# autolegaltrades.online — SUSPICIOUS

> PhishDestroy identifies autolegaltrades.online as a fake auto trade site. 1/95 vendors flagged it. SSL & IP 148.72.153.160. Check the full report.

## Summary
PhishDestroy has identified autolegaltrades.online as an elevated-risk domain leveraging generic auto-trade branding to execute credential-harvesting attacks. This site mimics legitimate auto trade services under the guise of ‘AUTO LEGAL TRADES’ to trick users into submitting sensitive personal and financial data. Security vendors such as VirusTotal have already flagged the domain with a detection rate of 1 out of 95, underscoring the potential for malicious behavior despite its recent establishment.

This domain was registered on August 11, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to IP address 148.72.153.160 using a Let’s Encrypt SSL certificate to appear trustworthy. While the site is now offline, historical data shows it was active long enough to attract minimal detection coverage and likely operate undetected against unsuspecting victims. The low detection rate suggests either evasive tactics or a brief operational window before takedown.

Organizations and individuals should immediately block autolegaltrades.online at the network and DNS levels. Users who may have interacted with this site should reset passwords for any accounts where credentials were reused and enable multi-factor authentication. Monitor financial accounts for unauthorized transactions and report any suspected compromise to local cybersecurity authorities. Proactive threat intelligence sharing and domain reputation checks can help prevent similar scams from gaining traction.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP ?)
- Page title: ALT – AUTO LEGAL TRADES

## Domain Intelligence
- Registered: 2025-08-11 12:40:53
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 148.72.153.160

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8819b92c-4e4f-4913-a9cb-60c06e1b4cab
- PhishDestroy: https://phishdestroy.io/domain/autolegaltrades.online/
- LLM endpoint: https://phishdestroy.io/domain/autolegaltrades.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/autolegaltrades.online/
Last updated: 2026-04-13