VirusTotal
3 / 92
“optimal-trader.com | LEGIT STOCK, FOREX, NFT, BINARY”
optimal-trader.com — آخر نشاط معروف (HTTP 200). انتحال العلامة التجارية: Base; نوع الاحتيال: Impersonation. ملخص الأدلة: VirusTotal 3/92 (alphaMountain.ai, Netcraft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 98/100. مسجّل النطاق: Dominet (HK).
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
PhishDestroy first observed optimal-trader.com on Oct 13, 2026. Stored content metadata identifies Base as the apparent target. The captured page title is “optimal-trader.com | LEGIT STOCK, FOREX, NFT, BINARY”. Page analysis recorded additional brand references to Ethereum, Facebook, Google, Signal, and Telegram. Stored page analysis classifies the content as impersonation. Current evidence score: 98/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 3 detections among 92 engines: alphaMountain.ai, Netcraft, SOCRadar on Oct 14, 2026 at 18:58 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Oct 14, 2026 at 18:20 UTC. Additional recorded evidence: AlienVault OTX listed 3 community pulse references (not vendor detections) on Oct 14, 2026 at 18:59 UTC.
HTTP 200 was recorded on Oct 14, 2026 at 10:26 UTC. Latest classified outcome: live content observed; cause content served on Oct 14, 2026 at 08:26 UTC. Registration records for the domain list Dominet (HK) Limited as the registrar and Oct 9, 2026 as the creation date. Registration preceded first observation by 4 days. At collection time, the hostname resolved to 91.230.49.19 on AS62068 (SpectraIP SpectraIP B.V., NL). The recorded endpoint location is Amsterdam, NL. DOM analysis on Oct 13, 2026 at 22:20 UTC returned 98/100. The evidence archive retains 1 visual capture from PhishDestroy. IoC extraction on Oct 14, 2026 at 04:00 UTC retained 0 format-validated wallet addresses and 1 Telegram indicator. TLS metadata lists Let's Encrypt / YR1 as the certificate issuer with validity through Jan 8, 2027; checked Oct 13, 2026 at 22:02 UTC.
The content indicators and 3 positive source findings support the current Base-themed impersonation classification.
Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.
https://t.me/EmilyIsabella2Stored page referenceIoC extraction recorded 2026-10-14 04:00:08 UTC
الملاحظات المخزنة المتعلقة بالمقارنة بين برامج الزحف والمتصفح لهذا المضيف، بالإضافة إلى فحص مباشر للبصمة الرقمية لأنظمة توزيع حركة المرور على غرار «كيتارو».
Local تم أرشفته في 2026-10-13 17:44:53 بالتوقيت العالمي المنسق (UTC)ملاحظة خاصة بالماسح الضوئي: alive_content: raw=ok; http=200; via=https_proxy
ns200.mypowerfulserver.comoptimal-trader.compriority 0Location describes the IP network.
61b03f7d314813c54de038aecbbb2f577a3e7135866b2644ad602818cbf004e6Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of optimal-trader.com · checked Oct 13, 2026
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
http://optimal-trader.com/X-Powered-By: PHP/5.6.40Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0Content-Type: text/html; charset=UTF-8Content-Encoding: gzipd95f4a4f134376e9f7a4afcb27d2bcd8e45b3f1a22889b3f3a16faa7aaf6243ano-store, no-cache, must-revalidate, post-check=0, pre-check=0Keep-Alivegziptext/html; charset=UTF-8Tue, 13 Oct 2026 15:44:51 GMTThu, 19 Nov 1981 08:52:00 GMTtimeout=5, max=100no-cachestrict-origin-when-cross-originchunkedAccept-EncodingnosniffSAMEORIGINnonePHP/5.6.401; mode=blockValues retained by the collector; long values may be shortened during collection.
91.230.49.19. 13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
Template-based draft · optional AI wording assistance requires separate consent
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنأرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةراقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب