bidsy[.]biz

The domain bidsy.biz was a phishing site engaged in brand impersonation, specifically targeting users of the brand 'across'. This type of scam typically aims to deceive victims into divulging sensitive information or credentials by mimicking a legitimate service. As of the latest verification, bidsy.biz has been taken offline, but it previously posed an elevated risk due to its fraudulent activity.

Technical indicators confirm the malicious nature of bidsy.biz. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Fortinet. It appeared on 1 security blocklist (PhishDestroy) and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on November 02, 2024. The site resolved to the IP address 49.12.128.176, hosted by Hetzner Online GmbH in Germany (AS24940), and lacked an SSL certificate. The observed page title was 'Home - Bidsy', and it used nameservers dns19.parkpage.foundationapi.com and dns20.parkpage.foundationapi.com. Trust scores from Gridinsoft and Scamadviser were 4/100 and 1/100, respectively, further indicating its suspicious nature.

Individuals who interacted with bidsy.biz should take immediate safety steps. If credentials or login details were entered, change passwords for the affected accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized activity and report any suspected fraud to the legitimate service provider. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). Victims should also consider notifying their local cybercrime authorities or consumer protection agencies.