# PhishDestroy domain threat record: amazoncapitaltrade.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/amazoncapitaltrade.com/
Machine-readable companion: https://phishdestroy.io/domain/amazoncapitaltrade.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 02:16:26 UTC
- Last availability or vendor check: 2026-10-21 10:46:18 UTC
- Stored record updated: 2026-10-21 16:07:58 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Amazon

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-06-22 13:05:37 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15c4b-e53c-700b-a1ff-a33b84c1aef8/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/amazoncapitaltrade.com
- Certificate Transparency search: https://crt.sh/?q=%25.amazoncapitaltrade.com
- Web Archive lookup: https://web.archive.org/web/*/https://amazoncapitaltrade.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has classified amazoncapitaltrade.com as a suspicious domain. The recorded page title reads “Amazon Capital: Plataforma de Trading Algorítmico”. PhishDestroy first observed the domain on 2026-10-21, when an HTTP 200 response was recorded. Google Safe Browsing did not flag the site on that date, but this alone does not guarantee safety.

How the scam works
The classification reflects a risk that the site may be using the Amazon brand and a fake algorithmic trading offer to lure visitors into providing credentials, personal data, or financial information. No specific malicious behavior was observed on the page, so the exact mechanism cannot be confirmed.

Evidence
VirusTotal scanned the domain on 2026-10-21 (analysis performed 2026-10-19) and returned 12 malicious and 4 suspicious detections from 92 engines, with vendors such as BitDefender, G‑Data, Kaspersky and others labeling it as phishing. Google Safe Browsing checked on 2026-10-21 and reported no flag. Spamhaus DBL listed the domain as phishing on 2026-10-21. OTX recorded five pulses referencing the domain as of 2026-10-21. PhishDestroy’s internal blocklist includes the domain as of 2026-10-21. urlscan captured the site on 2026-07-27 with a clean verdict, and a later capture on 2026-10-21 gave a high machine‑learning malicious score of 94 while the overall verdict remained non‑malicious. Cloudflare Radar on 2026-10-21 flagged the URL as malicious for malware and phishing.

Infrastructure
The domain was registered with Dynadot Inc on 2026-06-22. DNS resolution recorded the IP address 158.94.210.119, which belongs to the Omegatech LTD network and is associated with the Netherlands.

What to do
Visitors should not enter login credentials, personal data or financial information on this site; if any such data were submitted, change passwords immediately and monitor accounts for unauthorized activity. Defenders should block traffic to amazoncapitaltrade.com, add the domain to threat‑intelligence feeds, and review logs for any prior connections.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15c4b-e53c-700b-a1ff-a33b84c1aef8/
VirusTotal report: https://www.virustotal.com/gui/domain/amazoncapitaltrade.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=amazoncapitaltrade.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-21 03:20:32 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a15c4b-e53c-700b-a1ff-a33b84c1aef8.png
  Captured: 2026-10-21 02:32:41 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019fa373-3fea-71bd-881e-096867f060bb.png
  Captured: 2026-10-21 02:16:26 UTC
  Source report: https://urlscan.io/result/01a15c4b-e53c-700b-a1ff-a33b84c1aef8/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ff2b6c62-a217-45e6-9e06-db6070c0d030.png
  Captured: 2026-10-21 02:18:03 UTC
  Source report: https://radar.cloudflare.com/scan/ff2b6c62-a217-45e6-9e06-db6070c0d030
  SHA-256: 1e4a9d9b0943259d180a13f803de257fb7bef3e5abc8dd6aa61f51b9d81b4164
- URLQuery: https://screenshots.phishdestroy.io/uq/6db5ad65-ecbc-4672-bd92-5cb185afa111.png
  Source report: https://urlquery.net/report/6db5ad65-ecbc-4672-bd92-5cb185afa111
  SHA-256: 5efbd9e7fbf0a692b5935817646833acb03c396676b0dd60dec892c5be595ca9
- URLScan · 2026-07-27: https://screenshots.phishdestroy.io/us/019fa373-3fea-71bd-881e-096867f060bb.png
  Captured: 2026-07-27 12:01:18 UTC
  Source report: https://urlscan.io/result/019fa373-3fea-71bd-881e-096867f060bb/
  SHA-256: d935708832236f27ac8c3d1b1bce4ab6b94e3ce2ef0dca7ba8e13de7de788f59
- URLScan · 2026-07-28: https://screenshots.phishdestroy.io/us/019fa7b3-c2ec-75da-ada7-78808a55337a.png
  Captured: 2026-07-28 07:50:10 UTC
  Source report: https://urlscan.io/result/019fa7b3-c2ec-75da-ada7-78808a55337a/
  SHA-256: cded15e56c024ddd02428979212b6c878d68c2cac53e45c2e858528dc65c4da3
- URLScan · 2026-09-14: https://screenshots.phishdestroy.io/us/01a09ead-08bd-769f-83fd-fc4eba2ba065.png
  Captured: 2026-09-14 06:49:02 UTC
  Source report: https://urlscan.io/result/01a09ead-08bd-769f-83fd-fc4eba2ba065/
  SHA-256: 606c7b5f1e075c861ab733bd9d025a1f76dbc89438abae0d557786088d88a6e3
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c43-e672-737c-9b6b-60b73a61bc2f.png
  Captured: 2026-10-21 02:22:06 UTC
  Source report: https://urlscan.io/result/01a15c43-e672-737c-9b6b-60b73a61bc2f/
  SHA-256: a33b0f5512a2ac62642e153afa24277422d436673261cd0e87141e0124172667
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c4a-a7b7-7648-984f-af859032d1d5.png
  Captured: 2026-10-21 02:29:25 UTC
  Source report: https://urlscan.io/result/01a15c4a-a7b7-7648-984f-af859032d1d5/
  SHA-256: 606c7b5f1e075c861ab733bd9d025a1f76dbc89438abae0d557786088d88a6e3

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T02:48:28Z",
        "uuid": "01a15c4b-e53c-700b-a1ff-a33b84c1aef8",
        "scanned_at": "2026-10-21T02:30:46Z",
        "final_url": "https://amazoncapitaltrade.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://amazoncapitaltrade.com/",
                "from": "http://amazoncapitaltrade.com/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "985487995f5c9d50e5bfe01f6aaae7e109a5a962f28c92761615b2a85a489c58",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "navToggle",
            "navRight",
            "langBtn",
            "langDropdown",
            "reveals",
            "revealObserver"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.amazoncapitaltrade.com",
                "amazoncapitaltrade.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "amazoncapitaltrade.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-11T17:29:05Z",
            "valid_from": "2026-09-12T17:29:06Z"
        },
        "domain_age_days": 120,
        "apex_age_days": 120,
        "tls_age_days": 38,
        "tls_valid_days": 89,
        "requests": 6,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 94,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T02:19:30Z",
        "uuid": "ff2b6c62-a217-45e6-9e06-db6070c0d030",
        "scanned_at": "2026-10-21T02:18:03Z",
        "final_url": "https://amazoncapitaltrade.com/",
        "status": 200,
        "history": [
            {
                "url": "https://amazoncapitaltrade.com/",
                "status": 200
            }
        ],
        "dom_hash": "f8e18c3dd52ea07c2f5e886ccd534b4e01600fd243b3d060b61b90af02e8651c",
        "doc_hash": "31811afbdd527e328a938e3dde1c5c243cb1ecd87b0d668cf03de4dc23e8dee4",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Scam",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "amazoncapitaltrade.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-06-22T15:05:37Z",
            "updated": "2026-08-13T12:27:34Z",
            "expires": "2027-06-22T15:05:37Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T03:19:32Z",
        "analysis_at": "2026-10-19T12:00:09Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 12,
            "suspicious": 4,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Fortinet": "spam",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-06-22T15:05:37Z",
        "expires": "2027-06-22T15:05:37Z",
        "updated": "2026-08-13T12:27:34Z",
        "first_seen": "2026-06-22T16:01:13Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.amazoncapitaltrade.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-19T12:05:27Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.amazoncapitaltrade.com",
                "amazoncapitaltrade.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "572217d02163697312250a492ef297eac67",
            "sha256": "e90e397f128d9d92f6c130c6e4bd63b139b302fcde8809e731a464c130cc9fe6",
            "subject": "amazoncapitaltrade.com",
            "valid_to": "2026-12-11T17:29:05Z",
            "valid_from": "2026-09-12T17:29:06Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-06-22T15:05:37Z",
            "updated": "2026-08-13T12:27:34Z",
            "expires": "2027-06-22T15:05:37Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-06-22T15:05:37Z",
                "last changed": "2026-09-12T18:27:41Z",
                "registration": "2026-06-22T15:05:37Z",
                "registrar expiration": "2027-06-22T15:05:37Z",
                "last update of RDAP database": "2026-10-16T07:17:57Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T02:19:43Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "amazoncapitaltrade.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-21T02:18:31Z",
            "first": "2026-10-19T22:41:11Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.87,
            "avg_page_bytes": 23755
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://amazoncapitaltrade.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Amazon Capital: Plataforma de Trading Algorítmico",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Opera en 180+ mercados con resultados reales. Amazon Capital ofrece una plataforma automatizada de inversión con inteligencia predictiva y disponibilidad continua.",
            "canonicalUrl": "https://amazoncapitaltrade.com/"
        },
        "trackers": {
            "requests": 24
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 128,
                "tls": 86,
                "wait": 93,
                "connect": 71,
                "download": 155
            },
            "response_ms": 533
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 87676,
            "co2_grams": 0.0032,
            "cleaner_than": 25
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "amazoncapitaltrade.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "connect.sid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "amazoncapitaltrade.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.amazoncapitaltrade.com\", \"serial\": 2026091202, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://amazoncapitaltrade.com"
            ]
        },
        "tech_stack": {
            "technologies": [
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 26
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-06-22T15:05:37Z",
            "updated": "2026-08-13T12:27:34Z",
            "expires": "2027-06-22T15:05:37Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```