ethertradesinvestment[.]cc

The domain ethertradesinvestment.cc was registered on March 04, 2026 through Global Domain Group LLC and is currently taken offline. DNS resolution points to 148.72.153.160, an address announced by AS30083 (velia.net) located in the United States. The authoritative nameservers are dns1.afeeshost.ltd, dns2.afeeshost.ltd, and dns3.afeeshost.com. A TLS certificate issued by Let's Encrypt (R12) is present, indicating HTTPS support at the time of capture. Site fingerprinting identified a WordPress installation backed by MySQL and PHP, with front‑end libraries including UIKit, Swiper, jQuery, jQuery Migrate, and Font Awesome.

The page title returned “Ether Trade Investment”, consistent with a claim of a crypto‑related investment service. VirusTotal scans show 15 of 94 antivirus and URL engines flagging the domain as malicious, and the domain appears on a single public blocklist, with PhishDestroy explicitly listing it. Gridinsoft assigned a trust score of 1 out of 100, reinforcing the high likelihood of abuse. The classification in the provided intelligence is a “Crypto Scam”, although the exact payload or credential‑harvesting mechanisms have not been observed because the site is offline.

Uncertainty remains regarding the current activity level, any hosted phishing forms, or additional command‑and‑control infrastructure, as no live content was captured. Defenders should immediately block ethertradesinvestment.cc and its associated IP address at perimeter and proxy layers, add the three AFEESHost nameservers to watch lists, and continue monitoring the AS30083 block for new domains or similar WordPress kits. Monitoring for TLS certificates reissued for the same domain can reveal re‑activation attempts. Correlating logs for outbound connections to 148.72.153.160 or DNS queries for the domain can help detect compromised clients that may have previously interacted with the site.