Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
fragmetric[.]finance
“Web3 Connect Demo”
Stored observation
Observed title contrast
Evidence Summary
This domain is flagged as a credential harvesting phishing site designed to steal sensitive financial information, including login credentials and payment details. Analysis indicates it employs social engineering tactics, such as fake login portals or fraudulent transaction pages, to trick users into disclosing personal or financial data. The site may impersonate legitimate financial services or payment platforms to appear trustworthy. Infrastructure analysis reveals the domain was registered on July 13, 2025, through Dynadot Inc, a registrar frequently abused for malicious activity. It resolves to the IP address 54.215.31.113, hosted on Amazon Web Services (AS16509), and is currently active. Security vendors have flagged the domain, with 5 out of 95 engines on VirusTotal detecting it as malicious. Additionally, it appears on one security blocklist, further confirming its high-risk status. If you visited fragmetric.finance or entered any information on the site, immediately cease all interaction and disconnect the device from the network. Change passwords for any accounts accessed while the site was open, prioritizing financial and email credentials. Enable multi-factor authentication where available. Scan the device using updated security software to detect potential malware or backdoors. Monitor financial statements and credit reports for unauthorized activity, and report any suspicious transactions to the relevant institution. If credentials were entered, assume they are compromised and avoid reusing them across other platforms.
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260618-6689B0- PDF artifact
- PDF evidence
Full evidence text
Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Data Coverage
Network Security Intelligence
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 12, 2026
10 monitored external feeds No match
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
2 high-confidence technologies identified
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive