Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@ifastnet.com.
The latest stored availability evidence still shows the domain reachable; 20 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
tradebitinvestments[.]com
“Tradebit Investment Company Investment”
tradebitinvestments.com — Non vérifié. Type d'arnaque : Investment Scam. Résumé des preuves: VirusTotal 4/91 (CRDF, Gridinsoft, Netcraft, SOCRadar); PhishDestroy score 73/100. Bureau d’enregistrement: Gname.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Analysis of the domain tradebitinvestments.com indicates it is an active phishing site currently under investigation for fraudulent investment activity. The domain was registered on November 4, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site resolves to the IP address 82.163.176.114, with nameservers hosted on Cloudflare (aragorn.ns.cloudflare.com and tori.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. As of July 27, 2026, the domain appears on one security blocklist, specifically PhishDestroy, which has flagged it for malicious activity.
No detections were recorded by the 91 vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm legitimacy and may reflect delayed or incomplete coverage. The domain remains operational, and its exact content has not yet been fully analyzed. However, the naming convention suggests it is likely targeting users with fraudulent investment schemes, a common phishing tactic observed in similar domains.
Defenders are advised to monitor network traffic for connections to 82.163.176.114 and the domain itself, particularly in environments where financial or investment-related activity is conducted. Given the domain's recent registration and use of Cloudflare, further scrutiny of its SSL certificates, HTTP headers, and any associated subdomains is recommended. Organizations should consider preemptive blocking of the domain and IP pending additional analysis or confirmation of malicious intent.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 4 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Confiance à 100 %OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.
openresty.org Confiance à 100 %Smartsupp is a live chat tool that offers visitor recording feature.
www.smartsupp.com Confiance à 100 %jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confiance à 100 %Analyse VirusTotal
Preuves archivées
Données factuelles et rapports externes
PD-20260727-9CC40C Recipient: abuse@ifastnet.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif