Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
trenovalexis[.]com
“Trenovalexis - Piattaforma Ufficiale Italia | Trading IA 2026”
ملخص الأدلة
Analysis of trenovalexis.com, observed on July 23, 2026, shows a high‑risk, active brand‑impersonation campaign targeting the generic brand "base". The domain was registered on February 21, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and uses the nameservers ina1.registrar.eu, ina2.registrar.eu, and ina3.registrar.eu. DNS resolution points to IP address 104.21.65.36, which belongs to AS13335 Cloudflare, Inc. and is located in the United States. The web server returns HTTP status code 200, indicating a reachable site, but no SSL certificate is presented, leaving the connection unencrypted.
The page title returned by the server is "Trenovalexis - Piattaforma Ufficiale Italia | Trading IA 2026", confirming the domain is being used to present a trading‑related façade. Security telemetry shows that 11 of 93 VirusTotal scanners have flagged the domain, and it appears on three external blocklists. AlienVault OTX lists the domain in one threat‑intelligence pulse, and it has been blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.
While the specific phishing kit or page content has not been publicly disclosed, the convergence of registrar abuse, Cloudflare hosting, lack of TLS, multiple vendor detections, and blocklist presence establishes a reliable indicator of compromise. Defenders should add trenovalexis.com to network deny lists, enforce TLS inspection where possible, monitor outbound connections to the associated Cloudflare IP, and continue to track any changes in detection counts or blocklist status. Further investigation of the site’s payload and any credential‑capture mechanisms is recommended to fully characterize the threat vector.
لقطة الأدلة المرسلة
- أُرسل
- سجلات الدفتر
- 1
- معرّف القضية
PD-20260201-D73869- ملف PDF
- دليل PDF
النص الكامل للدليل
Section 3.1 of the Acceptable Use Policy: The domain trenovalexis.com is engaged in phishing activities, which is explicitly prohibited under your AUP.
Section 5.2 of the Terms of Service: The registrar reserves the right to suspend or terminate services for any activities that violate applicable laws, including those related to fraud and deception.
Applicable Laws (GB):
Computer Misuse Act 1990: This law criminalizes unauthorized access to computer systems, including phishing schemes designed to obtain sensitive information.
Fraud Act 2006: This act addresses various forms of fraud, including deception through phishing, which is intended to secure an advantage or cause loss to another.
Regulation (EU) 2016/679 (GDPR): The processing of personal data through phishing constitutes a violation of data protection rights, leading to potential legal repercussions.
Regulatory Note: Failure to take immediate action against this domain may result in liability for facilitating illegal activities and could expose your organization to regulatory scrutiny and penalties under applicable laws.
Data Coverage
مسار الاستجابة للتهديدات Pipeline
تغطية قوائم الحظر
١٠ مصادر خارجية مراقبة · لقطة محفوظة 13/08/2026
المخطط الزمني للاكتشاف
-
Cloudflare Radar
تم حفظ فحص Cloudflare Radar · فتح الفحص
-
حالة النطاق
يمكن الوصول إليه ← يتعذر الوصول إليه
-
Cloudflare Radar
تم حفظ فحص Cloudflare Radar · فتح الفحص
-
حالة النطاق
يمكن الوصول إليه ← يتعذر الوصول إليه
-
حالة النطاق
يتعذر الوصول إليه ← يمكن الوصول إليه
-
حالة النطاق
يمكن الوصول إليه ← يتعذر الوصول إليه
-
حالة النطاق
يتعذر الوصول إليه ← يمكن الوصول إليه
لقطة محفوظة
معلومات النطاق
التفاصيل التقنيةDNS وأسماء TLS والطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
تحليل VirusTotal
هل تأثرت بهذا الموقع؟
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
تحقق من أي نطاق
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنالإبلاغ عن محاولة تصيد احتيالي
أرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتحديثات فورية حول التهديدات
تقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةابقَ على اطلاع، وابقَ آمنًا
راقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب