Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
taostinworks[.]cc
“Taostinworks: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Crypto…”
Riepilogo delle prove
This domain is currently active and hosts a site whose title advertises a global investment platform covering forex, commodities, stocks, indices, cryptocurrencies, gold and oil. The domain taostinworks.cc was registered on 19 September 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare‑served address 188.114.97.3, ASN 13335. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 trust chain, indicating proper TLS termination via Cloudflare. Nameservers anirban.ns.cloudflare.com and stevie.ns.cloudflare.com confirm the use of Cloudflare DNS. An HTTP request returns status 200, showing the web service is reachable. Infrastructure analysis shows the domain is listed on three public security blocklists and is explicitly blocked by PhishDestroy, MetaMask and SEAL, suggesting that multiple threat‑intelligence feeds have identified it as malicious. AlienVault OTX references a single pulse that includes taostinworks.cc, and VirusTotal reports three of ninety‑one scanners flagging the domain, reinforcing the suspicion. The Gridinsoft trust score of 0/100 further indicates a poor reputation. The available evidence points to a high‑risk, investment‑focused phishing campaign. However, the content of the landing page has not been inspected, so the exact tactics remain unknown. Defenders should immediately block the domain at perimeter and DNS layers, monitor for outbound connections to the associated IP, and consider sinkholing the address to disrupt further activity. Ongoing telemetry should be collected to detect any evolution of the campaign.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260623-E694CD- Titolo della pagina acquisita
- Taostinworks: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil
- Artefatto PDF
- Prova in PDF
Testo completo delle prove
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
8 fonti esterne monitorate Nessuna corrispondenza
Analisi di VirusTotal
Analisi della configurazione del sito
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo