# PhishDestroy domain threat record: cheminfundriasoftware.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/cheminfundriasoftware.shop/
Machine-readable companion: https://phishdestroy.io/domain/cheminfundriasoftware.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 08:04:05 UTC
- Last availability or vendor check: 2026-10-24 11:13:45 UTC
- Stored record updated: 2026-10-24 14:21:12 UTC
- VirusTotal detections in the stored snapshot: 13/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 172.67.153.89
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-10 05:49:01 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16cf7-388e-70dc-847e-b71f75ff8aa5/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/cheminfundriasoftware.shop
- Certificate Transparency search: https://crt.sh/?q=%25.cheminfundriasoftware.shop
- Web Archive lookup: https://web.archive.org/web/*/https://cheminfundriasoftware.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated assessment classifies cheminfundriasoftware.shop as a “Fake Exchange”. The recorded page title advertises “Chemin Fundria | AI Trading Platform | Official Website”. PhishDestroy first observed the domain on 2026-10-24 and an HTTP request then returned a 200 status code. The domain is listed on PhishDestroy’s internal blocklist; external blocklists checked on that date did not list it.

How the scam works
Fake crypto exchanges present professional‑looking interfaces that claim AI‑driven trading and high returns. They typically lure visitors into depositing cryptocurrency or connecting a wallet, after which the operator can seize transferred funds or approved token allowances. No specific wallet or transaction behavior was observed on this page, but the classification reflects that typical risk profile.

Evidence
VirusTotal scanned the domain on 2026-10-24, flagging it as malicious by 10 vendors and suspicious by 3, for a total of 13 detections across 92 engines. Google Safe Browsing checked on 2026-10-24 and did not flag the site. urlscan captured the page on 2026-09-18 with a clean overall verdict, while a later capture on 2026-10-24 received a malicious engine score of 99 but an overall non‑malicious verdict. Cloudflare Radar (2026-10-24) marked the domain as malicious for malware, OTX listed five pulses referencing it, PhishDestroy’s internal blocklist includes it, and external blocklists (including Spamhaus) reported no listing.

Infrastructure
The domain was registered on 2026-09-10 through Spaceship, Inc., giving it 44 days of age at first sighting. Hosting is provided by Cloudflare, Inc., with the recorded IP 172.67.153.89 located in Canada. The TLS certificate, issued by Google Trust Services / WE1, is valid from 2026-09-10 to 2026-12-09 and covers only cheminfundriasoftware.shop. Nameservers are charles.ns.cloudflare.com and karsyn.ns.cloudflare.com, and DNSSEC was not enabled.

What to do
Users who entered credentials or connected a wallet should change any associated passwords and revoke all wallet approvals immediately. If private keys or seed phrases were exposed, create a new secure wallet and transfer assets there. Defenders should block the exact domain name in firewalls or proxy filters and monitor for connections to its Cloudflare IPs. Report the site to email providers or relevant anti‑phishing services and keep the PhishDestroy blocklist entry in place.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16cf7-388e-70dc-847e-b71f75ff8aa5/
Cloudflare Radar report: https://radar.cloudflare.com/scan/2b46f051-15d2-4dec-9d13-aad59ed873cf
Stored capture screenshot: https://urlscan.io/screenshots/01a16cf7-388e-70dc-847e-b71f75ff8aa5.png
Cloudflare Radar screenshot (2026-10-24T08:06:04Z): https://screenshots.phishdestroy.io/cf/2b46f051-15d2-4dec-9d13-aad59ed873cf.png
URLScan screenshot (2026-09-17T17:01:39Z): https://screenshots.phishdestroy.io/us/01a0b050-faa0-76cd-83ac-1d9a5affd434.png
URLScan capture report: https://urlscan.io/result/01a0b050-faa0-76cd-83ac-1d9a5affd434/
VirusTotal report: https://www.virustotal.com/gui/domain/cheminfundriasoftware.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=cheminfundriasoftware.shop
Archived copy: https://web.archive.org/web/20261024080526/https://cheminfundriasoftware.shop/
Revoke token approvals: https://revoke.cash/
Report crypto fraud (Chainabuse): https://www.chainabuse.com/report
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 14:09:13 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16cf7-388e-70dc-847e-b71f75ff8aa5.png
  Captured: 2026-10-24 08:13:44 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0b3ee-cde6-70cb-9829-3f2a47ba82bf.png
  Captured: 2026-10-24 08:04:05 UTC
  Source report: https://urlscan.io/result/01a16cf7-388e-70dc-847e-b71f75ff8aa5/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2b46f051-15d2-4dec-9d13-aad59ed873cf.png
  Captured: 2026-10-24 08:06:04 UTC
  Source report: https://radar.cloudflare.com/scan/2b46f051-15d2-4dec-9d13-aad59ed873cf
  SHA-256: db1835dea8465f5572b90ac64a39ccf7058fa845ded41edfc562c9c901e4fdad
- URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0b050-faa0-76cd-83ac-1d9a5affd434.png
  Captured: 2026-09-17 17:01:39 UTC
  Source report: https://urlscan.io/result/01a0b050-faa0-76cd-83ac-1d9a5affd434/
  SHA-256: 4f0f84965b324b2842daa245c29b06d68bbf2030557d917f6147db75bf0df714

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T08:37:11Z",
        "uuid": "01a16cf7-388e-70dc-847e-b71f75ff8aa5",
        "scanned_at": "2026-10-24T08:12:05Z",
        "final_url": "https://cheminfundriasoftware.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://cheminfundriasoftware.shop/",
                "from": "http://cheminfundriasoftware.shop/",
                "status": 307
            }
        ],
        "ip": "172.67.153.89",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "104.18.95.41",
            "2606:4700::6811:cf05",
            "2a00:1450:4001:c1f::5f",
            "104.17.25.14",
            "172.67.153.89"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "bac16bab1abf587bb7a46d1986568404411b448b6d825adda55a42a2adb4b1de",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_nf2fl15",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "cheminfundriasoftware.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "cheminfundriasoftware.shop",
            "protocol": "QUIC",
            "valid_to": "2026-12-09T09:17:27Z",
            "valid_from": "2026-09-10T08:17:29Z"
        },
        "domain_age_days": 43,
        "apex_age_days": 43,
        "tls_age_days": 43,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "frame-src https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudfl",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "no-referrer-when-downgrade",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T08:09:08Z",
        "uuid": "2b46f051-15d2-4dec-9d13-aad59ed873cf",
        "scanned_at": "2026-10-24T08:06:04Z",
        "final_url": "https://cheminfundriasoftware.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://cheminfundriasoftware.shop/",
                "status": 200
            }
        ],
        "dom_hash": "b2e962338ee522ce13907bfda922dd80250ca61151ebd757f9f981ea3eaba163",
        "doc_hash": "8f567cf090d3cd2aeb8067886b376a35a89424f50c7f76fe26aa274ec7e02713",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "cheminfundriasoftware.shop",
                "type": "A",
                "value": "172.67.153.89"
            },
            {
                "name": "cheminfundriasoftware.shop",
                "type": "A",
                "value": "104.21.48.150"
            },
            {
                "name": "cheminfundriasoftware.shop",
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3096"
            },
            {
                "name": "cheminfundriasoftware.shop",
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:9959"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.153.89",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T14:07:35Z",
        "analysis_at": "2026-10-18T03:43:22Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 10,
            "suspicious": 3,
            "undetected": 33
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "first_seen": "2026-09-10T09:51:42Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.153.89"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "charles.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "charles.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:9959"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3096"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "karsyn.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.48.150"
            }
        ],
        "dns_at": "2026-10-18T03:48:48Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "cheminfundriasoftware.shop"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "3161371da333b6de0ee2438af7240103",
            "sha256": "9c092a7433d70fc39a0f79d92caa5be51752b6c4d1f6bfaddb46be770112c3d9",
            "subject": "cheminfundriasoftware.shop",
            "valid_to": "2026-12-09T09:17:27Z",
            "valid_from": "2026-09-10T08:17:29Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T08:09:23Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "cheminfundriasoftware.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-24T08:05:26Z",
            "first": "2026-09-10T09:41:15Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.02,
            "avg_page_bytes": 36726
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://cheminfundriasoftware.shop/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://cheminfundriasoftware.shop/",
            "title": "Chemin Fundria | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Chemin Fundria | Elite AI Trading Intelligence",
            "ogSiteName": "Chemin Fundria",
            "themeColor": "#0A1F3D",
            "description": "Chemin Fundria delivers AI-driven trading support, autonomous bots, real-time market monitoring, and disciplined risk controls for today’s proactive traders.",
            "twitterCard": "summary",
            "canonicalUrl": "https://cheminfundriasoftware.shop/",
            "ogDescription": "Chemin Fundria delivers AI-driven trading support, autonomous bots, real-time market monitoring, and disciplined risk controls for today’s proactive traders."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 18,
                "wait": 100,
                "connect": 6,
                "download": 35
            },
            "response_ms": 160
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 135474,
            "co2_grams": 0.005,
            "cleaner_than": 15
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.193.83",
                    "host": "charles.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.34.194",
                    "host": "karsyn.ns.cloudflare.com"
                }
            ],
            "zone": "cheminfundriasoftware.shop"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3033::ac43:9959",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "cheminfundriasoftware.shop"
        },
        "dns": {
            "A": [
                "104.21.48.150",
                "172.67.153.89"
            ],
            "NS": [
                "karsyn.ns.cloudflare.com",
                "charles.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"charles.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086625, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3032::6815:3096",
                "2606:4700:3033::ac43:9959"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "frame-src https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; sty",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3032::6815:3096",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://cheminfundriasoftware.shop"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "content-security-policy": "frame-src https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.j",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "no-referrer-when-downgrade",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```