worlddivest-trade[.]com
“Welcome to worlddivest-trade.com”
Rilevamento memorizzato
Avviso di cloaking
- Tipo di cloaking
- Status Split
- Punteggio di cloaking
- 3/6
- Motivo
- transient_502: raw=transient_502; http=502; via=http_proxy
Analysis of worlddivest-trade.com shows it was registered on August 25 2025 through Ultahost, Inc. The domain resolves to IP 141.11.164.2, which is assigned to Datacamp Limited in Switzerland. The site employed a Let’s Encrypt R13 certificate, indicating HTTPS was available while the site was active. Reputation services assign extremely low trust scores: Scamadviser 1/100, Gridinsoft 0/100, and the domain appears on at least one public blocklist. Four of ninety‑five VirusTotal scanners flagged the domain, confirming malicious behavior.
The page title returned by the live host was “Welcome to worlddivest‑trade.com”, and the site’s technology stack included YouTube embeds, Bootstrap, LiteSpeed web server, Smartsupp chat widget, OWL Carousel, jQuery, and HTTP/3 support. The listed scam type is “Fake Exchange”, suggesting the domain was used to lure victims into providing financial credentials under the pretense of a trading platform. The domain is currently taken offline and has been blocked by PhishDestroy.
Uncertainty remains regarding the exact phishing workflow, credential collection mechanisms, and any associated command‑and‑control infrastructure, as no page content beyond the title has been captured. Defenders should continue to block the domain and its resolved IP at perimeter filters, monitor for any resurgence of the same nameserver set (ns1‑ns4.ultahost.com), and add the domain to internal threat intel feeds. Additional investigation of traffic to the IP address and any residual DNS records is advised to uncover potential supporting infrastructure.
Record della segnalazione inviata
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260318-DD9870- Titolo della pagina acquisita
- Welcome to worlddivest-trade.com
- Artefatto PDF
- Prova in PDF
Testo completo delle prove
Acceptable Use Policy (AUP): The domain worlddivest-trade.com is engaged in phishing activities, which violate the AUP by facilitating fraud and deception against unsuspecting individuals.
Terms of Service (TOS): The registrar reserves the right to suspend services for violations, and the ongoing phishing activities constitute a clear breach of the TOS.
Applicable Laws (US):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: Prohibits unauthorized access to computers and networks, which includes phishing schemes that deceive users into providing sensitive information.
CAN-SPAM Act - 15 U.S.C. § 7701: Regulates commercial email and prohibits misleading headers and deceptive subject lines, which are often utilized in phishing attempts.
Wire Fraud - 18 U.S.C. § 1343: Criminalizes schemes to defraud individuals or entities through electronic communications, which is applicable to phishing operations.
Regulatory Note: Failure to take immediate action against worlddivest-trade.com may result in regulatory scrutiny and potential liability for facilitating illegal activities. Compliance with your AUP and TOS is essential to mitigate risk.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube-nocookie.com/s/player/f4f314f0/player_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti · sincronizzato il 09/08/2026
Cronologia del rilevamento
Osservazioni memorizzate in ordine cronologico.
-
VirusTotal
VirusTotal: 0 → 2
Intelligence della comunità
2 segnalazioni della comunità
CategoriaOther Investment Scam
Data submited by Intelligence for good
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Informazioni forensi
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of worlddivest-trade.com · checked Mar 18, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo