bsccheck.info
“SEND USDT”
www.bsccheck.info identified as a crypto drainer phishing site. Zero detections on VirusTotal, registered via GoDaddy, and currently active despite one.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
This domain, www.bsccheck.info, is currently flagged as an active crypto drainer phishing site targeting cryptocurrency transactions. Analysis of the page title, SEND USDT, indicates an intent to deceive users into transferring Tether (USDT) under fraudulent pretenses, likely through a fake wallet interface or transaction authorization prompt. The domain remains operational and has not yet been widely detected by security vendors, suggesting a low-profile but targeted campaign. Infrastructure analysis reveals that www.bsccheck.info is registered through GoDaddy.com, LLC, with an IP address resolving to 77.245.76.110, hosted under AS20860 (IOMART CLOUD SERVICES LIMITED) in the United Kingdom. Despite its active status, the domain has received zero detections from 95 vendors on VirusTotal, indicating either a new or evasive threat. It appears on one security blocklist, suggesting preliminary but limited awareness within the threat intelligence community. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious domains, providing no inherent red flags beyond its widespread use in phishing infrastructure. Current risk assessment categorizes this domain as a high-priority threat due to its direct financial targeting and low detection rates. Users and organizations are advised to block access to 77.245.76.110 and monitor for any attempts to interact with the domain, particularly in environments handling cryptocurrency transactions. Network administrators should update firewall rules to deny traffic to this IP and domain, while end-users should verify transaction requests through official channels before authorizing any transfers. Given the domain's persistence and lack of widespread detection, proactive monitoring and containment measures are recommended to mitigate potential financial losses.
威胁响应 Pipeline
公共封禁名单状态
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not observed
- 伪装评分
- 0/6
- Last cloaking scan
Scanner note: timeout: raw=timeout; http=0; via=http_proxy; error=HTTPConnectionPool(host='138.128.153.92', port=5126): Read timed out. (read timeout=7)
VirusTotal 分析
存档证据
社区报告
由 1 名社区成员报告;首次发现于 2026年5月30日
- 已存储报告
- 1
- 已报告的唯一 URL
- 1
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。