VirusTotal
15 / 94
“Buy”
zentra-ix.digital — İçerik kullanılamıyor. Marka kimliğine bürünme: Ethereum; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 15/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 3 alerts; Google Safe Browsing flagged; PhishDestroy score 100/100. Kayıt kuruluşu: Web Commerce Communica….
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
15 / 94
3 threat-system alerts
Bildir3/14
Threat flag recorded
Bildirchecked — no match recorded
no community references
Bildirprovider verdict: clean
Bildirsaklanan rapor
Bildir Analiz tamamlandı
Bildir| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | zentra-ix.digital |
phishing | Phishing Block |
| Hagezi Threat Feed | zentra-ix.digital |
malicious | Sinkholed |
| DNS4EU | zentra-ix.digital |
malicious | Sinkholed |
The domain zentra-ix.digital was registered on March 03, 2026 through Web Commerce Communications Limited and is currently taken offline. DNS resolution points to the IP address 188.114.97.3, which is hosted by Cloudflare (AS13335) in the United States. The authoritative nameservers are joaquin.ns.cloudflare.com and julissa.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate is presented for the site, meaning traffic would be served over plain HTTP.
The page title returned from the host is "Buy," but the content of the landing page has not been publicly disclosed, limiting the ability to describe any visual or functional elements. Security telemetry shows that the domain appears on a single blocklist and has been blocked by PhishDestroy. Google Safe Browsing categorises the URL as a social engineering threat, and VirusTotal reports that 15 of 94 scanned security vendors flag the domain as malicious. The Gridinsoft trust score is the lowest possible, 0 out of 100, reinforcing the malicious assessment.
Detected web technologies include Chart.js, jsDelivr, Facebook Pixel, cdnjs, Cloudflare services, and HTTP/3, all of which are commonly leveraged by threat actors to deliver malicious payloads or track victim interaction. Given the combination of a newly created domain, lack of encryption, a low trust score, multiple vendor detections, and confirmation from both Google Safe Browsing and PhishDestroy, the infrastructure should be considered high‑risk. Defensive teams are advised to add 188.114.97.3 to network deny lists, enforce blocking of the domain at perimeter and endpoint security layers, and monitor any outbound traffic that may attempt to resolve the domain or its associated IP. Continuous re‑evaluation is recommended, as the offline status may change and additional indicators could emerge from future scans.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='zentra-ix.digital', port=80): Max retries exceeded with url: / (Caused by NewConnectionErr
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.
julissa.ns.cloudflare.comLocation describes the IP network.
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of zentra-ix.digital · checked Mar 3, 2026
15 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
52 kayıtlı benzer alan adı
1 topluluk üyesi tarafından bildirildi; ilk görülme 03.03.2026
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin