fastradewiz[.]com

Analysis of the domain www.fastradewiz.com indicates a confirmed phishing site targeting users of automated trading platforms. Registered on February 21, 2026, through Cloudflare, Inc., the domain resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. The site returns an HTTP 200 status, suggesting it is fully operational, and employs an SSL certificate issued by Google Trust Services (WE1), which does not inherently validate its legitimacy. The page title, 'TradeWiz-the fastest copy trading bot,' explicitly positions the site as a copy-trading service, a common lure in financial phishing schemes.

As of July 25, 2026, the domain is flagged by 4 of 95 security vendors on VirusTotal and appears on at least one security blocklist, including PhishDestroy. Gridinsoft assigns a trust score of 1/100, further corroborating its malicious classification. Infrastructure analysis reveals the use of Cloudflare nameservers (mitch.ns.cloudflare.com and stella.ns.cloudflare.com), a frequent choice among threat actors to obscure hosting origins and evade takedowns. Technologies detected on the domain include Node.js, React, Next.js, and Webpack, alongside Cloudflare Browser Insights, which may be leveraged for performance monitoring or user tracking.

The presence of YouTube integration suggests an attempt to lend credibility through embedded media, a tactic observed in other phishing campaigns. While the exact content and functionality of the site remain unanalyzed, the combination of low detection counts, active blocklisting, and financial-themed branding aligns with known patterns of copy-trading scams. Defenders are advised to block the domain at the DNS or proxy level, monitor for related infrastructure (e.g., subdomains or linked IPs), and alert users to the risks of interacting with unvetted trading platforms.