invest-trading[.]icu

This domain, invest-trading.icu, operates as a credential harvesting phishing site targeting users of financial and trading platforms. Analysis indicates the site mimics legitimate investment portals to collect login credentials, payment details, and personal identification information. The infrastructure is designed to appear authentic, employing SSL encryption to evade casual detection while actively soliciting sensitive user data. Evidence supporting this assessment includes the domain's registration through GLOBAL ASSET DOMAINS INC on July 02, 2026, an unusually future-dated creation that may indicate an attempt to bypass reputation-based filters. The domain resolves to IP address 104.21.39.99 and is currently flagged by 3 security blocklists. VirusTotal analysis shows 1 out of 95 security vendors detecting malicious activity, suggesting either early-stage deployment or evasion techniques. The site employs WordPress, MySQL, PHP, and jQuery, alongside Cloudflare services, which are commonly used to mask hosting origins and complicate takedown efforts. Users who have visited invest-trading.icu or entered credentials on the site should immediately revoke any submitted login details from associated financial accounts. Reset passwords using a secure, unrelated device and enable multi-factor authentication where available. Monitor accounts for unauthorized transactions and report suspicious activity to the relevant financial institution. Clear browser cache and cookies to remove any residual tracking scripts, and consider running a full system scan with updated security tools to detect potential malware. Avoid interacting with any communications or links associated with this domain.