vexilo-naren[.]com
“Vexilo Naren™ - KI-Trading Deutschland 2026”
Riepilogo delle prove
The domain vexilo-naren.com was registered on February 21, 2026 through REALTIME REGISTER B.V. and is currently taken offline. DNS resolution points to IP address 104.21.76.126, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Both authoritative nameservers, charles.ns.cloudflare.com and jacqueline.ns.cloudflare.com, are Cloudflare‑operated, indicating the site leveraged the provider's CDN and DDoS mitigation services. No SSL certificate is presented for the domain, suggesting that HTTPS was either not configured or was removed prior to takedown.
The page title observed during the brief window of activity was "Vexilo Naren™ - KI‑Trading Deutschland 2026," a title that does not reference the targeted brand but is consistent with a fraudulent front‑end. The threat classification is brand impersonation, specifically targeting the cryptocurrency exchange Binance, as indicated by the intelligence tag "Impersonates: binance" and the declared scam type. Reputation scoring is extremely low, with Gridinsoft assigning a trust score of 0 out of 100. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and VirusTotal recorded 12 positive detections out of 95 scanners, reinforcing the malicious assessment.
Despite the offline status, the infrastructure—Cloudflare edge IP, lack of TLS, and the use of a generic registrar—mirrors common patterns employed by actors seeking to host phishing or credential‑harvesting pages. Defenders should immediately add vexilo-naren.com to URL filtering and DNS blocklists, monitor the associated Cloudflare IP for any resurgence of malicious content, and extend brand protection measures for Binance to capture similar impersonation attempts. Continuous observation of newly registered domains using the same registrar or nameserver pattern is recommended to pre‑empt future campaigns.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260119-90954E- Titolo della pagina acquisita
- Vexilo Naren™ - KI-Trading Deutschland 2026
- Artefatto PDF
- Prova in PDF
Base giuridica
Testo completo delle prove
Acceptable Use Policy (AUP): The domain vexilo-naren.com is engaged in phishing activities, which are explicitly prohibited under your AUP. This constitutes a direct violation of the policy against fraud and deception.
Terms of Service (TOS): The use of this domain for illegal activities violates the TOS, which reserves the right to suspend or terminate services for such violations. The ongoing phishing scheme undermines the integrity of your services.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which is applicable as phishing schemes often involve unauthorized data collection.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, directly applicable to the activities associated with vexilo-naren.com.
Anti-Phishing Act: This legislation aims to combat phishing and similar fraudulent activities, making it illegal to engage in deceptive practices intended to obtain sensitive information.
Regulatory Note: Failure to act on this report may result in liability for facilitating illegal activities. We urge immediate suspension of the domain to mitigate risks and ensure compliance with applicable laws.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo