Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
seattletruckinginc[.]com
“Dubai Invest - Smart Real Estate Investment in Dubai”
seattletruckinginc.com — Непроверенный. Тип мошенничества: Investment Scam. Сводка доказательств: VirusTotal 2/91 (CRDF, Gridinsoft); PhishDestroy score 71/100. Регистратор: NiceNIC.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
Analysis of the domain seattletruckinginc.com, registered on February 21, 2026, through NiceNIC International Group Co., Limited, reveals active infrastructure linked to a generic phishing operation impersonating a real estate investment platform. The page title, 'Dubai Invest - Smart Real Estate Investment in Dubai,' suggests a targeted scam aimed at individuals interested in Dubai property investments. As of July 23, 2026, the domain remains active and resolves to IP 172.67.195.17, hosted on Cloudflare's network (AS13335) with nameservers corey.ns.cloudflare.com and kelly.ns.cloudflare.com. The site employs HTTP/3 and is protected by a Google Trust Services SSL certificate (WE1), which is consistent with legitimate services but does not guarantee safety.
Detection data indicates minimal vendor coverage, with only 1 of 93 security vendors on VirusTotal flagging the domain. It appears on a single security blocklist and is currently blocked by PhishDestroy. The HTTP status code 530, typically associated with Cloudflare errors or access restrictions, may indicate attempts to conceal malicious content or evade automated crawling. The domain's registration age (under six months) and use of Cloudflare infrastructure align with common phishing tactics to obscure origin and extend operational lifespan.
Defenders should treat this domain as high-risk due to its active status, limited detection coverage, and association with a known scam theme. Network-level blocking of 172.67.195.17 and monitoring of related Cloudflare-hosted domains with similar naming patterns are recommended. Further analysis of the site's content and payload delivery mechanisms is necessary to confirm the exact phishing techniques employed, though the page title provides strong evidence of an investment scam focus. No additional brand impersonation or technical indicators beyond the provided data have been confirmed.
Данные сетевой безопасности Registrar context
Процесс реагирования на угрозы
Статус в публичных блок-листах
Сохранённый снимок
Аналитика доменов
Технические сведенияDNS, SAN в протоколе SSL, временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-16 02:46:37 UTC
Технологии · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Анализ VirusTotal
Архивные доказательства
Доказательства и внешние отчеты
PD-20260214-F58CA6 Recipient: abuse@nicenic.net Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание