Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is complaint@gname.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
taostinworks[.]cc
“Taostinworks: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Crypto…”
taostinworks.cc — Não verificado. Tipo de golpe: Investment Scam. Resumo das evidências: VirusTotal 6/91 (alphaMountain.ai, Bfore.Ai PreCrime, CRDF, Forcepoint ThreatSeeker, Gridinsoft); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 90/100. Registrador: Gname.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain is currently active and hosts a site whose title advertises a global investment platform covering forex, commodities, stocks, indices, cryptocurrencies, gold and oil. The domain taostinworks.cc was registered on 19 September 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare‑served address 188.114.97.3, ASN 13335. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 trust chain, indicating proper TLS termination via Cloudflare. Nameservers anirban.ns.cloudflare.com and stevie.ns.cloudflare.com confirm the use of Cloudflare DNS. An HTTP request returns status 200, showing the web service is reachable. Infrastructure analysis shows the domain is listed on three public security blocklists and is explicitly blocked by PhishDestroy, MetaMask and SEAL, suggesting that multiple threat‑intelligence feeds have identified it as malicious. AlienVault OTX references a single pulse that includes taostinworks.cc, and VirusTotal reports three of ninety‑one scanners flagging the domain, reinforcing the suspicion. The Gridinsoft trust score of 0/100 further indicates a poor reputation. The available evidence points to a high‑risk, investment‑focused phishing campaign. However, the content of the landing page has not been inspected, so the exact tactics remain unknown. Defenders should immediately block the domain at perimeter and DNS layers, monitor for outbound connections to the associated IP, and consider sinkholing the address to disrupt further activity. Ongoing telemetry should be collected to detect any evolution of the campaign.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Evidências arquivadas
Análise da configuração do site
Evidências e relatórios externos
PD-20260623-E694CD Recipient: complaint@gname.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo