# PhishDestroy domain threat record: chateamosio.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/chateamosio.com/
Machine-readable companion: https://phishdestroy.io/domain/chateamosio.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 08:03:37 UTC
- Last availability or vendor check: 2026-10-24 11:13:49 UTC
- Stored record updated: 2026-10-24 12:53:29 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date (registry RDAP, chateamosio.com): 2026-09-29 11:09:54 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16d06-09f7-72e8-b6be-826373950052/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/chateamosio.com
- Certificate Transparency search: https://crt.sh/?q=%25.chateamosio.com
- Web Archive lookup: https://web.archive.org/web/*/https://chateamosio.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added chateamosio.com to its internal blocklist on 2026-10-24 after first seeing the domain. The recorded page title was “CHATEAMOS.IO — Plataforma de IA para decisiones de inversión” and the site returned HTTP 200 over HTTPS when fetched on 2026-10-24.

How the scam works
The multiple vendor detections label the domain as malicious, phishing or malware, indicating a typical risk of deceptive content or malicious payloads, though no specific technique was observed on the captured page.

Evidence
VirusTotal scanned the domain on 2026-10-23 and reported 13 malicious and 4 suspicious detections from 92 engines. Cloudflare Radar on 2026-10-24 marked it malicious with a malware category, while Google Safe Browsing on the same day did not flag it. URLScan captures on 2026-10-05 and 2026-10-24 gave an engine score of 99 % malicious but an overall clean verdict, and OTX listed three pulses referencing the domain.

Infrastructure
The domain was registered with Dynadot Inc on 2026-09-29 and was observed pointing to IP 158.94.210.119, which is listed under Omegatech LTD in the Netherlands. TLS was provided by Let’s Encrypt, valid from 2026-10-02 to 2026-12-31, and the site was served through Cloudflare.

What to do
Visitors should avoid entering credentials or downloading files from the site; if any data was submitted, change related passwords and monitor accounts. Defenders should block the exact domain, review access logs for connections on ports 80 and 443, and apply standard phishing‑mitigation controls.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16d06-09f7-72e8-b6be-826373950052/
Cloudflare Radar report: https://radar.cloudflare.com/scan/87016e69-75ef-40c8-8120-4ee626fd68cc
Stored capture screenshot: https://i.ibb.co/dSFdz37/d8c4607adc3a.png
Cloudflare Radar screenshot (2026-10-24T08:06:16Z): https://screenshots.phishdestroy.io/cf/87016e69-75ef-40c8-8120-4ee626fd68cc.png
URLScan screenshot (2026-10-05T12:23:15Z): https://screenshots.phishdestroy.io/us/01a10c04-92c0-73c8-b261-987b735e6e67.png
URLScan capture report: https://urlscan.io/result/01a10c04-92c0-73c8-b261-987b735e6e67/
URLScan screenshot (2026-10-06T12:06:47Z): https://screenshots.phishdestroy.io/us/01a1111b-da75-71a7-bfff-45ffb14fae31.png
URLScan capture report: https://urlscan.io/result/01a1111b-da75-71a7-bfff-45ffb14fae31/
URLScan screenshot (2026-10-24T08:09:25Z): https://screenshots.phishdestroy.io/us/01a16cf4-fcad-7112-981e-4f5508198a89.png
URLScan capture report: https://urlscan.io/result/01a16cf4-fcad-7112-981e-4f5508198a89/
VirusTotal report: https://www.virustotal.com/gui/domain/chateamosio.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=chateamosio.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 08:38:36 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/dSFdz37/d8c4607adc3a.png
  Captured: 2026-10-24 08:29:34 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a16d06-09f7-72e8-b6be-826373950052.png
  Captured: 2026-10-24 08:29:34 UTC
  Source report: https://urlscan.io/result/01a16d06-09f7-72e8-b6be-826373950052/
- URLScan capture 2: https://screenshots.phishdestroy.io/01a10ac1-a9b3-70fa-9bf9-9846b3e70e1c.png
  Captured: 2026-10-24 08:03:37 UTC
  Source report: https://urlscan.io/result/01a16d06-09f7-72e8-b6be-826373950052/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/87016e69-75ef-40c8-8120-4ee626fd68cc.png
  Captured: 2026-10-24 08:06:16 UTC
  Source report: https://radar.cloudflare.com/scan/87016e69-75ef-40c8-8120-4ee626fd68cc
  SHA-256: b4b9fb73531a39443acb04f4bc24c7c05b5af0e5a7a5246fe21b29ed6f830faf
- URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10c04-92c0-73c8-b261-987b735e6e67.png
  Captured: 2026-10-05 12:23:15 UTC
  Source report: https://urlscan.io/result/01a10c04-92c0-73c8-b261-987b735e6e67/
  SHA-256: d8ce69c4eb1e919c8e8983832ddb7c403759a6109670678e0c498df6a1947ec4
- URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a1111b-da75-71a7-bfff-45ffb14fae31.png
  Captured: 2026-10-06 12:06:47 UTC
  Source report: https://urlscan.io/result/01a1111b-da75-71a7-bfff-45ffb14fae31/
  SHA-256: b5e89e32809717b13cb1758fb7b9f7021d515aff40740506f6161af48ca86029
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16cf4-fcad-7112-981e-4f5508198a89.png
  Captured: 2026-10-24 08:09:25 UTC
  Source report: https://urlscan.io/result/01a16cf4-fcad-7112-981e-4f5508198a89/
  SHA-256: e88021b95eea5e718501bda09ad716c6c851d4e690ea02faffbe84bcde6530e1

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T08:37:45Z",
        "uuid": "01a16d06-09f7-72e8-b6be-826373950052",
        "scanned_at": "2026-10-24T08:28:02Z",
        "final_url": "https://chateamosio.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://chateamosio.com/",
                "from": "http://chateamosio.com/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "4f553225fc7b0fce755885665eb333fad23b7ca93dade07eb455226308f7fbd6",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.chateamosio.com",
                "chateamosio.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "chateamosio.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-31T21:31:24Z",
            "valid_from": "2026-10-02T21:31:25Z"
        },
        "domain_age_days": 24,
        "apex_age_days": 24,
        "tls_age_days": 21,
        "tls_valid_days": 89,
        "requests": 10,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T08:10:09Z",
        "uuid": "87016e69-75ef-40c8-8120-4ee626fd68cc",
        "scanned_at": "2026-10-24T08:06:16Z",
        "final_url": "https://chateamosio.com/",
        "status": 200,
        "history": [
            {
                "url": "https://chateamosio.com/",
                "status": 200
            }
        ],
        "dom_hash": "4b183c7c2720e0b459e85aac3baba57d47e45d88e2af510ed73e993e62ff1dec",
        "doc_hash": "8f6aaf96e50bd34a4c3f1074b03125630747c40a69f0b825f7c5704fc31331f2",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains",
            "Scam",
            "Security threats",
            "Malware",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "chateamosio.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-29T11:09:54Z",
            "updated": "2026-10-02T17:24:42Z",
            "expires": "2027-09-29T11:09:54Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T08:35:49Z",
        "analysis_at": "2026-10-23T14:39:42Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 4,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "malware",
            "CyRadar": "phishing",
            "Fortinet": "spam",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-09-29T11:09:54Z",
        "expires": "2027-09-29T11:09:54Z",
        "updated": "2026-09-29T11:10:20Z",
        "first_seen": "2026-09-29T13:14:29Z",
        "dns": [
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.chateamosio.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-23T14:43:03Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.chateamosio.com",
                "chateamosio.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6ce14af3bc233ee5e9e9e5e3e479cb97d8f",
            "sha256": "4f44ff607ecbba1caa2c78cc8df63d891ac44a9bec33e5dda88eaa3402a804f3",
            "subject": "chateamosio.com",
            "valid_to": "2026-12-31T21:31:24Z",
            "valid_from": "2026-10-02T21:31:25Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-09-29T11:09:54Z",
            "updated": "2026-09-29T11:10:20Z",
            "expires": "2027-09-29T11:09:54Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "carlos.ns.cloudflare.com",
                "zainab.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-29T11:09:54Z",
                "last changed": "2026-10-02T22:30:02Z",
                "registration": "2026-09-29T11:09:54Z",
                "registrar expiration": "2027-09-29T11:09:54Z",
                "last update of RDAP database": "2026-10-23T11:17:51Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T08:10:26Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "chateamosio.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-24T08:05:44Z",
            "first": "2026-09-29T12:07:41Z",
            "changes": 3,
            "days_archived": 4,
            "scans_per_day": 0.12,
            "avg_page_bytes": 14180
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://chateamosio.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "CHATEAMOS.IO — Plataforma de IA para decisiones de inversión",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "CHATEAMOS.IO es la plataforma de IA que transforma datos de mercado en señales accionables, sin cobrar comisión por operación. Acceda a su primer análisis sin costo de entrada.",
            "canonicalUrl": "https://chateamosio.com/"
        },
        "trackers": {
            "requests": 52,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 603,
                "tls": 111,
                "wait": 78,
                "connect": 71,
                "download": 139
            },
            "response_ms": 1002
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 70696,
            "co2_grams": 0.0026,
            "cleaner_than": 29
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "chateamosio.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "chateamosio.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.chateamosio.com\", \"serial\": 2026100203, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://chateamosio.com"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-29T11:09:54Z",
            "updated": "2026-10-02T17:24:42Z",
            "expires": "2027-09-29T11:09:54Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```