Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
taostinworks[.]cc
“Taostinworks: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Crypto…”
Kanıt özeti
This domain is currently active and hosts a site whose title advertises a global investment platform covering forex, commodities, stocks, indices, cryptocurrencies, gold and oil. The domain taostinworks.cc was registered on 19 September 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare‑served address 188.114.97.3, ASN 13335. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 trust chain, indicating proper TLS termination via Cloudflare. Nameservers anirban.ns.cloudflare.com and stevie.ns.cloudflare.com confirm the use of Cloudflare DNS. An HTTP request returns status 200, showing the web service is reachable. Infrastructure analysis shows the domain is listed on three public security blocklists and is explicitly blocked by PhishDestroy, MetaMask and SEAL, suggesting that multiple threat‑intelligence feeds have identified it as malicious. AlienVault OTX references a single pulse that includes taostinworks.cc, and VirusTotal reports three of ninety‑one scanners flagging the domain, reinforcing the suspicion. The Gridinsoft trust score of 0/100 further indicates a poor reputation. The available evidence points to a high‑risk, investment‑focused phishing campaign. However, the content of the landing page has not been inspected, so the exact tactics remain unknown. Defenders should immediately block the domain at perimeter and DNS layers, monitor for outbound connections to the associated IP, and consider sinkholing the address to disrupt further activity. Ongoing telemetry should be collected to detect any evolution of the campaign.
Gönderilen kanıt anlık görüntüsü
- Gönderildi
- Kayıt defteri kayıtları
- 1
- Vaka kimliği
PD-20260623-E694CD- Yakalanan sayfa başlığı
- Taostinworks: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil
- PDF belgesi
- PDF kanıtı
Kanıtın tam metni
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Tehdit Müdahale Pipeline
Engelleme listesi kapsamı
10 izlenen harici kaynak · kayıtlı anlık görüntü 12.08.2026
VirusTotal Analizi
Site Yapılandırma Analizi
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin