Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse-contact@publicdomainregistry.com.
The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
financelegend-invest[.]net
“Finance Legend - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas”
financelegend-invest.net — Doğrulanmamış. Marka kimliğine bürünme: Argent; Dolandırıcılık türü: Investment Scam. Kanıt özeti: VirusTotal 6/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 68/100. Kayıt kuruluşu: PDR.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Analysis of financelegend-invest.net, registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, shows an elevated‑risk investment scam that claims to represent the Argent brand. The site resolves to IP 104.21.59.177, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. DNS resolution uses Cloudflare authoritative name servers aitana.ns.cloudflare.com and craig.ns.cloudflare.com. No TLS certificate is presented, indicating the site was delivered over plain HTTP or that the certificate was omitted at the time of capture. The page title observed before takedown was "Finance Legend - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas," which aligns with the advertised investment narrative.
Gridinsoft assigned a trust score of 0 out of 100, reflecting extreme suspicion. The domain appears on a single blocklist and is actively blocked by PhishDestroy. VirusTotal scans returned four detections out of ninety‑three security vendors, reinforcing the malicious classification. Current status is offline, and the site no longer responds, but the infrastructure footprint remains observable.
Defenders should immediately block the domain and its resolved IP at perimeter and endpoint controls, add the associated Cloudflare name servers to watch lists, and monitor for any re‑registration attempts. Continuous re‑scanning of the IP address is advised, as Cloudflare may host other malicious payloads under the same ASN. Updating URL filtering rules with the observed page title string can help catch residual references. Because the site is offline, content analysis is limited; however, the combination of brand impersonation, investment‑scam language, zero trust score, and multiple vendor detections warrants persistent vigilance.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analizi
Arşivlenmiş Kanıtlar
Kanıtlar ve Dış Raporlar
PD-20260107-A245D3 Recipient: abuse-contact@publicdomainregistry.com Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin