Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
trenovalexis[.]com
“Trenovalexis - Piattaforma Ufficiale Italia | Trading IA 2026”
Resumen de las pruebas
Analysis of trenovalexis.com, observed on July 23, 2026, shows a high‑risk, active brand‑impersonation campaign targeting the generic brand "base". The domain was registered on February 21, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and uses the nameservers ina1.registrar.eu, ina2.registrar.eu, and ina3.registrar.eu. DNS resolution points to IP address 104.21.65.36, which belongs to AS13335 Cloudflare, Inc. and is located in the United States. The web server returns HTTP status code 200, indicating a reachable site, but no SSL certificate is presented, leaving the connection unencrypted.
The page title returned by the server is "Trenovalexis - Piattaforma Ufficiale Italia | Trading IA 2026", confirming the domain is being used to present a trading‑related façade. Security telemetry shows that 11 of 93 VirusTotal scanners have flagged the domain, and it appears on three external blocklists. AlienVault OTX lists the domain in one threat‑intelligence pulse, and it has been blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.
While the specific phishing kit or page content has not been publicly disclosed, the convergence of registrar abuse, Cloudflare hosting, lack of TLS, multiple vendor detections, and blocklist presence establishes a reliable indicator of compromise. Defenders should add trenovalexis.com to network deny lists, enforce TLS inspection where possible, monitor outbound connections to the associated Cloudflare IP, and continue to track any changes in detection counts or blocklist status. Further investigation of the site’s payload and any credential‑capture mechanisms is recommended to fully characterize the threat vector.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260201-D73869- Artefacto PDF
- Evidencia en PDF
Texto completo de la evidencia
Section 3.1 of the Acceptable Use Policy: The domain trenovalexis.com is engaged in phishing activities, which is explicitly prohibited under your AUP.
Section 5.2 of the Terms of Service: The registrar reserves the right to suspend or terminate services for any activities that violate applicable laws, including those related to fraud and deception.
Applicable Laws (GB):
Computer Misuse Act 1990: This law criminalizes unauthorized access to computer systems, including phishing schemes designed to obtain sensitive information.
Fraud Act 2006: This act addresses various forms of fraud, including deception through phishing, which is intended to secure an advantage or cause loss to another.
Regulation (EU) 2016/679 (GDPR): The processing of personal data through phishing constitutes a violation of data protection rights, leading to potential legal repercussions.
Regulatory Note: Failure to take immediate action against this domain may result in liability for facilitating illegal activities and could expose your organization to regulatory scrutiny and penalties under applicable laws.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 13/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Estado del dominio
Accesible → Inaccesible
-
Estado del dominio
Inaccesible → Accesible
-
Estado del dominio
Accesible → Inaccesible
-
Estado del dominio
Inaccesible → Accesible
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.