ervia-gas[.]com
“Ervia Gás™: Offizielles KI-Trading in Deutschland | Geprüft & Vertrauenswürdig”
Riepilogo delle prove
On July 23, 2026, the domain ervia-gas.com was identified as a high-risk brand impersonation threat targeting Binance. The domain has been taken offline, but it previously hosted a page titled 'Ervia Gás™: Offizielles KI-Trading in Deutschland | Geprüft & Vertrauenswürdig,' which suggests a sophisticated attempt to deceive users into believing they are interacting with a legitimate Binance trading platform. Analysis indicates that the domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and was hosted using Cloudflare, Inc. (AS13335) with the IP address 188.114.96.3.
The domain lacks an SSL certificate, which is a common indicator of phishing sites as they often avoid secure connections to reduce costs and complexity. Scamadviser and Gridinsoft both assigned the domain extremely low trust scores of 1/100 and 0/100, respectively, further corroborating the high-risk nature of this domain. Additionally, Google Safe Browsing flagged the domain for social engineering, indicating that it was likely used to trick users into revealing sensitive information or performing malicious actions.
The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which have taken steps to prevent access to the site. While the domain is currently offline, defenders should remain vigilant and monitor for any signs of the domain being reactivated or similar domains being registered. It is recommended to block this domain and educate users about the risks of brand impersonation and the importance of verifying the legitimacy of websites before interacting with them.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260204-94BEF2- Titolo della pagina acquisita
- Suspected phishing site | Cloudflare
- Artefatto PDF
- Prova in PDF
Testo completo delle prove
Acceptable Use Policy (AUP): The domain ervia-gas.com is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations. The ongoing use of this domain for fraudulent purposes constitutes a clear violation of the TOS.
Applicable Laws (PL):
Act of 18 July 2002 on Providing Services by Electronic Means: This law prohibits the provision of services that facilitate fraud and deception, including phishing.
Criminal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny): Articles 286 and 287 address computer fraud and unauthorized access to computer systems, both of which are applicable to phishing activities.
Regulatory Note: Failure to take immediate action against this domain may result in regulatory scrutiny and potential liability under applicable laws. Non-compliance could expose your organization to legal repercussions.
Data Coverage
Indicatori di sicurezza
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ervia-gas.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Informazioni forensi
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo