# PhishDestroy domain threat record: automindmy.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/automindmy.digital/
Machine-readable companion: https://phishdestroy.io/domain/automindmy.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 05:18:25 UTC
- Last availability or vendor check: 2026-10-22 11:01:54 UTC
- Stored record updated: 2026-10-22 17:47:53 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.1.59
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date (registry RDAP, automindmy.digital): 2026-08-02 07:47:55 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16242-fac2-70c2-a6ed-21ba433a1fe3/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/automindmy.digital
- Certificate Transparency search: https://crt.sh/?q=%25.automindmy.digital
- Web Archive lookup: https://web.archive.org/web/*/https://automindmy.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed automindmy.digital on 2026-10-22 after the domain was first seen by our system on that date. The recorded page title reads "AutoMind MY | AI Trading Platform | Authorized Entry Point". An HTTP 200 response was observed on the same day, and the domain is marked in our internal blocklist.

How the scam works
The detections suggest the site may be used for typical fake‑exchange or credential‑harvesting tactics, where visitors are enticed by promises of AI‑driven trading and could be prompted to provide login details or financial information. No specific malicious behavior was observed on the page itself, so the exact mechanism remains unconfirmed beyond the general risk associated with such fraudulent trading fronts.

Evidence
VirusTotal reported 13 malicious and 1 suspicious detections out of 92 engines on 2026-10-22 (analysis date 2026-10-19), with vendors labeling the domain as phishing or malicious. Google Safe Browsing checked on 2026-10-22 did not flag the site. urlscan captured the page on 2026-10-22; its overall verdict was clean, but its engine scoring marked it malicious with a 99 score. OTX listed three pulses referencing the domain as of 2026-10-22. PhishDestroy’s internal blocklist includes the domain, while external blocklists showed no hits on the check date.

Infrastructure
The domain was registered on 2026-08-02 through Dynadot Inc, with a transfer‑prohibited status. Hosting is provided via Cloudflare, recorded at IP 104.21.1.59 (Canada). TLS was issued by Google Trust Services on 2026-09-30, valid until 2026-12-29, using TLS 1.3 with forward secrecy. No DNSSEC records were present.

What to do
Visitors should avoid entering any credentials, personal data, or financial information on the site; if such data was submitted, change passwords and monitor accounts for unauthorized activity. Defenders should block automindmy.digital at network perimeters, log DNS queries to the recorded IPs, and consider sharing this indicator with threat‑intel partners.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16242-fac2-70c2-a6ed-21ba433a1fe3/
Cloudflare Radar report: https://radar.cloudflare.com/scan/0483f275-12d0-4a94-a0cf-0036ca64facc
Stored capture screenshot: https://urlscan.io/screenshots/01a16242-fac2-70c2-a6ed-21ba433a1fe3.png
Cloudflare Radar screenshot (2026-10-22T05:21:48Z): https://screenshots.phishdestroy.io/cf/0483f275-12d0-4a94-a0cf-0036ca64facc.png
URLScan screenshot (2026-09-07T10:26:17Z): https://screenshots.phishdestroy.io/us/01a07b67-7025-745e-827c-04f71c68652f.png
URLScan capture report: https://urlscan.io/result/01a07b67-7025-745e-827c-04f71c68652f/
VirusTotal report: https://www.virustotal.com/gui/domain/automindmy.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=automindmy.digital
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 06:22:50 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16242-fac2-70c2-a6ed-21ba433a1fe3.png
  Captured: 2026-10-22 06:20:40 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0806a-69f3-76b5-bdcc-8beb1368cf4f.png
  Captured: 2026-10-22 05:18:25 UTC
  Source report: https://urlscan.io/result/01a16242-fac2-70c2-a6ed-21ba433a1fe3/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0483f275-12d0-4a94-a0cf-0036ca64facc.png
  Captured: 2026-10-22 05:21:48 UTC
  Source report: https://radar.cloudflare.com/scan/0483f275-12d0-4a94-a0cf-0036ca64facc
  SHA-256: ea1de317f6ba85e6164bc929f43801bcd438b7a3437bb7141ebafd136b78868a
- URLQuery: https://screenshots.phishdestroy.io/uq/43590a1e-1a69-439b-b995-fb8955f56bee.png
  Source report: https://urlquery.net/report/43590a1e-1a69-439b-b995-fb8955f56bee
  SHA-256: 2addb89dd494e990a26821d311cc53ec9dc9327f330a106fefc3a97a565df969
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b67-7025-745e-827c-04f71c68652f.png
  Captured: 2026-09-07 10:26:17 UTC
  Source report: https://urlscan.io/result/01a07b67-7025-745e-827c-04f71c68652f/
  SHA-256: a44fbf29fc79566aa4888b22a20bc0d713226fe88ca2062224a6af8788abecc6
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16218-ed47-70fe-8b58-49af4567c136.png
  Captured: 2026-10-22 05:32:54 UTC
  Source report: https://urlscan.io/result/01a16218-ed47-70fe-8b58-49af4567c136/
  SHA-256: ac0dd7287a24ee85cbb367a8dc3ced2069a09663d5b58f1b1d5f0c736548e55d
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16220-c91d-70dc-bee4-096ec1b52530.png
  Captured: 2026-10-22 05:41:31 UTC
  Source report: https://urlscan.io/result/01a16220-c91d-70dc-bee4-096ec1b52530/
  SHA-256: 9f34802cdc647094010bdd36b900ccb72aae09fa50b0d76d4797379f8e837673
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16227-caff-716e-bc4a-5253a3f09ceb.png
  Captured: 2026-10-22 05:49:10 UTC
  Source report: https://urlscan.io/result/01a16227-caff-716e-bc4a-5253a3f09ceb/
  SHA-256: 150bb789b611692eed2fcd92fabb90ac24427f92e25292c49d85485818415ea4
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16231-80f5-750b-a97e-6c1c5a684034.png
  Captured: 2026-10-22 05:59:49 UTC
  Source report: https://urlscan.io/result/01a16231-80f5-750b-a97e-6c1c5a684034/
  SHA-256: 9d1dd431ad3d12222bba6b3283211c12390f63793114433a9b438a2a9f330ccc

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T06:22:27Z",
        "uuid": "01a16242-fac2-70c2-a6ed-21ba433a1fe3",
        "scanned_at": "2026-10-22T06:18:51Z",
        "final_url": "https://automindmy.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://automindmy.digital/",
                "from": "http://automindmy.digital/",
                "status": 307
            }
        ],
        "ip": "104.21.1.59",
        "domains": [
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.95.41",
            "142.250.195.227",
            "104.18.94.41",
            "104.17.207.5",
            "142.250.195.234",
            "104.17.25.14",
            "104.21.1.59"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "85d0b36dc82b87d360041150350eb3f7addbfb3319d3234532f52d95448d5947",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_xwgr6",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "automindmy.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "automindmy.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-29T13:02:03Z",
            "valid_from": "2026-09-30T12:02:08Z"
        },
        "domain_age_days": 80,
        "apex_age_days": 80,
        "tls_age_days": 21,
        "tls_valid_days": 90,
        "requests": 23,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudfla",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "no-referrer-when-downgrade",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T05:24:29Z",
        "uuid": "0483f275-12d0-4a94-a0cf-0036ca64facc",
        "scanned_at": "2026-10-22T05:21:48Z",
        "final_url": "https://automindmy.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://automindmy.digital/",
                "status": 200
            }
        ],
        "dom_hash": "8ea55b62036802290898d7e2d74150ba3013000bff02f040ddb61f6b0acaea0e",
        "doc_hash": "55c87da0d8beaf159b04460dc40965c5e7e3ecfbf8de61cfd74e07ce7a52302b",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "automindmy.digital",
                "type": "A",
                "value": "104.21.1.59"
            },
            {
                "name": "automindmy.digital",
                "type": "A",
                "value": "172.67.128.172"
            },
            {
                "name": "automindmy.digital",
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:80ac"
            },
            {
                "name": "automindmy.digital",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:13b"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.1.59",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T06:21:52Z",
        "analysis_at": "2026-10-19T18:46:40Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 1,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "phishing",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "first_seen": "2026-08-02T10:19:46Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.128.172"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:80ac"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.1.59"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:13b"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "arnold.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "arnold.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "magdalena.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-19T18:52:00Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "automindmy.digital"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "b60adfa8528919f10e1572ab543b055e",
            "sha256": "c0d452dc9accac693575250f008771f53de2dc787e891b295664b297ca2a5e92",
            "subject": "automindmy.digital",
            "valid_to": "2026-12-29T13:02:03Z",
            "valid_from": "2026-09-30T12:02:08Z"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-02T07:47:55Z",
                "last changed": "2026-08-02T09:52:13Z",
                "registration": "2026-08-02T07:47:55Z",
                "registrar expiration": "2027-08-02T07:47:55Z",
                "last update of RDAP database": "2026-10-16T07:28:54Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T05:24:45Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "automindmy.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://automindmy.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://automindmy.digital/",
            "title": "AutoMind MY | AI Trading Platform | Authorized Entry Point",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "AutoMind MY | Premium Neon-grade Portfolio Automation",
            "ogSiteName": "AutoMind MY",
            "themeColor": "#0F1114",
            "description": "AutoMind MY delivers a premium AI-driven trading terminal with automated workflows, live market-style metrics, and risk-first governance for confident, informed execution.",
            "twitterCard": "summary",
            "canonicalUrl": "https://automindmy.digital/",
            "ogDescription": "AutoMind MY delivers a premium AI-driven trading terminal with automated workflows, live market-style metrics, and risk-first governance for confident, informed execution."
        },
        "trackers": {
            "requests": 17,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 14,
                "tls": 20,
                "wait": 143,
                "connect": 8,
                "download": 115
            },
            "response_ms": 300
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 153999,
            "co2_grams": 0.0056,
            "cleaner_than": 13
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.33.69",
                    "host": "arnold.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.194.8",
                    "host": "magdalena.ns.cloudflare.com"
                }
            ],
            "zone": "automindmy.digital"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3036::ac43:80ac",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "automindmy.digital"
        },
        "dns": {
            "A": [
                "172.67.128.172",
                "104.21.1.59"
            ],
            "NS": [
                "magdalena.ns.cloudflare.com",
                "arnold.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"arnold.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086018, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3037::6815:13b",
                "2606:4700:3036::ac43:80ac"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-an",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3036::ac43:80ac",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://automindmy.digital"
            ]
        },
        "tech_stack": {
            "technologies": [
                "jsDelivr",
                "Cloudflare Turnstile",
                "Cloudflare Rocket Loader",
                "ClientJS",
                "Priority Hints",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.js",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "no-referrer-when-downgrade",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```