.com 100% уверенностиHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% уверенностиGoogle Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com 100% уверенностиGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% уверенностиFacebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com 100% уверенностиAkamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.
akamai.com 100% уверенностиHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% уверенностиАнализ VirusTotal
Архивные доказательства
Анализ производительности сайта
Google PageSpeed Insights — mobile performance audit of bybit-scan.cc · checked Mar 2, 2026
Доказательства и внешние отчеты
PD-20260211-ADC423 Recipient: abuse@globconnex.com Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание