tradevornax-365[.]de
“TradeVornax 365™ 2026: Offizielle KI-Plattform Deutschland”
tradevornax-365.de — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Binance; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 14/93 (Fortinet, Google Safebrowsing, Lionic, SOCRadar); Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 92/100.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain tradevornax-365.de confirms its classification as a high-risk phishing site targeting Binance users. The domain was registered on March 3, 2026, and resolved to the IP address 104.21.55.182, hosted on Cloudflare's infrastructure (AS13335). Nameservers cruz.ns.cloudflare.com and peter.ns.cloudflare.com further link the domain to Cloudflare's network. The SSL certificate, issued by Let's Encrypt (serial number E8), provides HTTPS encryption but does not mitigate the underlying malicious intent. The page title, 'TradeVornax 365™ 2026: Offizielle KI-Plattform Deutschland,' explicitly impersonates Binance, leveraging branding and regional targeting to deceive users.
Google Safe Browsing flags the domain for social engineering, while three security blocklists—PhishDestroy, MetaMask, and SEAL—have actively blocked it. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. VirusTotal reports detection by 14 of 93 security vendors, though the absence of additional context limits further interpretation of these results. Infrastructure analysis reveals the use of HTTP/3 and HSTS, likely employed to evade detection and enhance perceived legitimacy.
The domain's current offline status suggests takedown action, though historical data indicates prior active exploitation. Defenders should treat this domain as confirmed malicious, particularly in environments where Binance or cryptocurrency-related services are accessed. No evidence of a phishing kit or additional payload delivery was identified in the available data, but the domain's structure and branding align with credential-harvesting campaigns. Organizations are advised to update blocklists and monitor for related domains leveraging similar naming conventions or Cloudflare-hosted infrastructure.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive