MALICIOUS — HIGH
Verifica phishing e sicurezza per c1zh.com
c1zh[.]
Analysis of c1zh.com shows a newly created domain (April 28, 2026) hosted behind Cloudflare infrastructure (IP 188.114.97.3, Cloudflare, Inc., CA).
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Disponibilità
- Ultimo attivo conosciuto · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@trustname.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
c1zh.com — Ultimo attivo conosciuto (HTTP 200). Tipo di truffa: Crypto Drainer. Riepilogo delle prove: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 69/100. Registrar: Fewmoretaps OU d/b/a T….
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
Analysis of c1zh.com shows a newly created domain (April 28, 2026) hosted behind Cloudflare infrastructure (IP 188.114.97.3, Cloudflare, Inc., CA). The site presents the page title "QuantumCart - E-commerce Platform" and serves an SSL certificate issued by Google Trust Services. HTTP response code is 200 and the service supports HTTP/3. Registrant information lists Fewmoretaps OU d/b/a Trustname.com, and the authoritative nameservers are mark.ns.cloudflare.com and surina.ns.cloudflare.com. The domain is currently listed on one security blocklist and has been blocked by PhishDestroy, indicating active mitigation by at least one threat‑intelligence feed. VirusTotal reports that 91 scanning engines have examined the site without flagging it, though the absence of detections does not constitute proof of legitimacy. Observed technologies include Cloudflare Browser Insights, confirming the use of Cloudflare’s performance and security layer. The threat classification is a crypto‑drainer phishing operation, consistent with the generic_phishing type assigned. Uncertainty remains regarding the exact content and credential‑capture mechanisms, as no direct page content analysis is available. Defensive actions should include adding c1zh.com to deny‑list rules, monitoring DNS queries for the associated Cloudflare nameservers, and ensuring that any traffic to the IP address 188.114.97.3 is blocked or sandboxed pending further investigation.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
PD-20260428-6E6A42 Recipient: abuse@trustname.com Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.