Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
btcwhatif[.]app
“BTC What If”
证据摘要
This domain, btcwhatif.app, is identified as a cryptocurrency credential phishing site targeting users of Bitcoin-related services. Analysis indicates the site was designed to harvest login credentials, private keys, or wallet recovery phrases under the guise of a legitimate Bitcoin utility. The domain is currently offline, but prior activity suggests it was actively used for malicious purposes. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Name.com, Inc. and resolved to the IP address 35.157.26.135. It appears on one security blocklist and is flagged by 3 of 95 vendors on VirusTotal, indicating low but confirmed detection. The domain’s trust score is 0/100, and it employed technologies such as Netlify for hosting and Let’s Encrypt for SSL certification. The page title, BTC What If, was likely used to mimic a legitimate Bitcoin analytics tool or service. The domain is currently offline, but organizations and individuals should remain vigilant for similar threats. Network defenders are advised to block the IP address 35.157.26.135 and monitor for any re-emergence of this domain or related infrastructure. Users who may have interacted with the site should rotate credentials immediately and verify wallet security. Security teams should review logs for connections to the domain or IP and update detection rules to include these indicators of compromise.
已提交证据快照
- 已发送
- 台账记录
- 1
- 案件 ID
PD-20260211-8F98EE- 已捕获页面标题
- BTC What If
- PDF 文件
- PDF 证据
完整证据文本
Acceptable Use Policy (AUP): The domain btcwhatif.app is engaged in phishing activities, which directly contravenes the AUP's prohibition against illegal activities and fraud.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations, and the ongoing phishing operations constitute a clear breach of this policy.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which is relevant given the phishing nature of the domain.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities via electronic communications, applicable to the fraudulent activities associated with this domain.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits deceptive practices, which are evident in the phishing attempts linked to this domain.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to liability under applicable laws and regulations. Non-compliance could result in legal repercussions and damage to your reputation.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
检测时间线
-
VirusTotal
2 → 3
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of btcwhatif.app · checked Jun 27, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控