automated-trading[.]com[.]tr
“Automated Swing Trading – Safe investment with Automated Swing Trading”
automated-trading.com.tr — Conteúdo indisponível. Representação da marca: Google. Resumo das evidências: VirusTotal 10/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, DNS8); PhishDestroy score 85/100.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain automated-trading.com.tr indicates it was actively impersonating Google as part of an investment-themed fraud campaign. The domain, registered on November 24, 2024, resolved to the IP address 163.61.188.5, hosted under AS153568 (NEW DHAKA HARDWARE) in the United States. No SSL certificate was present, and the domain relied on nameservers dns1.lytehosting.com through dns4.lytehosting.com for DNS resolution. The page title, 'Automated Swing Trading – Safe investment with Automated Swing Trading,' suggests the site promoted fraudulent investment opportunities under the guise of automated trading services.
While the exact content and functionality of the site remain unanalyzed, the branding aligns with known tactics used to deceive users into financial scams. Detection data from July 2026 shows the domain was flagged by 10 of 95 security vendors on VirusTotal, appeared in one AlienVault OTX threat intelligence pulse, and was listed on at least one security blocklist. Trust scores from Gridinsoft and Scamadviser both rated the domain at 0/100 or 1/100, respectively, further indicating its malicious nature. Infrastructure analysis reveals the domain was taken offline by July 23, 2026, and was blocked by PhishDestroy.
The registrar details are not specified in available intelligence, but the hosting provider's association with a non-standard ASN and the absence of SSL encryption are consistent with low-reputation phishing infrastructure. Defenders should treat this domain as confirmed malicious and monitor for related domains using similar naming conventions or hosting patterns. Additional scrutiny of domains resolving to 163.61.188.5 or utilizing the same nameservers may uncover further campaign activity.
Sinais de segurança
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Evidências e relatórios externos
“The PhishDestroy system has identified this domain as a phishing threat, flagged both by our internal parser and reported by users. We also cross-reference with public databases and other antivirus systems.”
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo