digitaltradeinvest[.]org

Analysis of digitaltradeinvest.org indicates a high‑risk phishing infrastructure that remains active as of the report date. The domain resolves to the IPv4 address 84.32.84.152 and is hosted on a server associated with the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. Registration data show the domain was created on 15 August 2024 through the HOSTINGER operations, UAB registrar, a provider frequently used for rapid bulk registrations. No evidence of SSL/TLS configuration, HTTP response codes, or page title information is currently available, limiting content‑level verification.

Threat intelligence feeds have flagged the domain on a single security blocklist and it is explicitly listed by the PhishDestroy blocking service. VirusTotal scans have returned 12 positive detections out of 91 submitted security vendors, confirming that multiple independent scanners recognize the site as malicious. The presence of these detections, combined with the recent creation date and the use of parking nameservers, aligns with typical patterns observed in credential‑harvesting campaigns. Uncertainty remains regarding the specific brand or lure employed by the site, as no page‑title or branding information has been disclosed.

Consequently, defenders cannot attribute the phishing attempt to a particular victim‑targeted brand, nor can they assess the exact payload delivered to victims. Nonetheless, the observable infrastructure—IP address, registrar, and blocklist status—provides sufficient evidence for immediate mitigation. Recommended actions include adding digitaltradeinvest.org to network‑level URL filtering and DNS‑based blocklists, enforcing outbound traffic controls to the hosting IP 84.32.84.152, and monitoring for any related domains registered by the same registrar within the same time window.