cez-orconiox[.]com

This domain, cez-orconiox.com, was created on 21 February 2026 and is hosted behind Cloudflare (AS13335) with the A record 188.114.97.3. The registration was performed through Metaregistrar BV, and the authoritative nameservers are james.ns.cloudflare.com and jessica.ns.cloudflare.com. No TLS certificate was observed, indicating the site was served over HTTP only before being taken offline. The page title returned by the web server reads “Cezorconiox - Oficiální platforma | AI‑Trading 2025 | Více než 10 000 hodnocení”, which suggests an attempt to lure victims with a fake AI‑trading platform and a large number of purported reviews. The threat intelligence classification lists the campaign as Social Media Phishing, consistent with the observed page title that targets users on social networks.

The domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows that 7 out of 95 scanned security vendors flagged the domain, reflecting a modest but non‑trivial detection rate. Gridinsoft assigned a trust score of 0 out of 100, and AlienVault OTX references the domain in one pulse, further corroborating malicious intent. The current HTTP status is offline, so active probing is not possible at the moment, but the infrastructure components remain live and could be re‑used.

Uncertainties include the exact phishing landing page content and any credential‑stealing forms, which have not been captured because the site is no longer reachable. Defenders should continue to block the IP address 188.114.97.3 and the domain cez-orconiox.com at DNS and proxy layers, add the domain to local blocklists, and monitor for any future re‑registration or resurrection of the same IP range. Because the domain leverages Cloudflare’s edge network, additional scrutiny of traffic patterns to the Cloudflare IP block may be warranted to detect potential reuse.