Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is gdpr-masking@gdpr-masked.com.
The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kapitaltrezbit[.]net
“Kapital Trezbit - Official Platform | AI Trading 2025 | Over 10,000 Reviews”
kapitaltrezbit.net — Non vérifié. Usurpation de l'identité de la marque : Binance; Type d'arnaque : Brand Impersonation. Résumé des preuves: VirusTotal 3/91 (alphaMountain.ai, CRDF, Gridinsoft); URLQuery 1 alert; PhishDestroy score 65/100. Bureau d’enregistrement: PDR.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Analysis of kapitaltrezbit.net confirms it as a brand impersonation scam targeting Binance users, operational from February 21, 2026, until its takedown. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to IP 188.114.96.3, hosted on Cloudflare infrastructure (AS13335, US). No SSL certificate was present, increasing susceptibility to interception.
The page title, 'Kapital Trezbit - Official Platform | AI Trading 2025 | Over 10,000 Reviews,' explicitly claims affiliation with Binance and promotes fraudulent AI trading services, a common tactic in cryptocurrency scams. Detection by PhishDestroy and a single flag from VirusTotal's 93 security vendors (1/93) corroborate its malicious classification, though the low detection rate suggests either evasion techniques or recent deployment. The domain appeared on one security blocklist and received a Gridinsoft trust score of 0/100, further validating its fraudulent nature.
Nameservers (andronicus.ns.cloudflare.com, chan.ns.cloudflare.com) indicate Cloudflare DNS management, a frequent choice for threat actors due to its privacy features. Defenders should treat this domain as a confirmed phishing resource, block it at DNS and proxy levels, and monitor for related infrastructure reuse. The exact scam mechanics (e.g., credential harvesting, fake trading platforms) remain unconfirmed due to the site's offline status, but the page title and brand impersonation context strongly suggest financial fraud targeting Binance users.
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | kapitaltrezbit.net |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Preuves archivées
Données factuelles et rapports externes
PD-20260107-CF966F Recipient: gdpr-masking@gdpr-masked.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif