Is api-dsbot-pay.cc a scam?

Our automated security review flags api-dsbot-pay.cc as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is api-dsbot-pay.cc safe to use?

No — api-dsbot-pay.cc scored 25/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does api-dsbot-pay.cc have a valid SSL certificate?

Yes. api-dsbot-pay.cc presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 43 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the api-dsbot-pay.cc domain?

api-dsbot-pay.cc is 9 months old, registered on 8/22/2025 through Cloudflare, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Is api-dsbot-pay.cc on any phishing or malware blacklists?

No. api-dsbot-pay.cc is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is api-dsbot-pay.cc hosted?

api-dsbot-pay.cc resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the api-dsbot-pay.cc report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

DANGEROUS

Crypto scam / wallet-drainer

Crypto payment gateway for 'Drainer Shop Bot' using urgency timers and Telegram funnel on a 283-day-old .cc domain flagged in phishing reports. Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Security Review

Is api-dsbot-pay.cc legit or a scam?

Name: Is api-dsbot-pay.cc legit or a scam?
Item: api-dsbot-pay.cc
Rating: 2
Author: MalwareTips

Our verdict:Dangerous· 25/100

SafeSuspiciousDangerous

Crypto payment gateway for 'Drainer Shop Bot' using urgency timers and Telegram funnel on a 283-day-old .cc domain flagged in phishing reports.

Top reasons

Countdown timer and urgency language designed to rush payments.Funnels all activity through Telegram, a common channel for crypto scams.Domain name follows 'pay' pattern on .cc TLD frequently used by fraud farms.

api-dsbot-pay.ccScanned 4d ago

Post Facebook

Trust score

DANGEROUS

Heuristics 61·MT 22

Category tags

crypto payment#Crypto Fraud85% MT confidence

Technical red flags (1)

Countdown / Urgency

Warning signals (2)

Domain is 9 months old Scam-network signals (20/100)

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

—

Data unavailable

Domain Age

9 months old

Registered Aug 22, 2025

MT Intelligence

Dangerous

High likelihood · 85% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust22/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The page presents itself as an anonymous crypto payment gateway tied to a product called Drainer Shop Bot, complete with multiple wallet addresses and a 59-minute countdown timer. This matches common patterns for crypto fraud sites that herd users into Telegram channels. The domain carries a low suspicion score from our fingerprinting but shows the classic 'pay' naming on a .cc TLD often used in casino-style farms. While the IP has zero abuse reports and the domain is 283 days old with valid SSL, no business registration exists and the page explicitly lacks any contact email or address. The domain also appears in external phishing lists referencing multiple detections, outweighing the clean hosting signals.

Full dossier

Analysis complete

Page Content

The site displays a crypto payment form accepting USDT and USDC across multiple networks, with repeated warnings about submitting TXIDs and a visible countdown timer creating urgency. It contains no login forms but pushes users to return to a Telegram bot after payment.

Infrastructure

Hosted on IP 104.21.39.169 with a clean abuse score and valid SSL from Google Trust Services. The page loads external resources from cdnjs and qrserver but shows no malware detections in our feeds.

Domain History

Registered 283 days ago through Cloudflare with privacy disabled. No business registration records found and global traffic index shows the domain is not ranked.

Web Reputation

Zero direct scam complaints or reviews located, yet the domain is noted in phishing report databases alongside other flagged sites with five detections referenced.

Risk Factors

Countdown timer and urgency language designed to rush payments.
Funnels all activity through Telegram, a common channel for crypto scams.
Domain name follows 'pay' pattern on .cc TLD frequently used by fraud farms.
Listed in phishing report databases with multiple detections noted.
No business registration or verifiable company contact details present.

Positive Signals

Hosting IP shows zero abuse reports.
Valid SSL certificate issued by Google Trust Services.
Domain has existed for 283 days rather than appearing brand new.

AI Recommendation

Do not send cryptocurrency or submit any transaction IDs. Close the page and avoid interacting with the linked Telegram bot.

Scam network detected

Related infrastructure identified

Funnels users into Telegram and uses 'pay' naming on low-trust .cc TLD, matching common casino-farm patterns.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

api-dsbot-pay.cc

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for api-dsbot-pay.cc, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

9 months

Registered Aug 2025

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

1 scam report

Key findings

6 headline facts from open-web research

Domain api-dsbot-pay.cc consistently listed in PhishDestroy.io reports alongside other flagged domains with reference to 5 detections
Page title on domain: "Drainer Shop Bot - Crypto Payment"
Domain age reported as 283 days
No direct user-generated scam reports, complaints, or reviews found on Reddit or other sites in searches for domain + scam/review/complaint
No evidence of business registration or legitimate company associated with the domain
No indications of typosquatting or cloning of major brands like PayPal, Binance, or Roblox

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research found the domain listed in phishing report databases alongside other flagged sites with five detections referenced. No direct user-generated scam reports, complaints, or reviews were located on Reddit or other consumer sites.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Evidence (2)

Funnels users into Telegram — common herding channel for crypto scams.
Name contains "pay" on low-trust .cc TLD — common casino-farm pattern.

Linked signals (3)

cdnjs.cloudflare.comt.mePattern · Casino Farm Name

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbers2374894

Postal addressNot listed

Linked social profiles1

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No postal address visible on the page.
Countdown timer or 'limited time' urgency pressure detected.
Scam family match: Countdown / Urgency.

Phone number listed (2374894).

Domain & Encryption

Domain History

Age9 months old

RegistrarCloudflare, Inc.

RegisteredAug 22, 2025

ExpiresAug 22, 2026

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresJul 15, 2026 (43d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://api-dsbot-pay.cc/
2200https://api-dsbot-pay.cc/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

0 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

0/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst categorised the site as crypto-themed.

Scam-Type Likelihood

0 of 13 categories showed signals

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

0/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst categorised the site as crypto-themed.

Crypto scam / wallet-drainer indicators

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

Do not interact with api-dsbot-pay.cc
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Never paste your seed phrase anywhere
Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.
If you already connected a wallet
Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.
Report the wallet and URL
File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

cdnjs.cloudflare.com t.me api.qrserver.com static.cloudflareinsights.com

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review flags api-dsbot-pay.cc as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

Trust / 100

Final Verdict·api-dsbot-pay.cc

DANGEROUS

This is a crypto payment page for a 'Drainer Shop Bot' that pressures users with countdown timers and routes everything through Telegram. Our analysis flags it as high-risk due to the suspicious name pattern, urgency tactics, and listing in phishing reports despite zero direct user complaints. Avoid sending any funds.

Do not send cryptocurrency or submit any transaction IDs. Close the page and avoid interacting with the linked Telegram bot.

AV engines

—

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.