Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
cezthronex[.]net
“Cezthronex - Oficiální platforma | AI-Trading 2025 | Více než 10 000 hodnocení”
Resumen de las pruebas
Analysis of cezthronex.net, first observed on February 21, 2026, shows a high‑risk brand impersonation campaign targeting Binance. The domain resolves to IP address 104.21.71.236, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is served by the Cloudflare authoritative nameservers arely.ns.cloudflare.com and randy.ns.cloudflare.com, indicating the use of a reputable CDN for fast content delivery and potential obfuscation of the true hosting environment. The registrar listed for the domain is PDR Ltd. d/b/a PublicDomainRegistry.com, a service frequently associated with disposable or rapidly registered domains. No TLS certificate is presented, meaning the site operates without HTTPS, which is atypical for legitimate financial platforms and further undermines user trust.
Google Safe Browsing has flagged the domain for social engineering, and Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. VirusTotal reports that 11 of 95 security vendors have flagged the domain, confirming that multiple independent scanners recognize malicious activity. The page title "Cezthronex - Oficiální platforma | AI‑Trading 2025 | Více než 10 000 hodnocení" suggests a fraudulent AI‑trading service, yet the title itself provides no direct evidence of the page’s content. The domain appears on one known security blocklist and has been blocked by the PhishDestroy service, reinforcing the consensus that the domain is being used for malicious purposes.
Current operational status is offline, but the infrastructure—public Cloudflare IPs, lack of TLS, and low trust scores—indicates a reusable pattern that could be re‑registered or resurrected. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for re‑registration attempts, and include the associated IP address in threat‑intel feeds. Users of Binance should be warned that unsolicited communications referencing cezthronex.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260107-D2008A- Título de la página capturada
- Cezthronex - Oficiální platforma | AI-Trading 2025 | Více než 10 000 hodnocení
- Artefacto PDF
- Evidencia en PDF
Texto completo de la evidencia
Section 3.1 of the AUP: The domain cezthronex.net is actively engaged in phishing activities, which constitutes a clear violation of your Acceptable Use Policy prohibiting illegal activities and fraud.
Section 5 of the TOS: The continued operation of this domain violates your Terms of Service, which reserves the right to suspend or terminate services for any activities that involve deception and fraud.
Applicable Laws (PL):
Act of 18 July 2002 on the Provision of Electronic Services (Dz.U. 2002 nr 144 poz. 1204): This law prohibits the provision of services that facilitate fraud or deception online.
Penal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny, Dz.U. 1997 nr 88 poz. 553): Specifically, Article 287 addresses computer fraud, making it illegal to use a computer system to commit fraud.
Regulatory Note: Failure to take immediate action against this domain may result in liability under applicable laws and could lead to regulatory scrutiny. Non-compliance with your own policies may also jeopardize your standing as a responsible service provider.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.