Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
cezthronex[.]net
“Cezthronex - Oficiální platforma | AI-Trading 2025 | Více než 10 000 hodnocení”
Сводка доказательств
Analysis of cezthronex.net, first observed on February 21, 2026, shows a high‑risk brand impersonation campaign targeting Binance. The domain resolves to IP address 104.21.71.236, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is served by the Cloudflare authoritative nameservers arely.ns.cloudflare.com and randy.ns.cloudflare.com, indicating the use of a reputable CDN for fast content delivery and potential obfuscation of the true hosting environment. The registrar listed for the domain is PDR Ltd. d/b/a PublicDomainRegistry.com, a service frequently associated with disposable or rapidly registered domains. No TLS certificate is presented, meaning the site operates without HTTPS, which is atypical for legitimate financial platforms and further undermines user trust.
Google Safe Browsing has flagged the domain for social engineering, and Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. VirusTotal reports that 11 of 95 security vendors have flagged the domain, confirming that multiple independent scanners recognize malicious activity. The page title "Cezthronex - Oficiální platforma | AI‑Trading 2025 | Více než 10 000 hodnocení" suggests a fraudulent AI‑trading service, yet the title itself provides no direct evidence of the page’s content. The domain appears on one known security blocklist and has been blocked by the PhishDestroy service, reinforcing the consensus that the domain is being used for malicious purposes.
Current operational status is offline, but the infrastructure—public Cloudflare IPs, lack of TLS, and low trust scores—indicates a reusable pattern that could be re‑registered or resurrected. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for re‑registration attempts, and include the associated IP address in threat‑intel feeds. Users of Binance should be warned that unsolicited communications referencing cezthronex.
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260107-D2008A- Заголовок сохранённой страницы
- Cezthronex - Oficiální platforma | AI-Trading 2025 | Více než 10 000 hodnocení
- PDF-файл
- PDF с доказательствами
Полный текст доказательств
Section 3.1 of the AUP: The domain cezthronex.net is actively engaged in phishing activities, which constitutes a clear violation of your Acceptable Use Policy prohibiting illegal activities and fraud.
Section 5 of the TOS: The continued operation of this domain violates your Terms of Service, which reserves the right to suspend or terminate services for any activities that involve deception and fraud.
Applicable Laws (PL):
Act of 18 July 2002 on the Provision of Electronic Services (Dz.U. 2002 nr 144 poz. 1204): This law prohibits the provision of services that facilitate fraud or deception online.
Penal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny, Dz.U. 1997 nr 88 poz. 553): Specifically, Article 287 addresses computer fraud, making it illegal to use a computer system to commit fraud.
Regulatory Note: Failure to take immediate action against this domain may result in liability under applicable laws and could lead to regulatory scrutiny. Non-compliance with your own policies may also jeopardize your standing as a responsible service provider.
Data Coverage
Процесс реагирования на угрозы
Проверка по блок-листам
10 внешних источников под наблюдением · снимок от 11.08.2026
10 внешних источников под наблюдением Совпадений нет
Хронология обнаружения
-
Cloudflare Radar
Сканирование Cloudflare Radar сохранено · Открыть сканирование
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Анализ VirusTotal
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание