VirusTotal
3 / 89
“PNCEX”
www.bybitcoin.my is a brand impersonation domain targeting Bybit users, flagged by 3/95 security vendors. Immediate caution advised for crypto transactions.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
This domain, www.bybitcoin.my, poses an elevated risk as a brand impersonation threat specifically targeting Bybit, a cryptocurrency exchange platform. Analysis indicates the domain was designed to mimic legitimate Bybit services, potentially deceiving users into disclosing sensitive credentials or authorizing fraudulent transactions. The page title 'PNCEX' further suggests an attempt to mislead visitors by presenting a fabricated trading interface, increasing the likelihood of financial loss or unauthorized account access. Infrastructure analysis reveals the domain was registered on September 5, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious domains. The domain resolves to the IP address 151.242.20.56 and is currently flagged by one security blocklist. VirusTotal detection metrics show 3 out of 95 security vendors have identified this domain as malicious, confirming its classification as a brand impersonation threat. The domain has since been taken offline, though residual risks may persist for users who interacted with it prior to deactivation. Users who visited www.bybitcoin.my or engaged with its content are advised to take immediate action. First, revoke any active sessions or authorizations linked to the domain through their Bybit account security settings. Second, monitor account activity for unauthorized transactions and report suspicious behavior to the legitimate platform. Third, scan local devices for malware or unauthorized modifications, as interaction with such domains may have exposed systems to additional threats. If credentials were entered, reset passwords and enable multi-factor authentication on all related accounts to mitigate further risks.
Сохраненные данные сравнения данных сканера и браузера для данного хоста, а также проверка отпечатков в режиме реального времени для систем распределения трафика типа «Кейтаро».
Примечание к сканированию: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-4705.invalid', port=80): Max retries exceeded with url: / (Caused by Ne
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
a10.share-dns.comb10.share-dns.netLocation describes the IP network.
12 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Сохранено 112 похожих доменов
Показано 100 из 112
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Template-based draft · optional AI wording assistance requires separate consent
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасДобавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьНедавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьОтслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание