ervia-gas[.]com
“Ervia Gás™: Offizielles KI-Trading in Deutschland | Geprüft & Vertrauenswürdig”
Résumé des preuves
On July 23, 2026, the domain ervia-gas.com was identified as a high-risk brand impersonation threat targeting Binance. The domain has been taken offline, but it previously hosted a page titled 'Ervia Gás™: Offizielles KI-Trading in Deutschland | Geprüft & Vertrauenswürdig,' which suggests a sophisticated attempt to deceive users into believing they are interacting with a legitimate Binance trading platform. Analysis indicates that the domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and was hosted using Cloudflare, Inc. (AS13335) with the IP address 188.114.96.3.
The domain lacks an SSL certificate, which is a common indicator of phishing sites as they often avoid secure connections to reduce costs and complexity. Scamadviser and Gridinsoft both assigned the domain extremely low trust scores of 1/100 and 0/100, respectively, further corroborating the high-risk nature of this domain. Additionally, Google Safe Browsing flagged the domain for social engineering, indicating that it was likely used to trick users into revealing sensitive information or performing malicious actions.
The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which have taken steps to prevent access to the site. While the domain is currently offline, defenders should remain vigilant and monitor for any signs of the domain being reactivated or similar domains being registered. It is recommended to block this domain and educate users about the risks of brand impersonation and the importance of verifying the legitimacy of websites before interacting with them.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260204-94BEF2- Titre de la page capturée
- Suspected phishing site | Cloudflare
- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Acceptable Use Policy (AUP): The domain ervia-gas.com is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations. The ongoing use of this domain for fraudulent purposes constitutes a clear violation of the TOS.
Applicable Laws (PL):
Act of 18 July 2002 on Providing Services by Electronic Means: This law prohibits the provision of services that facilitate fraud and deception, including phishing.
Criminal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny): Articles 286 and 287 address computer fraud and unauthorized access to computer systems, both of which are applicable to phishing activities.
Regulatory Note: Failure to take immediate action against this domain may result in regulatory scrutiny and potential liability under applicable laws. Non-compliance could expose your organization to legal repercussions.
Data Coverage
Signaux de sécurité
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ervia-gas.com |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse forensique
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif