Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
stockwisefx[.]com
“stockwisefx - Trade Stocks, Forex, Cryptos & More”
Сохранённое обнаружение
Обнаружена маскировка
- Тип маскировки
content_split- Оценка маскировки
- 1/6
Analysis of the domain stockwisefx.com indicates it is actively engaged in phishing operations targeting users of financial trading platforms. Registered on October 24, 2025, through Ultahost, Inc., the domain resolves to the IP address 64.29.17.1, hosted under Vercel, Inc. infrastructure in the United States. The domain's nameservers (ns1.vercel-dns.com and ns2.vercel-dns.com) and detected technologies, including Zoho for email services and Let's Encrypt for SSL certification, suggest an attempt to appear legitimate to potential victims. The page title, 'stockwisefx - Trade Stocks, Forex, Cryptos & More,' explicitly positions the site as a trading platform, though no specific brand impersonation is confirmed in available data. Infrastructure analysis reveals the domain is flagged by one security blocklist and has been documented in 23 threat intelligence pulses on AlienVault OTX, indicating prior malicious activity. VirusTotal reports 10 of 91 security vendors detecting the domain as malicious, though the exact nature of the threat—whether credential harvesting, fraudulent transactions, or other schemes—remains unconfirmed without further page analysis. MX records point to Zoho's email services, which may be leveraged to send phishing communications or facilitate account verification scams. The domain's Gridinsoft trust score of 0/100 further supports its classification as high-risk. While the site remains operational as of July 12, 2026, defenders should treat it as an active threat. Network administrators are advised to block the domain and associated IP address (64.29.17.1) at the perimeter. Users encountering this domain should avoid interaction, particularly any requests for credentials or financial details. Additional monitoring of Zoho-associated email traffic may be warranted to detect related phishing attempts.
Запись отправленного сообщения
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260318-0E4533- Заголовок сохранённой страницы
- stockwisefx - Trade Stocks, Forex, Cryptos & More
- PDF-файл
- PDF с доказательствами
Правовое основание
Полный текст доказательств
Acceptable Use Policy (AUP): The domain stockwisefx.com is engaged in phishing activities, which constitutes a clear violation of your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The ongoing fraudulent activities associated with this domain warrant immediate suspension or termination of services as per your TOS, which reserves the right to act against such violations.
Applicable Laws (NG):
Cybercrimes (Prohibition, Prevention, etc.) Act 2015: This law criminalizes various forms of cyber fraud, including phishing, and imposes severe penalties for offenders.
Advance Fee Fraud and Other Fraud Related Offences Act: This act specifically addresses fraudulent schemes, including those conducted via electronic means, and provides for prosecution of individuals involved in such activities.
Regulatory Note: Failure to take prompt action against stockwisefx.com may expose your organization to legal liabilities and regulatory scrutiny, as continued hosting of phishing domains is a violation of both your internal policies and applicable laws.
Данные сетевой безопасности
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/1ebf2aa6/player_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
Процесс реагирования на угрозы
Проверка по блок-листам
Источников: 10 · синхронизировано 10.08.2026
Хронология обнаружения
Сохранённые наблюдения в хронологическом порядке.
-
VirusTotal
VirusTotal: 0 → 1
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Анализ VirusTotal
Анализ производительности сайта
Google PageSpeed Insights — mobile performance audit of stockwisefx.com · checked Jul 12, 2026
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание