firsttradeinvest[.]com
“First Trade Invest”
Evidence Summary
The domain firsttradeinvest.com, impersonating Google, is currently down or has been taken down, indicating a potential disruption to its malicious activity.
Three out of 95 security vendors, including CRDF, Fortinet, and Gridinsoft, detected this domain as malicious. It appears on one public blocklist, but Google Safe Browsing has not flagged it.
No registrar data is available, suggesting the domain may have used privacy protection or its record has since been scrubbed. The domain resolved to 192.3.141.252. It was created on 2026-02-21 and first seen on 2026-02-26.
Block firsttradeinvest.com at the perimeter and flag 192.3.141.252 as an indicator of compromise.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 13, 2026
10 monitored external feeds No match
Forensic Intelligence
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive