Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@web.com.
The latest stored availability evidence still shows the domain reachable; 5 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
cetuszone[.]com
Analyse phishing et sécurité de cetuszone.com
“Access Denied”
cetuszone.com — Dernier actif connu (HTTP 200). Résumé des preuves: VirusTotal 12/91 (ChainPatrol, alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Chong Lua Dao); URLQuery 2 alerts; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Bureau d’enregistrement: SNAPNAMES 64.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Analysis of cetuszone.com as of August 03, 2026 shows that the domain is actively being used for a generic phishing campaign. The site has been added to the PhishDestroy blocklist, indicating that an operational takedown or mitigation action has already been applied by that feed. Independent scanning on VirusTotal reports that 12 of 91 antivirus and URL‑reputation engines return a malicious classification for the domain, which aligns with the observed blocklist entry.
The domain currently appears on a single security blocklist; no additional public blocklists are listed in the available intelligence. No further infrastructure details—such as registrar information, hosting IP, ASN, SSL certificate status, or HTTP response codes—are present in the collected data, so the underlying hosting environment cannot be profiled at this time. The limited evidence set therefore confirms the presence of malicious activity, but the lack of deeper telemetry prevents attribution of the operators or identification of a specific phishing kit.
Defenders should add cetuszone.com to network‑level deny lists, enforce DNS‑based filtering, and monitor outbound traffic for connections to the domain. Continuous re‑scanning with multi‑engine services is recommended to capture any changes in detection ratios, and any future appearance on additional blocklists should be escalated for incident response. Organizations that rely on email or web gateways should ensure that the domain is blocked at the perimeter to reduce exposure to credential‑stealing attempts.
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 9 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org Confiance à 100 %Envoy is an open-source edge and service proxy, designed for cloud-native applications.
www.envoyproxy.io Confiance à 100 %Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com Confiance à 100 %Upfluence is the all-in-one affiliate and influencer marketing platform for ecommerce and direct-to-consumer brands.
www.upfluence.com Confiance à 100 %HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confiance à 100 %Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com Confiance à 100 %Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Confiance à 100 %Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.
akamai.com Confiance à 100 %Analyse VirusTotal
Preuves archivées
Données factuelles et rapports externes
PD-20260803-D71B10 Recipient: abuse@web.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif