# PhishDestroy domain threat record: blueq-system.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/blueq-system.com/ Machine-readable companion: https://phishdestroy.io/domain/blueq-system.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 08:32:10 UTC - Last availability or vendor check: 2026-10-23 11:24:23 UTC - Stored record updated: 2026-10-23 18:20:50 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.57.10 - Registrar in stored WHOIS data: MainReg Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, blueq-system.com): 2026-02-10 14:29:02 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a167f1-6840-7509-845e-ef8c08d9c605/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/blueq-system.com - Certificate Transparency search: https://crt.sh/?q=%25.blueq-system.com - Web Archive lookup: https://web.archive.org/web/*/https://blueq-system.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed blueq-system.com as a suspicious domain based on aggregated vendor detections. The site displayed the title “BlueQ | AI Trading Platform | Official Website” and returned an HTTP 200 response when first observed on 2026-10-23. How the scam works The detections indicate a general phishing or malware risk, but no specific malicious code or credential‑harvesting form was observed on the captured page. Without concrete evidence, the listing reflects the reputation signals rather than a confirmed exploitation technique. Evidence VirusTotal reported 12 malicious and 4 suspicious detections out of 92 engines on 2026-10-23, with vendors such as BitDefender, Fortinet and Sophos labeling it phishing. Google Safe Browsing showed no flag on the same date. urlscan.io captured the domain on 2026-08-09 (verdict: malicious) and again on 2026-10-23 (engine score 99, overall neutral). Cloudflare Radar classified the domain as malicious malware on 2026-10-23. OTX listed three pulses referencing the domain as of 2026-10-23. PhishDestroy’s internal blocklist marks the domain as true, while external blocklists returned zero matches on the check date. Infrastructure The domain was registered on 2026-02-10 through MainReg Inc. and the recorded IP address was 185.62.57.10, which was associated with Snel.com B.V. in the Netherlands. DNS records showed Cloudflare nameservers (dane.ns.cloudflare.com, irma.ns.cloudflare.com) and a ZeroSSL ECC DV TLS certificate issued to blueq-system.com, valid until 2026-12-21. DNSSEC was not observed in the recorded data. What to do Visitors should avoid entering login credentials, personal data, or financial information on the site; if any such data were submitted, change the associated passwords and monitor accounts for unauthorized activity. Defenders can block the exact domain blueq-system.com, add it to local blocklists, and review logs for connections to the recorded IP address 185.62.57.10. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a167f1-6840-7509-845e-ef8c08d9c605/ Cloudflare Radar report: https://radar.cloudflare.com/scan/059e9f11-f040-4f19-b39a-d9d257f20fc2 Stored capture screenshot: https://urlscan.io/screenshots/01a167f1-6840-7509-845e-ef8c08d9c605.png Cloudflare Radar screenshot (2026-10-23T08:39:38Z): https://screenshots.phishdestroy.io/cf/059e9f11-f040-4f19-b39a-d9d257f20fc2.png URLScan screenshot (2026-08-08T09:16:00Z): https://screenshots.phishdestroy.io/us/019fe0a7-d8ec-7328-bf96-ce8a441ffe44.png URLScan capture report: https://urlscan.io/result/019fe0a7-d8ec-7328-bf96-ce8a441ffe44/ VirusTotal report: https://www.virustotal.com/gui/domain/blueq-system.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=blueq-system.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 09:13:43 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a167f1-6840-7509-845e-ef8c08d9c605.png Captured: 2026-10-23 08:49:17 UTC - URLScan capture: https://screenshots.phishdestroy.io/019fe51c-371e-73ed-b845-38680162038c.png Captured: 2026-10-23 08:32:10 UTC Source report: https://urlscan.io/result/01a167f1-6840-7509-845e-ef8c08d9c605/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/059e9f11-f040-4f19-b39a-d9d257f20fc2.png Captured: 2026-10-23 08:39:38 UTC Source report: https://radar.cloudflare.com/scan/059e9f11-f040-4f19-b39a-d9d257f20fc2 SHA-256: 1c7520abbf3e135d6d9c1dfc8afe0080702c4371ae16c9beb6f1e3a30b5541a5 - URLQuery: https://screenshots.phishdestroy.io/uq/8baafbfd-f196-4268-a802-ad12f453d7b1.png Source report: https://urlquery.net/report/8baafbfd-f196-4268-a802-ad12f453d7b1 SHA-256: 82d9a6c1c73dd0fbd988b56c105489a20a9aa3e61f9eb3d24da7f898db7a8383 - URLScan · 2026-08-08: https://screenshots.phishdestroy.io/us/019fe0a7-d8ec-7328-bf96-ce8a441ffe44.png Captured: 2026-08-08 09:16:00 UTC Source report: https://urlscan.io/result/019fe0a7-d8ec-7328-bf96-ce8a441ffe44/ SHA-256: 9f792b7fe34c158e8db7e3b1723b7b5957b5ccb7635a0d04e75928789493cb63 - URLScan · 2026-08-09: https://screenshots.phishdestroy.io/us/019fe51c-371e-73ed-b845-38680162038c.png Captured: 2026-08-09 06:01:34 UTC Source report: https://urlscan.io/result/019fe51c-371e-73ed-b845-38680162038c/ SHA-256: 3ec222223fcfbd8f09db763c2b84384ae27987cd20aa9fcc05efb94cfbaaa0d0 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T09:12:49Z", "uuid": "01a167f1-6840-7509-845e-ef8c08d9c605", "scanned_at": "2026-10-23T08:47:27Z", "final_url": "https://blueq-system.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://blueq-system.com/", "from": "http://blueq-system.com/", "status": 307 } ], "ip": "185.62.57.10", "ptr": "s46026.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "151.101.129.229", "192.178.183.94", "104.18.94.41", "2606:4700::6810:7c60", "2a04:4e42:600::485", "104.17.24.14", "2a00:1450:4001:c13::5f", "185.62.57.10" ], "asns": [ "54113", "15169", "13335", "62370" ], "countries": [ "US", "DE", "NL" ], "doc_hash": "03590279d44d2c5318eaf711722f8f08f246d184c7f0b7c440cd550371ed6a6a", "script_hashes": [ "ef312de1d37137b55f645f39910a17da42681e845be0d97cfc723552fa0c57c4" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "blueq-system.com" ], "cipher": "CHACHA20_POLY1305", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "blueq-system.com", "protocol": "TLS 1.3", "valid_to": "2026-12-21T23:59:59Z", "valid_from": "2026-09-22T00:00:00Z" }, "domain_age_days": 254, "apex_age_days": 254, "tls_age_days": 31, "tls_valid_days": 90, "requests": 22, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T08:42:11Z", "uuid": "059e9f11-f040-4f19-b39a-d9d257f20fc2", "scanned_at": "2026-10-23T08:39:38Z", "final_url": "https://blueq-system.com/", "status": 200, "history": [ { "url": "https://blueq-system.com/", "status": 200 } ], "dom_hash": "6c2cf3f687de4349313876e8894e19753ac316306d9df6e4137658164765785b", "doc_hash": "03590279d44d2c5318eaf711722f8f08f246d184c7f0b7c440cd550371ed6a6a", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "blueq-system.com", "type": "A", "value": "185.62.57.10" } ], "dnssec_valid": false, "ip": "185.62.57.10", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "MainReg Inc.", "created": "2026-02-10T14:29:02Z", "updated": "2026-02-11T08:16:03Z", "expires": "2027-02-10T14:29:02Z", "nameservers": [ "dane.ns.cloudflare.com", "irma.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T09:10:33Z", "analysis_at": "2026-10-22T07:15:43Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 12, "suspicious": 4, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "spam", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "categories": { "Sophos": "phishing and fraud", "BitDefender": "misc", "alphaMountain.ai": "Spam (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "created": "2026-02-10T00:00:00Z", "updated": "2026-02-11T00:00:00Z", "first_seen": "2026-02-11T08:57:55Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "dane.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "irma.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "dane.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.10" } ], "dns_at": "2026-10-22T07:16:15Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "blueq-system.com" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "59390e19ecfa9c324e07c3add471ffb1", "sha256": "3fed26b1b4b6b25b64066f2bb7eb96e5244b82a8d997389a711cadc2501f0fa1", "subject": "blueq-system.com", "valid_to": "2026-12-21T23:59:59Z", "valid_from": "2026-09-22T00:00:00Z" }, "whois": [], "rdap": { "status": [ "active" ], "events": { "last changed": "2026-02-11T00:00:00Z", "registration": "2026-02-10T00:00:00Z", "registrar expiration": "2027-02-10T00:00:00Z", "last update of RDAP database": "2026-10-18T07:47:00Z" }, "registrar": "MainReg Inc.", "registrar_iana_id": "1917" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T08:42:24Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "blueq-system.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://blueq-system.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "ogUrl": "https://blueq-system.com/", "title": "BlueQ | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "BlueQ | AI-Driven Trading Support & Automation Suite", "ogSiteName": "BlueQ", "themeColor": "#0f1114", "description": "BlueQ delivers AI-powered trading intelligence and autonomous bot tooling for CFD and forex workflows, showcasing setup, controls, and actionable insights.", "twitterCard": "summary", "canonicalUrl": "https://blueq-system.com/", "ogDescription": "BlueQ delivers AI-powered trading intelligence and autonomous bot tooling for CFD and forex workflows, showcasing setup, controls, and actionable insights." }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 20, "tls": 36, "wait": 50, "connect": 13, "download": 19 }, "response_ms": 138 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 48300, "co2_grams": 0.0018, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "172.64.32.166", "host": "irma.ns.cloudflare.com" }, { "ip": "173.245.59.97", "host": "dane.ns.cloudflare.com" } ], "zone": "blueq-system.com" }, "location": { "ip": "185.62.57.10", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "blueq-system.com" }, "dns": { "A": [ "185.62.57.10" ], "NS": [ "irma.ns.cloudflare.com", "dane.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"dane.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418007356, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.10", "family": 4 }, "redirects": { "chain": [ "https://blueq-system.com" ] }, "linked_pages": { "internal_count": 45 }, "whois": { "registrar": "MainReg Inc.", "created": "2026-02-10T14:29:02Z", "updated": "2026-02-11T08:16:03Z", "expires": "2027-02-10T14:29:02Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "dane.ns.cloudflare.com", "irma.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```