# PhishDestroy domain threat record: credolano.click Content language: English Canonical HTML report: https://phishdestroy.io/domain/credolano.click/ Machine-readable companion: https://phishdestroy.io/domain/credolano.click/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 01:41:30 UTC - Last availability or vendor check: 2026-10-26 11:00:58 UTC - Stored record updated: 2026-10-26 19:21:25 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.57.10 - Registrar in stored WHOIS data: NETIM SARL - Registrar country in stored WHOIS data: FR - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-06-21 05:04:27 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019fc44c-5859-713a-ad43-e4d0681ab8e2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/credolano.click - Certificate Transparency search: https://crt.sh/?q=%25.credolano.click - Web Archive lookup: https://web.archive.org/web/*/https://credolano.click/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed credolano.click on its internal blocklist as a suspicious domain. The recorded page title is “credolano | AI Trading Platform | Official Website”. The domain was first seen by PhishDestroy on 2026-10-25 when an HTTP 200 response was recorded. How the scam works The site advertises an AI‑driven trading platform, a theme often used by fraudulent services to entice users into depositing funds or providing login details. Because the classification relies on security‑engine detections and no malicious actions were observed in the captured page, the specific scam method cannot be confirmed. Evidence VirusTotal scanned the domain on 2026-10-19 (retrieved 2026-10-25) and reported 15 malicious and 3 suspicious detections from 92 engines, giving a total of 18 detections. Google Safe Browsing checked the domain on 2026-10-25 and did not flag it. urlscan.io captured the site on 2026-08-02; its engine score was 99 with a malicious tag, while the overall verdict was clean. Cloudflare Radar scanned the domain on 2026-10-25 and returned a malicious verdict in the malware category. OTX listed one pulse referencing the domain on 2026-10-25, and no external blocklists reported it as malicious at that time. Infrastructure The domain was registered with NETIM SARL on 2026-06-21 and expires on 2027-06-21, using the Cloudflare nameservers cleo.ns.cloudflare.com and rosalie.ns.cloudflare.com. The recorded IP address is 185.62.57.10, hosted by Snel.com B.V. in the Netherlands, and the TLS certificate issued by ZeroSSL ECC DV is valid from 2026-09-19 to 2026-12-18. DNSSEC is not enabled for the domain. What to do Visitors should avoid entering credentials or downloading files from the site and monitor any accounts for unexpected activity. If login information was submitted, change the associated passwords immediately. Defenders can block the exact domain in network filters and review logs for connections to 185.62.57.10. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019fc44c-5859-713a-ad43-e4d0681ab8e2/ Cloudflare Radar report: https://radar.cloudflare.com/scan/34eca3e8-d761-4dfd-a21c-2155039f1e43 Stored capture screenshot: https://urlscan.io/screenshots/019fc44c-5859-713a-ad43-e4d0681ab8e2.png Cloudflare Radar screenshot (2026-10-25T00:44:21Z): https://screenshots.phishdestroy.io/cf/34eca3e8-d761-4dfd-a21c-2155039f1e43.png URLScan screenshot (2026-10-25T00:44:18Z): https://screenshots.phishdestroy.io/us/01a17083-ba98-718f-aea2-2974b056d2a0.png URLScan capture report: https://urlscan.io/result/01a17083-ba98-718f-aea2-2974b056d2a0/ VirusTotal report: https://www.virustotal.com/gui/domain/credolano.click Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=credolano.click Archived copy: https://web.archive.org/web/20261025004203/https://credolano.click/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 01:47:47 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019fc44c-5859-713a-ad43-e4d0681ab8e2.png Captured: 2026-10-25 01:41:30 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/019fc44c-5859-713a-ad43-e4d0681ab8e2.png Captured: 2026-10-25 04:30:49 UTC Source report: https://urlscan.io/result/019fc44c-5859-713a-ad43-e4d0681ab8e2/ - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17083-ba98-718f-aea2-2974b056d2a0.png Captured: 2026-10-25 00:44:18 UTC Source report: https://urlscan.io/result/01a17083-ba98-718f-aea2-2974b056d2a0/ SHA-256: 6c043e10c841277bce6c0908b7049b86d8bf07108ecfab35b48d728cfe411e01 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/34eca3e8-d761-4dfd-a21c-2155039f1e43.png Captured: 2026-10-25 00:44:21 UTC Source report: https://radar.cloudflare.com/scan/34eca3e8-d761-4dfd-a21c-2155039f1e43 SHA-256: a67990d7202609e562c848c0ed37e04d357295c9d1a267f94cb276e61ec0670d ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T00:47:01Z", "uuid": "019fc44c-5859-713a-ad43-e4d0681ab8e2", "scanned_at": "2026-08-02T21:06:11Z", "final_url": "https://credolano.click/", "status": 200, "ip": "185.62.57.10", "ptr": "s46026.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.17.207.5", "104.16.123.96", "142.251.13.94", "2606:4700::6811:d005", "2a00:1450:4001:c13::5f", "185.62.57.10" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "DE", "NL" ], "doc_hash": "7f2fcd9d3f29fa8088150ea9f68e789e1b252fc74c5e0d52f2926ccbcaf1d6a7", "script_hashes": [ "e776c8e03ae39686bf5344edf2667ee34a517077e47c1b709c3cc2c8dd1792c3" ], "globals": [ "toggleTermsPopup", "intlTelInput", "FingerprintJS", "__visitorCountry" ], "storage_keys": [ "t_fingerprint" ], "tls": { "san": [ "credolano.click" ], "cipher": "CHACHA20_POLY1305", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "credolano.click", "protocol": "TLS 1.3", "valid_to": "2026-10-19T23:59:59Z", "valid_from": "2026-07-21T00:00:00Z" }, "domain_age_days": 42, "apex_age_days": 42, "tls_age_days": 12, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T00:47:03Z", "uuid": "34eca3e8-d761-4dfd-a21c-2155039f1e43", "scanned_at": "2026-10-25T00:44:21Z", "final_url": "https://credolano.click/", "status": 200, "history": [ { "url": "https://credolano.click/", "status": 200 } ], "dom_hash": "d8f3e948126f7787646186d76801b8d82613f9aa8e25e8174e191c01422ee809", "doc_hash": "6b46e085d78bc47513d93a5b41c130577d1fabe326e208492b5ee04df793dbaf", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "credolano.click", "type": "A", "value": "185.62.57.10" } ], "dnssec_valid": false, "ip": "185.62.57.10", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "NETIM SARL", "created": "2026-06-21T07:04:27Z", "updated": "2026-06-26T07:04:55Z", "expires": "2027-06-21T07:04:27Z", "nameservers": [ "cleo.ns.cloudflare.com", "rosalie.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T00:43:25Z", "analysis_at": "2026-10-19T11:08:30Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 15, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "NETIM SARL", "created": "2026-06-21T07:04:27Z", "expires": "2027-06-21T07:04:27Z", "updated": "2026-06-26T07:04:55Z", "first_seen": "2026-06-21T10:37:07Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "cleo.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.10" }, { "ttl": 21600, "type": "NS", "value": "cleo.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "rosalie.ns.cloudflare.com" } ], "dns_at": "2026-10-19T11:17:15Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "credolano.click" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "8bbf1b67d42ad3154264722338106e61", "sha256": "be18919eabc19edafb7ef4a7a18849f4c4ac3ee3df4ad89adba2b6a43909537c", "subject": "credolano.click", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "whois": { "registrar": "NETIM SARL", "registrar_iana_id": "1519", "registrar_url": "www.netim.com", "created": "2026-06-21T07:04:27Z", "updated": "2026-06-26T07:04:55Z", "expires": "2027-06-21T07:04:27Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "cleo.ns.cloudflare.com", "rosalie.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active", "client transfer prohibited" ], "events": { "expiration": "2027-06-21T21:00:00Z", "last changed": "2026-06-21T09:04:25Z", "registration": "2026-06-21T00:00:00Z", "registrar expiration": "2027-06-21T21:00:00Z", "last update of RDAP database": "2026-10-17T13:55:11Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T00:47:20Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "credolano.click" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T00:42:03Z", "first": "2026-10-25T00:42:03Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 14361 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://credolano.click/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://credolano.click/", "title": "credolano | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "credolano", "description": "credolano delivers a premium, portfolio-style dashboard for AI-driven trading guidance, automated trading bots, and execution workflows—designed to empower confident decisions with intelligent automation.", "canonicalUrl": "https://credolano.click/", "ogDescription": "Premium, portfolio-style dashboard for AI-powered trading assistance, automated bots, and streamlined execution workflows." }, "trackers": { "requests": 22, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 5 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 145, "tls": 21, "wait": 18, "connect": 14, "download": 43 }, "response_ms": 241 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 51283, "co2_grams": 0.0019, "cleaner_than": 36 }, "dns_server": { "ns": [ { "ip": "108.162.194.57", "host": "rosalie.ns.cloudflare.com" }, { "ip": "173.245.59.89", "host": "cleo.ns.cloudflare.com" } ], "zone": "credolano.click" }, "location": { "ip": "185.62.57.10", "asn": "62370", "org": "Snel.com B.V.", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "credolano.click" }, "dns": { "A": [ "185.62.57.10" ], "NS": [ "cleo.ns.cloudflare.com", "rosalie.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"cleo.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418057183, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.10", "family": 4 }, "redirects": { "chain": [ "https://credolano.click" ] }, "linked_pages": { "internal_count": 38 }, "whois": { "registrar": "NETIM SARL", "created": "2026-06-21T07:04:27Z", "updated": "2026-06-26T07:04:55Z", "expires": "2027-06-21T07:04:27Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "cleo.ns.cloudflare.com", "rosalie.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```