autotrade247[.]pro

This domain, autotrade247.pro, is identified as a brand impersonation threat specifically targeting Google. Analysis indicates the site masquerades as a legitimate investment platform under the guise of 'Auto Trade 247 – Safe investment with Auto Trade 247,' a tactic commonly employed to lure victims into fraudulent financial schemes. The domain does not exhibit direct indicators of a crypto drainer or credential theft kit, but its infrastructure and branding align with investment scams designed to misappropriate funds under false pretenses. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered on June 11, 2024, through Porkbun LLC and resolves to the IP address 198.251.89.220. Security vendors on VirusTotal flagged the domain at a score of 12/95, while Gridinsoft and Scamadviser assigned trust scores of 0/100 and 1/100, respectively. The domain appears on one security blocklist and was detected in a single AlienVault OTX threat intelligence pulse. Technologies detected include PHP, LiteSpeed, Smartsupp, jQuery, Hostinger, CreateJS, and HTTP/3, which are consistent with dynamically generated scam sites. As of the latest assessment, autotrade247.pro has been taken offline, likely due to enforcement actions by security providers such as PhishDestroy. However, the residual risk remains elevated due to the domain's recent creation and the persistence of similar scam infrastructure. Organizations and users are advised to monitor for re-registration under alternative TLDs or slight domain variations, as threat actors frequently recycle impersonation tactics. Network defenders should block the associated IP (198.251.89.220) and domain at the perimeter, while end-users should verify investment platforms through official channels before engaging with financial services.