reichvest[.]com
“ReichVest - Offizielle Website in Deutschland [2026]”
Kanıt özeti
Analysis of the domain reichvest.com indicates a brand-impersonation campaign targeting Binance users in Germany. The domain was registered on February 21, 2026, through REALTIME REGISTER B.V. and currently resolves to IP address 172.67.212.122, hosted on Cloudflare's network (AS13335) in the United States. No SSL certificate is present, and the domain is served by Cloudflare nameservers lia.ns.cloudflare.com and wilson.ns.cloudflare.com. The page title, 'ReichVest - Offizielle Website in Deutschland [2026]', explicitly references a German-language site, aligning with the stated brand target of Binance. Defenders should note that reichvest.com appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL.
Gridinsoft assigns a trust score of 0/100, and AlienVault OTX includes the domain in one threat intelligence pulse. While VirusTotal reports two detections from 93 security vendors, this does not provide conclusive evidence of malicious activity but aligns with other indicators. The domain is currently offline, which may limit further analysis of its operational content or phishing kit. Infrastructure analysis reveals reliance on Cloudflare, a common tactic to obscure hosting origins and evade IP-based blocking.
The use of a registrar with a European presence (REALTIME REGISTER B.V.) may complicate takedown efforts. Defenders are advised to treat this domain as high-risk for Binance impersonation and prioritize blocking at the DNS, proxy, and endpoint levels. Monitoring for re-activation or related domains registered through the same registrar is recommended, particularly those using Cloudflare or similar proxy services. The exact phishing mechanics remain unconfirmed due to the domain's offline status, but the combination of brand impersonation, low trust scores, and blocklist presence justifies elevated defensive measures.
Gönderilen kanıt anlık görüntüsü
- Gönderildi
- Kayıt defteri kayıtları
- 1
- Vaka kimliği
PD-20260203-A8AF08- Yakalanan sayfa başlığı
- ReichVest - Offizielle Website in Deutschland [2026]
- PDF belgesi
- PDF kanıtı
Hukuki dayanak
Kanıtın tam metni
Section 3.1 of AUP: The domain reichvest.com is engaged in phishing activities, which are explicitly prohibited under your Acceptable Use Policy.
Section 5.2 of TOS: The registrar reserves the right to suspend services for any fraudulent activities. The operation of this domain constitutes a clear violation of this provision.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and the use of fraudulent schemes, including phishing.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, which applies to phishing operations.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in deceptive practices to obtain sensitive information.
Regulatory Note: Failure to take immediate action against this domain may result in regulatory scrutiny and potential liability for facilitating illegal activities. Compliance with your AUP and TOS is essential to mitigate these risks.
Data Coverage
Tehdit Müdahale Pipeline
Engelleme listesi kapsamı
10 izlenen harici kaynak · kayıtlı anlık görüntü 11.08.2026
Tespit zaman çizelgesi
-
Cloudflare Radar
Cloudflare Radar taraması kaydedildi · Taramayı aç
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, TLS adları ve zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analizi
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin