# PhishDestroy domain threat record: cresta-yieldor-software.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/cresta-yieldor-software.com/
Machine-readable companion: https://phishdestroy.io/domain/cresta-yieldor-software.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 01:41:44 UTC
- Last availability or vendor check: 2026-10-25 11:00:55 UTC
- Stored record updated: 2026-10-25 15:21:43 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.57.205
- Registrar in stored WHOIS data: MainReg Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-01 12:45:01 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17084-2a39-745d-adf2-c70c8b2cccb0/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/cresta-yieldor-software.com
- Certificate Transparency search: https://crt.sh/?q=%25.cresta-yieldor-software.com
- Web Archive lookup: https://web.archive.org/web/*/https://cresta-yieldor-software.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed cresta-yieldor-software.com as a suspicious domain based on a high number of malicious detections from VirusTotal. The recorded page title was "Cresta Yieldor | Automated Trading Bot Overview". The domain was first seen by PhishDestroy on 2026-10-25 and returned an HTTP 200 response at that time.

How the scam works
The classification does not confirm a specific fraud technique; however, domains that advertise automated trading bots are commonly used to lure users into depositing funds or revealing credentials. No concrete evidence of such behavior was observed on the captured page, so the risk remains a general possibility of financial or credential deception.

Evidence
VirusTotal (2026-10-25) reported 15 malicious and 3 suspicious detections out of 92 engines, with vendors such as BitDefender, ESET and Kaspersky marking it malicious or phishing. Google Safe Browsing (2026-10-25) did not flag the site. urlscan.io performed two scans: an 2026-08-09 scan returned a clean verdict, while a 2026-10-25 scan gave an overall non‑malicious score but engine analysis flagged it malicious with a high confidence score. Cloudflare Radar (2026-10-25) labeled the domain malicious for malware and phishing. OTX listed one pulse on 2026-10-25. PhishDestroy’s internal blocklist includes the domain, while external blocklists showed no entries at the time of checking.

Infrastructure
The domain was registered on 2026-03-01 through MainReg Inc., giving it an age of 237 days at the time of observation. The recorded IP was 185.62.57.205, associated with Snel.com B.V. in the Netherlands, and the domain used Cloudflare nameservers cory.ns.cloudflare.com and elsa.ns.cloudflare.com. TLS was provided by ZeroSSL ECC DV, valid from 2026-09-22 to 2026-12-21. No additional infrastructure details indicate operator identity.

What to do
Visitors should avoid entering any credentials, payment information, or personal data on this site; if such data was submitted, change passwords and monitor accounts for suspicious activity. No wallet‑related recommendations are applicable. Defenders should add cresta-yieldor-software.com to blocklists, monitor DNS queries for the recorded IP, and consider firewall rules to block traffic to this exact address.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17084-2a39-745d-adf2-c70c8b2cccb0/
Cloudflare Radar report: https://radar.cloudflare.com/scan/22417bf5-84c7-4048-a3db-c20ec6075039
Stored capture screenshot: https://urlscan.io/screenshots/01a17084-2a39-745d-adf2-c70c8b2cccb0.png
Cloudflare Radar screenshot (2026-10-25T00:44:20Z): https://screenshots.phishdestroy.io/cf/22417bf5-84c7-4048-a3db-c20ec6075039.png
URLScan screenshot (2026-08-09T09:36:34Z): https://screenshots.phishdestroy.io/us/019fe5e1-8086-749c-ab48-5311d8eda46f.png
URLScan capture report: https://urlscan.io/result/019fe5e1-8086-749c-ab48-5311d8eda46f/
VirusTotal report: https://www.virustotal.com/gui/domain/cresta-yieldor-software.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=cresta-yieldor-software.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 01:47:21 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17084-2a39-745d-adf2-c70c8b2cccb0.png
  Captured: 2026-10-25 01:46:33 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17084-2a39-745d-adf2-c70c8b2cccb0.png
  Captured: 2026-10-25 01:46:33 UTC
  Source report: https://urlscan.io/result/01a17084-2a39-745d-adf2-c70c8b2cccb0/
- URLScan capture 2: https://urlscan.io/screenshots/019fe5e1-8086-749c-ab48-5311d8eda46f.png
  Captured: 2026-10-25 01:41:44 UTC
  Source report: https://urlscan.io/result/01a17084-2a39-745d-adf2-c70c8b2cccb0/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/22417bf5-84c7-4048-a3db-c20ec6075039.png
  Captured: 2026-10-25 00:44:20 UTC
  Source report: https://radar.cloudflare.com/scan/22417bf5-84c7-4048-a3db-c20ec6075039
  SHA-256: 4e01cff5b4123fe25682ca2df4ebcedbe4660a0aabd7cd54e8c3b6a5389aab4c
- URLQuery: https://screenshots.phishdestroy.io/uq/ed8ba8f8-e3af-4baa-ac8c-626f5d08b0ed.png
  Source report: https://urlquery.net/report/ed8ba8f8-e3af-4baa-ac8c-626f5d08b0ed
  SHA-256: 6dc77f02ca8989ca86dfad164044d1114a5fe47b0e639a257c80a17ce2b036c4
- URLScan · 2026-08-09: https://screenshots.phishdestroy.io/us/019fe5e1-8086-749c-ab48-5311d8eda46f.png
  Captured: 2026-08-09 09:36:34 UTC
  Source report: https://urlscan.io/result/019fe5e1-8086-749c-ab48-5311d8eda46f/
  SHA-256: 40bac500644aef5d0af10183995c6493ec071c903c1d45b314f8117697950217
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1708e-473d-7096-8d52-940ae270058d.png
  Captured: 2026-10-25 00:55:45 UTC
  Source report: https://urlscan.io/result/01a1708e-473d-7096-8d52-940ae270058d/
  SHA-256: eae50bf37d131701f3d9ccbc94d299d26c1b9c7ae188b147e3d84f7637125b6b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T00:46:47Z",
        "uuid": "01a17084-2a39-745d-adf2-c70c8b2cccb0",
        "scanned_at": "2026-10-25T00:44:46Z",
        "final_url": "https://cresta-yieldor-software.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://cresta-yieldor-software.com/",
                "from": "http://cresta-yieldor-software.com/",
                "status": 307
            }
        ],
        "ip": "185.62.57.205",
        "ptr": "s46030.hosted-by-snel.com",
        "domains": [
            "cdn.jsdelivr.net",
            "fonts.gstatic.com",
            "challenges.cloudflare.com",
            "fonts.googleapis.com",
            "www.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "104.18.95.41",
            "104.16.123.96",
            "142.250.195.227",
            "151.101.65.229",
            "142.250.195.106",
            "185.62.57.205"
        ],
        "asns": [
            "13335",
            "15169",
            "54113",
            "62370"
        ],
        "countries": [
            "US",
            "NL"
        ],
        "doc_hash": "72eb71c882215dbf91aae01dba191d8f8a1f4bd53cd8c7bab35bdf89abf6bbbe",
        "script_hashes": [
            "081f50aaa86ffe3ae5801d3a406909bd6532b1e919b0f4fc73291f28c418414d"
        ],
        "globals": [
            "intlTelInput",
            "__TS_SITEKEY",
            "__tsGet",
            "__tsReset",
            "__tsNeedsClick",
            "__tsShow",
            "__lgBS",
            "ClientJS",
            "__visitorCountry",
            "turnstile"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "cresta-yieldor-software.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "cresta-yieldor-software.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-21T23:59:59Z",
            "valid_from": "2026-09-22T00:00:00Z"
        },
        "domain_age_days": 237,
        "apex_age_days": 237,
        "tls_age_days": 33,
        "tls_valid_days": 90,
        "requests": 21,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T00:46:48Z",
        "uuid": "22417bf5-84c7-4048-a3db-c20ec6075039",
        "scanned_at": "2026-10-25T00:44:20Z",
        "final_url": "https://cresta-yieldor-software.com/",
        "status": 200,
        "history": [
            {
                "url": "https://cresta-yieldor-software.com/",
                "status": 200
            }
        ],
        "dom_hash": "d67327cb9cf1ca39c1b2e875f940c3809f118b1b6964c338d21352c43e34d6d8",
        "doc_hash": "a394efb3db2c2e05b072b690d0f746154b4f9ebff875adcaf8d48d631a352ffe",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "cresta-yieldor-software.com",
                "type": "A",
                "value": "185.62.57.205"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.57.205",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2026-03-01T13:45:01Z",
            "updated": "2026-03-01T14:37:02Z",
            "expires": "2027-03-01T13:45:01Z",
            "nameservers": [
                "cory.ns.cloudflare.com",
                "elsa.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T00:43:25Z",
        "analysis_at": "2026-10-24T23:48:45Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 15,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "malicious",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "Sophos": "phishing and fraud",
            "Webroot": "Phishing and Other Frauds",
            "alphaMountain.ai": "Malicious, Spam (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "phishing and other frauds"
        },
        "created": "2026-03-01T00:00:00Z",
        "updated": "2026-03-01T00:00:00Z",
        "first_seen": "2026-03-01T14:58:17Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.57.205"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "cory.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "elsa.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "cory.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-24T23:49:12Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "cresta-yieldor-software.com"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "cfc04cde13a8abf10df20aec31daf206",
            "sha256": "76567bd2eef54e39225bb005994be3facf9c87b98ac40515b14d1135d8a94a5a",
            "subject": "cresta-yieldor-software.com",
            "valid_to": "2026-12-21T23:59:59Z",
            "valid_from": "2026-09-22T00:00:00Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "last changed": "2026-03-01T00:00:00Z",
                "registration": "2026-03-01T00:00:00Z",
                "registrar expiration": "2027-03-01T00:00:00Z",
                "last update of RDAP database": "2026-10-18T15:46:00Z"
            },
            "registrar": "MainReg Inc.",
            "registrar_iana_id": "1917"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T00:47:05Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "cresta-yieldor-software.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T00:42:19Z",
            "first": "2026-10-13T17:16:42Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.09,
            "avg_page_bytes": 8600
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true
        },
        "sitemap": {
            "present": true,
            "url_count": 203
        },
        "social_tags": {
            "title": "Cresta Yieldor | Automated Trading Bot Overview",
            "robots": "index, follow",
            "description": "Cresta Yieldor presents a streamlined overview of automated trading bots, AI-powered trading assistance, workflow components, and operational safeguards...",
            "canonicalUrl": "https://cresta-yieldor-software.com/"
        },
        "trackers": {
            "requests": 15,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 4
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 21,
                "tls": 26,
                "wait": 32,
                "connect": 23,
                "download": 80
            },
            "response_ms": 182
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 31071,
            "co2_grams": 0.0011,
            "cleaner_than": 47
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.193.93",
                    "host": "cory.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.111",
                    "host": "elsa.ns.cloudflare.com"
                }
            ],
            "zone": "cresta-yieldor-software.com"
        },
        "location": {
            "ip": "185.62.57.205",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Schiedam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "cresta-yieldor-software.com"
        },
        "dns": {
            "A": [
                "185.62.57.205"
            ],
            "NS": [
                "cory.ns.cloudflare.com",
                "elsa.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"cory.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418248301, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.57.205",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://cresta-yieldor-software.com"
            ]
        },
        "linked_pages": {
            "internal_count": 11
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2026-03-01T13:45:01Z",
            "updated": "2026-03-01T14:37:02Z",
            "expires": "2027-03-01T13:45:01Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "cory.ns.cloudflare.com",
                "elsa.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```