volume[.]finance
Analyse phishing et sécurité de volume.finance
“Volume”
volume.finance — Dernier actif connu (HTTP 200). Usurpation de l'identité de la marque : Discord; Type d'arnaque : Social Media Phishing. Résumé des preuves: VirusTotal 2/91 (CRDF, Gridinsoft); PhishDestroy score 71/100. Bureau d’enregistrement: NameCheap.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Analysis indicates that the domain volume.finance is currently active and classified as a high‑risk brand‑impersonation site targeting Discord users. The site presents the page title “Volume” and is listed as a social‑media scam. No visual content has been examined, so the exact mimicry of Discord’s interface cannot be confirmed, but the presence of the brand target in the intelligence suggests an attempt to lure Discord account credentials. Infrastructure analysis reveals the domain resolves to IP 76.76.21.21, which belongs to Amazon.com, Inc. (AS16509) in the United States. Hosting appears to be on the Vercel platform, and HTTP requests return status 200. TLS is provided by a Let’s Encrypt R13 certificate, with HSTS enabled. DNS is served by dns1.registrar-servers.com and dns2.registrar-servers.com, and the registrar is NameCheap, Inc. The domain was created on 11 January 2021. MX records point to Google’s mail infrastructure (aspmx.l.google.com with priority 1 and alt1.as…). Keybase technology is also detected, indicating possible use of its verification services. Detection history shows the domain carries a Gridinsoft trust score of 0 / 100, is listed on one security blocklist, and has been blocked by PhishDestroy. VirusTotal reports a single positive detection out of 95 scanned vendors, confirming at least one security product has flagged the domain. The combination of a zero trust score, active blocklist entry, and high‑risk classification underscores the malicious intent of the infrastructure. Defenders should add volume.finance to outbound and inbound filtering rules, monitor DNS queries for the associated IP and nameservers, and enforce strict verification of any unsolicited Discord‑related communications. Continuous re‑scanning of the domain with multiple scanners is advised to capture any changes in detection status, and incident response teams should treat any credential submissions to this domain as compromised.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 3 identified
Cloud platform for frontend deployment, optimized for Next.js.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Analyse VirusTotal
Preuves archivées
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of volume.finance · checked Mar 2, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif