reichvest[.]com
“ReichVest - Offizielle Website in Deutschland [2026]”
reichvest.com — Conteúdo indisponível (HTTP 502). Representação da marca: Binance; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 2/93 (Gridinsoft, SOCRadar); URLScan malicious verdict; PhishDestroy score 56/100. Registrador: REALTIME REGISTER.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain reichvest.com indicates a brand-impersonation campaign targeting Binance users in Germany. The domain was registered on February 21, 2026, through REALTIME REGISTER B.V. and currently resolves to IP address 172.67.212.122, hosted on Cloudflare's network (AS13335) in the United States. No SSL certificate is present, and the domain is served by Cloudflare nameservers lia.ns.cloudflare.com and wilson.ns.cloudflare.com. The page title, 'ReichVest - Offizielle Website in Deutschland [2026]', explicitly references a German-language site, aligning with the stated brand target of Binance. Defenders should note that reichvest.com appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL.
Gridinsoft assigns a trust score of 0/100, and AlienVault OTX includes the domain in one threat intelligence pulse. While VirusTotal reports two detections from 93 security vendors, this does not provide conclusive evidence of malicious activity but aligns with other indicators. The domain is currently offline, which may limit further analysis of its operational content or phishing kit. Infrastructure analysis reveals reliance on Cloudflare, a common tactic to obscure hosting origins and evade IP-based blocking.
The use of a registrar with a European presence (REALTIME REGISTER B.V.) may complicate takedown efforts. Defenders are advised to treat this domain as high-risk for Binance impersonation and prioritize blocking at the DNS, proxy, and endpoint levels. Monitoring for re-activation or related domains registered through the same registrar is recommended, particularly those using Cloudflare or similar proxy services. The exact phishing mechanics remain unconfirmed due to the domain's offline status, but the combination of brand impersonation, low trust scores, and blocklist presence justifies elevated defensive measures.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Evidências e relatórios externos
PD-20260203-A8AF08 Recipient: rtr-security-threats@realtimeregister.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo