Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse-contact@publicdomainregistry.com.
The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
czeforimax[.]net
“Czeforimax - Oficiální platforma | AI-Trading 2025 | Více než 10 000 hodnocení”
czeforimax.net — Non vérifié. Usurpation de l'identité de la marque : Argent; Type d'arnaque : Brand Impersonation. Résumé des preuves: VirusTotal 13/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET); Google Safe Browsing flagged; PhishDestroy score 89/100. Bureau d’enregistrement: PDR.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The domain czeforimax.net was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. Its authoritative nameservers are george.ns.cloudflare.com and magdalena.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare's network (AS13335, United States). DNS resolution points to IP address 104.21.12.190, a Cloudflare edge node commonly used for content distribution and also observed in other malicious campaigns. No TLS certificate is present, so connections would be made over plain HTTP, which aligns with the observed lack of encryption. The site’s HTML title, "Czeforimax - Oficiální platforma | AI‑Trading 2025 | Více než 10 000 hodnocení", suggests an attempt to present a financial or AI‑trading service, yet the domain is listed as impersonating the brand argent.
Google Safe Browsing classifies the URL as a social‑engineering threat, and Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. On VirusTotal, one of ninety‑three security vendors flagged the domain, reinforcing the suspicion of malicious intent. The domain appears on a single public blocklist and has been actively blocked by the PhishDestroy service, confirming that security operators have taken remediation steps. Current operational status is offline, which may be the result of takedown actions or temporary suspension by the hosting provider. Because the site is not reachable, detailed content analysis (e.g., login forms, credential harvesting mechanisms) cannot be performed, leaving the exact phishing workflow uncertain.
Nevertheless, the combination of brand impersonation labeling, social‑engineering detection, low trust scoring, and the presence on blocklists provides a strong indicator that the domain was leveraged for credential or financial fraud targeting users of argent. Defenders should continue to block czeforimax.net at perimeter devices, DNS filters, and email gateways. Monitoring of the associated IP address 104.21.12.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Preuves archivées
Données factuelles et rapports externes
PD-20260107-8178FF Recipient: abuse-contact@publicdomainregistry.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif