sarvexid-ai[.]com
“Sarvexid™: Offizielles KI-Trading in Deutschland | Geprüft & Vertrauenswürdig”
sarvexid-ai.com — 콘텐츠를 사용할 수 없음 (HTTP 502). 브랜드 사칭: Binance; 사기 유형: Brand Impersonation. 증거 요약: VirusTotal 17/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, Cluster25); Spamhaus DBL_PHISH; PhishDestroy score 95/100. 등록기관: REALTIME REGISTER.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis of sarvexid-ai.com shows a high‑risk brand‑impersonation campaign targeting Binance. The domain was registered on 21 February 2026 through REALTIME REGISTER B.V. and is hosted on Cloudflare infrastructure (ASN 13335) with the IP address 172.67.148.153 located in the United States. The site served a page titled “Sarvexid™: Offizielles KI‑Trading in Deutschland | Geprüft & Vertrauenswürdig”, but no SSL certificate was observed, indicating an unsecured HTTP service. The domain is currently offline, yet historical data reveal that it was blocked by multiple anti‑phishing solutions, including PhishDestroy, MetaMask, and SEAL, and appears on three independent security blocklists.
Reputation scoring from Gridinsoft assigned a zero‑out‑of‑one‑hundred trust rating, reinforcing the malicious classification. VirusTotal reports that 17 of 93 scanned security vendors flagged the domain, consistent with the observed blocklist activity. Nameservers point to ethan.ns.cloudflare.com and virginia.ns.cloudflare.com, typical of Cloudflare‑managed domains.
While the exact content of the compromised page has not been examined, the presence of a Binance impersonation claim and the page title referencing AI‑driven trading suggest a financial‑theft motive. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑hosting of the same content on related Cloudflare IP ranges, and update detection signatures to include the observed page title and host IP. Ongoing vigilance is advised, as the infrastructure (Cloudflare) may be reused for future impersonation attempts.
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.