Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@ovh.net.
The latest stored availability evidence still shows the domain reachable; 18 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bitpays-invest[.]com
“bitpays-invest.com”
bitpays-invest.com — Doğrulanmamış. Kanıt özeti: VirusTotal 10/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, ESET); PhishDestroy score 93/100. Kayıt kuruluşu: Dynadot.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Analysis indicates that the domain bitpays-invest.com is currently active and has been identified as a generic phishing operation. The domain was registered through Dynadot Inc on March 16, 2025 and resolves to the IPv4 address 178.32.82.176. Infrastructure inspection shows that the authoritative name servers are ns3.ddoscure.com and ns4.ddoscure.com, both of which are associated with the same hosting provider. The domain appears on one security blocklist and is actively blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed has flagged it.
VirusTotal reports that three out of ninety‑one scanning engines have flagged the domain, providing additional corroboration of malicious intent. No public SSL certificate details, HTTP response codes, or page title information are available in the current intelligence set, leaving the exact surface‑level behavior of the site unverified. Defenders should treat any traffic to bitpays-invest.com as hostile. Recommended mitigation steps include adding the domain to local deny lists, configuring network firewalls to drop outbound connections to the resolved IP address, and ensuring that email gateways block URLs containing the domain.
Continuous monitoring of the IP address and name server records is advised, as the infrastructure could be repurposed for further campaigns. Organizations should also watch for related indicators such as the ns3.ddoscure.com and ns4.ddoscure.com name servers appearing in other threat feeds. Because the domain remains active, proactive blocking is the most effective defense.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 7 identified
YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
www.youtube.com %100 güvenBootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com %100 güvenNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org %100 güvenSelect2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.
select2.org %100 güvenjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com %100 güvenFancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.
fancyapps.com %100 güvenPopper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org %100 güvenVirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of bitpays-invest.com · checked Jul 27, 2026
Kanıtlar ve Dış Raporlar
PD-20260727-717D39 Recipient: abuse@ovh.net Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin