Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
roxverin[.]net
“Roxverin - Offizielle Plattform | KI-Trading 2025 | Über 10.000 Bewertungen”
Resumo das evidências
Analysis indicates that roxverin.net was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare’s network (AS13335, United States). The domain resolves to 104.21.48.138 and uses Cloudflare name servers hassen.ns.cloudflare.com and jewel.ns.cloudflare.com. TLS termination is provided by a Google Trust Services certificate issued to WE1, confirming the use of a legitimate SSL provider. An HTTP request to the root URL returns a 403 status, suggesting the site is not serving public content at the time of testing. The page title observed during a brief scrape reads “Roxverin - Offizielle Plattform | KI‑Trading 2025 | Über 10.000 Bewertungen,” which aligns with a cryptocurrency‑trading narrative.
The site is classified as a brand‑impersonation campaign targeting Binance, as indicated by the intelligence flag “Impersonates: binance.” VirusTotal records show that one of ninety‑three scanned security vendors flagged the domain, and the domain appears on a single external blocklist. PhishDestroy has also listed the domain as blocked. No additional threat‑intel feeds (OTX, Safe Browsing) are referenced in the supplied data. The observed indicators collectively suggest that roxverin.net was intended to lure Binance users into a fraudulent trading platform, leveraging the reputable SSL certificate and Cloudflare infrastructure to increase perceived legitimacy.
Because the site is currently offline, active credential harvesting cannot be confirmed, but the presence of a malicious page title and a vendor detection confirm malicious intent. Defenders should add the domain and its associated IP address to blocklists, monitor DNS queries for the Cloudflare name servers, and inspect outbound traffic for connections to 104.21.48.138. Continuous re‑resolution checks are recommended in case the infrastructure is re‑activated.
Instantâneo das evidências enviadas
- Enviado
- Registros do livro-razão
- 1
- ID do caso
PD-20260107-624333- Título da página capturada
- Suspected phishing site | Cloudflare
- Artefato PDF
- Evidência em PDF
Texto completo da evidência
Acceptable Use Policy (AUP): The domain roxverin.net is engaged in phishing activities, which constitutes a violation of the AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The ongoing fraudulent activities associated with this domain warrant immediate action as they violate the TOS, which reserves the right to suspend or terminate services for any illegal conduct.
Applicable Laws (PL):
Act of 18 July 2002 on the Provision of Services by Electronic Means: This law prohibits the provision of services that facilitate illegal activities, including phishing.
Criminal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny): Articles 287 and 286 address computer fraud and deception, making phishing a criminal offense.
Regulatory Note: Failure to comply with these policies and applicable laws may result in legal repercussions for your organization, including potential liability for facilitating illegal activities. Immediate action is advised to mitigate risks.
Data Coverage
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | roxverin.net |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Status do domínio
Acessível → Inacessível
-
Status do domínio
Acessível → Inacessível
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Status do domínio
Inacessível → Acessível
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias
1 tecnologia identificada com alta confiança
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo