Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
roxverin[.]net
“Roxverin - Offizielle Plattform | KI-Trading 2025 | Über 10.000 Bewertungen”
संग्रहीत अवलोकन
देखा गया शीर्षक अंतर
साक्ष्य सारांश
Analysis indicates that roxverin.net was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare’s network (AS13335, United States). The domain resolves to 104.21.48.138 and uses Cloudflare name servers hassen.ns.cloudflare.com and jewel.ns.cloudflare.com. TLS termination is provided by a Google Trust Services certificate issued to WE1, confirming the use of a legitimate SSL provider. An HTTP request to the root URL returns a 403 status, suggesting the site is not serving public content at the time of testing. The page title observed during a brief scrape reads “Roxverin - Offizielle Plattform | KI‑Trading 2025 | Über 10.000 Bewertungen,” which aligns with a cryptocurrency‑trading narrative.
The site is classified as a brand‑impersonation campaign targeting Binance, as indicated by the intelligence flag “Impersonates: binance.” VirusTotal records show that one of ninety‑three scanned security vendors flagged the domain, and the domain appears on a single external blocklist. PhishDestroy has also listed the domain as blocked. No additional threat‑intel feeds (OTX, Safe Browsing) are referenced in the supplied data. The observed indicators collectively suggest that roxverin.net was intended to lure Binance users into a fraudulent trading platform, leveraging the reputable SSL certificate and Cloudflare infrastructure to increase perceived legitimacy.
Because the site is currently offline, active credential harvesting cannot be confirmed, but the presence of a malicious page title and a vendor detection confirm malicious intent. Defenders should add the domain and its associated IP address to blocklists, monitor DNS queries for the Cloudflare name servers, and inspect outbound traffic for connections to 104.21.48.138. Continuous re‑resolution checks are recommended in case the infrastructure is re‑activated.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260107-624333- कैप्चर किए गए पेज का शीर्षक
- Suspected phishing site | Cloudflare
- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain roxverin.net is engaged in phishing activities, which constitutes a violation of the AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The ongoing fraudulent activities associated with this domain warrant immediate action as they violate the TOS, which reserves the right to suspend or terminate services for any illegal conduct.
Applicable Laws (PL):
Act of 18 July 2002 on the Provision of Services by Electronic Means: This law prohibits the provision of services that facilitate illegal activities, including phishing.
Criminal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny): Articles 287 and 286 address computer fraud and deception, making phishing a criminal offense.
Regulatory Note: Failure to comply with these policies and applicable laws may result in legal repercussions for your organization, including potential liability for facilitating illegal activities. Immediate action is advised to mitigate risks.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | roxverin.net |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 12/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
-
डोमेन स्थिति
पहुँच योग्य → पहुँच योग्य नहीं
-
डोमेन स्थिति
पहुँच योग्य → पहुँच योग्य नहीं
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
-
डोमेन स्थिति
पहुँच योग्य नहीं → पहुँच योग्य
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें
1 उच्च-विश्वसनीयता वाली तकनीक पहचानी गई
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।