ashflowcenter[.]sbs

The domain ashflowcenter.sbs was registered on July 29, 2025 through NameCheap, Inc. It resolves to the IPv6 address 2606:4700:3031::ac43:978f, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site is hosted on Cloudflare’s network and uses the nameservers jocelyn.ns.cloudflare.com and justin.ns.cloudflare.com. No TLS certificate was observed, indicating that the site was served over plain HTTP. The page title returned by the server is “Crypto Bank Capex 2.0”, and the listed scam type is brand impersonation targeting Binance. Google Safe Browsing classifies the domain as a social engineering threat, and the domain appears on a single security blocklist as well as being blocked by PhishDestroy.

Reputation services assign extremely low scores: Gridinsoft reports a trust score of 0 out of 100, and Scamadviser assigns a score of 1 out of 100. VirusTotal analysis shows that 15 of 95 scanning engines flagged the domain, demonstrating moderate detection across the security community. AlienVault OTX references the domain in one threat‑intel pulse. The overall risk rating is high, and the current operational status is offline. Analysis indicates that the infrastructure is typical of low‑cost phishing campaigns that leverage Cloudflare’s free tier for anonymity.

The lack of an SSL certificate and the minimal detection footprint suggest a short‑lived operation designed to harvest credentials or funds by impersonating Binance. Uncertainty remains regarding the exact content served, as the page has not been captured in detail. Defensive actions should include immediate blocking of the domain at perimeter and DNS filters, inclusion in threat‑intel feeds, and monitoring of related Cloudflare‑hosted IP ranges for similar activity. End‑users should be warned that any unsolicited request referencing Binance and the “Crypto Bank Capex 2.0” terminology is likely fraudulent.