# PhishDestroy domain threat record: automindtr.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/automindtr.digital/
Machine-readable companion: https://phishdestroy.io/domain/automindtr.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 05:18:32 UTC
- Last availability or vendor check: 2026-10-22 05:35:43 UTC
- Stored record updated: 2026-10-22 06:30:31 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-23 05:29:35 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16219-d5b1-76df-97b0-343674fa33fb/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/automindtr.digital
- Certificate Transparency search: https://crt.sh/?q=%25.automindtr.digital
- Web Archive lookup: https://web.archive.org/web/*/https://automindtr.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI assessment on 2026-10-22 classified the domain as malicious because the site advertises an AI‑driven trading platform, a pattern frequently seen in fraudulent investment schemes, and because the domain is only 59 days old with a generic .digital TLD. The recorded page title reads “AutoMind TR | AI Trading Platform | Official Website”. The domain was first seen by PhishDestroy on 2026-10-22, sixty days after its registration on 2026-08-23, and returned an HTTP 200 response at that time. No page content was captured during the intake, so the assessment relies on the title and contextual risk factors.

How the scam works
Fake AI trading sites typically lure visitors with promises of automated bots and superior market intelligence, then pressure them to deposit funds or share wallet credentials to access the alleged service. Victims are often convinced that the AI will generate profits, while the operators siphon any transferred assets. The scheme relies on the credibility of technical jargon and the allure of effortless earnings.

Evidence
VirusTotal recorded one malicious detection out of 92 engines on 2026-10-21, with SOCRadar labeling the domain as phishing. Google Safe Browsing checked on 2026-10-22 and did not flag the site. URLScan captured a snapshot on 2026-09-08; its overall verdict was clean, but its engine scoring flagged the URL as malicious with a high confidence score. OTX listed one pulse referencing the domain as of 2026-10-22. PhishDestroy’s internal blocklist includes the domain, while external blocklists showed no matches on the check date.

Infrastructure
The domain was registered on 2026-08-23 through Spaceship, Inc., and uses Cloudflare’s network with recorded IP 188.114.96.1 located in GB. TLS was issued by Google Trust Services on 2026-08-23 and is valid until 2026-11-21. DNS records point to Cloudflare name servers, and DNSSEC is not enabled.

What to do
Users should avoid providing any personal data, credentials, or funds to the site and should change passwords if they have entered login information. Organizations should block automindtr.digital at the DNS and proxy layers and monitor for any outbound connections to the recorded Cloudflare IPs. Review access logs for visits on the dates noted and treat the domain as a high‑risk indicator of a potential investment fraud campaign.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0806a-6eb2-749b-9b0f-a18ef37b6169/
Cloudflare Radar report: https://radar.cloudflare.com/scan/5821695f-86ac-4f0e-ab13-e0718ea2c4d0
Stored capture screenshot: https://urlscan.io/screenshots/01a0806a-6eb2-749b-9b0f-a18ef37b6169.png
Cloudflare Radar screenshot (2026-10-22T05:21:39Z): https://screenshots.phishdestroy.io/cf/5821695f-86ac-4f0e-ab13-e0718ea2c4d0.png
URLScan screenshot (2026-09-07T08:45:40Z): https://screenshots.phishdestroy.io/us/01a07b0b-4dff-73a9-9d31-6334d4f9df78.png
URLScan capture report: https://urlscan.io/result/01a07b0b-4dff-73a9-9d31-6334d4f9df78/
URLScan screenshot (2026-09-07T10:26:24Z): https://screenshots.phishdestroy.io/us/01a07b67-72d0-701f-9c14-89f596bb8c1a.png
URLScan capture report: https://urlscan.io/result/01a07b67-72d0-701f-9c14-89f596bb8c1a/
VirusTotal report: https://www.virustotal.com/gui/domain/automindtr.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=automindtr.digital
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 05:24:51 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16219-d5b1-76df-97b0-343674fa33fb.png
  Captured: 2026-10-22 05:35:43 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0806a-6eb2-749b-9b0f-a18ef37b6169.png
  Captured: 2026-10-22 05:18:32 UTC
  Source report: https://urlscan.io/result/01a16219-d5b1-76df-97b0-343674fa33fb/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5821695f-86ac-4f0e-ab13-e0718ea2c4d0.png
  Captured: 2026-10-22 05:21:39 UTC
  Source report: https://radar.cloudflare.com/scan/5821695f-86ac-4f0e-ab13-e0718ea2c4d0
  SHA-256: 14ac894b7b0c75273e2ae58a5e86a807c73624d9cb63b728bb4d09f313b851d6
- URLQuery: https://screenshots.phishdestroy.io/uq/b0a4ac81-70b4-45d7-9acb-2e0777d16f68.png
  Source report: https://urlquery.net/report/b0a4ac81-70b4-45d7-9acb-2e0777d16f68
  SHA-256: 5c77e7938810271a545be549b337404b4100bfd6507f265a0962c41a809e8c57
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b0b-4dff-73a9-9d31-6334d4f9df78.png
  Captured: 2026-09-07 08:45:40 UTC
  Source report: https://urlscan.io/result/01a07b0b-4dff-73a9-9d31-6334d4f9df78/
  SHA-256: b7357b40621ec8250b18d05478a56b496d4cc485c80b6521f23d1195a0559c6e
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b67-72d0-701f-9c14-89f596bb8c1a.png
  Captured: 2026-09-07 10:26:24 UTC
  Source report: https://urlscan.io/result/01a07b67-72d0-701f-9c14-89f596bb8c1a/
  SHA-256: 761a9cc1b0832682ee87d2acf6eed3a4f4685b2b5840838e88fec03aba8a3fc3
- URLScan · 2026-09-08: https://screenshots.phishdestroy.io/us/01a0806a-6eb2-749b-9b0f-a18ef37b6169.png
  Captured: 2026-09-08 09:47:42 UTC
  Source report: https://urlscan.io/result/01a0806a-6eb2-749b-9b0f-a18ef37b6169/
  SHA-256: d64c716734c40d6265c27a7dc4f78b98f33e5cce12e928a769dbfe3cbb35fa43

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T05:55:13Z",
        "uuid": "01a16219-d5b1-76df-97b0-343674fa33fb",
        "scanned_at": "2026-10-22T05:33:53Z",
        "final_url": "https://automindtr.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://automindtr.digital/",
                "from": "http://automindtr.digital/",
                "status": 307
            }
        ],
        "ip": "188.114.96.3",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.95.41",
            "104.17.208.5",
            "142.250.154.95",
            "104.17.24.14",
            "188.114.96.3"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "d5fe1e45c1e4f46373247a95bbef3d3f3a8baa6a046f034110f397d7c1d192c0",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_tzsy2",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "automindtr.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "automindtr.digital",
            "protocol": "QUIC",
            "valid_to": "2027-01-19T11:37:26Z",
            "valid_from": "2026-10-21T10:37:27Z"
        },
        "domain_age_days": 59,
        "apex_age_days": 59,
        "tls_age_days": 0,
        "tls_valid_days": 90,
        "requests": 24,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://chal",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T05:24:25Z",
        "uuid": "5821695f-86ac-4f0e-ab13-e0718ea2c4d0",
        "scanned_at": "2026-10-22T05:21:39Z",
        "final_url": "https://automindtr.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://automindtr.digital/",
                "status": 200
            }
        ],
        "dom_hash": "9ca58066d3557be336ea2bd97f67261b4026d7a468b9387c8bcfbb1ab3571954",
        "doc_hash": "0c4070fd584bbf1f5d1dae575091f1fcccf7735e145d0310fcd8cd9fbe28410e",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "automindtr.digital",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "automindtr.digital",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "automindtr.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            },
            {
                "name": "automindtr.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.96.0",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T05:20:49Z",
        "analysis_at": "2026-10-21T15:11:52Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 36
        },
        "detections": {
            "SOCRadar": "phishing"
        },
        "reputation": 0,
        "first_seen": "2026-08-23T10:36:12Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "salvador.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "sofia.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "salvador.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.198.55"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:c637"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:2c57"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.44.87"
            }
        ],
        "dns_at": "2026-10-21T15:14:33Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "automindtr.digital"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "c1c275fff325c4510ef61e12a5b1d59a",
            "sha256": "aa299d246498afc0852d0e572837d1b614740ad6640632887eca59d12e7aa121",
            "subject": "automindtr.digital",
            "valid_to": "2027-01-19T11:37:26Z",
            "valid_from": "2026-10-21T10:37:27Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-08-23T09:22:33Z",
                "registration": "2026-08-23T07:29:35Z",
                "registrar expiration": "2027-08-23T07:29:35Z",
                "last update of RDAP database": "2026-10-17T18:42:00Z"
            },
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T05:24:36Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "automindtr.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-22T05:23:49Z",
            "first": "2026-10-22T05:23:49Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 41294
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://automindtr.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://automindtr.digital/",
            "title": "AutoMind TR | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "AutoMind TR | Premium AI Trading Platform",
            "ogSiteName": "AutoMind TR",
            "themeColor": "#000000",
            "description": "AutoMind TR delivers AI-driven trading support, autonomous bots, market surveillance tools, and clear risk-awareness resources for modern traders.",
            "twitterCard": "summary",
            "canonicalUrl": "https://automindtr.digital/",
            "ogDescription": "AutoMind TR delivers AI-driven trading support, autonomous bots, market surveillance tools, and clear risk-awareness resources for modern traders."
        },
        "trackers": {
            "requests": 22,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 17,
                "wait": 113,
                "connect": 6,
                "download": 11
            },
            "response_ms": 148
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 137027,
            "co2_grams": 0.005,
            "cleaner_than": 15
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.32.223",
                    "host": "sofia.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.100",
                    "host": "salvador.ns.cloudflare.com"
                }
            ],
            "zone": "automindtr.digital"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::9",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "automindtr.digital"
        },
        "dns": {
            "A": [
                "188.114.97.9",
                "188.114.96.9"
            ],
            "NS": [
                "salvador.ns.cloudflare.com",
                "sofia.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"salvador.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418091642, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::9",
                "2a06:98c1:3120::9"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenge",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::9",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://automindtr.digital"
            ]
        },
        "tech_stack": {
            "technologies": [
                "jsDelivr",
                "Cloudflare Turnstile",
                "Cloudflare Rocket Loader",
                "ClientJS",
                "Priority Hints",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 11
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.google",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```