Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@iqweb.io.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
pionex-portal[.]at
“Pionex登入交易所 - 安全可靠的Pionex帳戶登入平台 | Pionex Login Exchange”
pionex-portal.at — Doğrulanmamış. Dolandırıcılık türü: Fake Exchange. Kanıt özeti: VirusTotal 3/91 (alphaMountain.ai, Fortinet, Gridinsoft); Spamhaus DBL_PHISH; PhishDestroy score 65/100. Kayıt kuruluşu: Iqweb.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
On 27 February 2026 the domain pionex-portal.at was registered through Iqweb. The authoritative nameservers are pns71.cloudns.net, pns72.cloudns.com, pns73.cloudns.net and pns74.cloudns.uk, which resolve the domain to the IPv4 address 186.2.175.29 located in Belize and announced by ASN 59692 (IQWeb FZ-LLC). The web server returns HTTP 200 and presents a TLS certificate issued by Let’s Encrypt (R13) that is currently valid. The page title observed is “Pionex登入交易所 - 安全可靠的Pionex帳戶登入平台 | Pionex Login Exchange”, indicating an attempt to impersonate the Pionex cryptocurrency exchange login portal.
Static analysis identified the use of jQuery, Hammer.js and DDoS‑Guard scripts, a typical stack for credential‑phishing pages. The domain has a Gridinsoft trust score of 0 out of 100 and is classified as a “Fake Exchange” scam. VirusTotal reports a single positive detection out of 93 scanners, and the domain appears on one public blocklist, currently listed by PhishDestroy. The overall risk rating is high and the status is active.
Defenders should add pionex-portal.at to network deny lists, enforce TLS inspection to capture any credential submissions, and monitor the associated IP range for related activity. Because only one vendor has flagged the domain, further scanning and sandboxing of the page content are advisable to confirm malicious payloads or credential harvesting mechanisms. Continuous observation of the hosting provider IQWeb and the four CloudNS nameservers is recommended, as changes could indicate additional phishing campaigns.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 3 identified
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com %100 güvenDDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.
ddos-guard.net %100 güvenVirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of pionex-portal.at · checked Mar 2, 2026
Kanıtlar ve Dış Raporlar
PD-20260227-2DB0D6 Recipient: abuse@iqweb.io Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin