# PhishDestroy domain threat record: cronetriumsystemtech.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/cronetriumsystemtech.com/ Machine-readable companion: https://phishdestroy.io/domain/cronetriumsystemtech.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 01:15:50 UTC - Last availability or vendor check: 2026-10-25 11:00:53 UTC - Stored record updated: 2026-10-25 11:21:58 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.58.129 - Registrar in stored WHOIS data: MainReg Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-05 05:36:02 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1709e-f468-703d-90bf-76328fee1107/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/cronetriumsystemtech.com - Certificate Transparency search: https://crt.sh/?q=%25.cronetriumsystemtech.com - Web Archive lookup: https://web.archive.org/web/*/https://cronetriumsystemtech.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added cronetriumsystemtech.com to its internal blocklist because VirusTotal flagged the domain as malicious. The recorded page title reads "Cronetrium System | AI Trading Platform | Official Website". The domain was first seen by PhishDestroy on 2026-10-25 and returned an HTTP 200 response on that date. How the scam works The listing does not prove a specific fraud technique, but domains with similar branding often attempt phishing or fake‑exchange schemes that lure users into providing credentials or funds. Such sites typically present a polished interface, claim advanced AI trading features, and may request login details or deposits. No concrete evidence of credential capture or wallet interaction was observed on this page. Evidence VirusTotal (analysis on 2026-10-21, retrieved 2026-10-25) reported 14 malicious and 3 suspicious detections from 92 engines, with vendors such as BitDefender, Fortinet and Kaspersky labeling it phishing. Google Safe Browsing checked on 2026-10-25 did not flag the URL. urlscan.io captured the site on 2026-10-25; its engine verdict scored 99 malicious while the overall score was 0. Cloudflare Radar on the same day marked the domain malicious under the malware category. OTX listed five pulses referencing the domain. PhishDestroy’s internal blocklist marks it as suspicious, while external blocklists reported zero hits. Infrastructure The domain was registered with MainReg Inc. on 2026-07-05 and expires on 2027-07-05. The recorded IP was 185.62.58.129, which belongs to a network operated by Snel.com B.V. in the Netherlands. DNS was served by Cloudflare nameservers oaklyn.ns.cloudflare.com and junade.ns.cloudflare.com. The site used a ZeroSSL ECC DV certificate valid from 2026-09-19 to 2026-12-18 and loaded assets from CDNs such as jsDelivr and Google Fonts. What to do Visitors should avoid entering any credentials, personal data or financial information on the site and consider changing passwords if they may have been entered. Organizations should block the domain in network filters, monitor DNS logs for queries to cronetriumsystemtech.com, and review any authentication attempts that may have involved this address. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1709e-f468-703d-90bf-76328fee1107/ Cloudflare Radar report: https://radar.cloudflare.com/scan/3952c801-30b1-46ab-9f51-ec76b18f55e2 URLQuery report: https://urlquery.net/report/d315b9ce-7680-4bbe-9500-b150b909d913 Stored capture screenshot: https://urlscan.io/screenshots/01a1709e-f468-703d-90bf-76328fee1107.png Cloudflare Radar screenshot (2026-10-25T01:57:23Z): https://screenshots.phishdestroy.io/cf/3952c801-30b1-46ab-9f51-ec76b18f55e2.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/d315b9ce-7680-4bbe-9500-b150b909d913.png URLScan screenshot (2026-10-25T00:58:47Z): https://screenshots.phishdestroy.io/us/01a1708e-46c2-76f8-9b71-6e3d02056218.png URLScan capture report: https://urlscan.io/result/01a1708e-46c2-76f8-9b71-6e3d02056218/ URLScan screenshot (2026-10-25T01:07:37Z): https://screenshots.phishdestroy.io/us/01a17099-2479-73ef-bda9-7bbb73354188.png URLScan capture report: https://urlscan.io/result/01a17099-2479-73ef-bda9-7bbb73354188/ VirusTotal report: https://www.virustotal.com/gui/domain/cronetriumsystemtech.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=cronetriumsystemtech.com Archived copy: https://web.archive.org/web/20261025011616/https://cronetriumsystemtech.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 02:30:55 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1709e-f468-703d-90bf-76328fee1107.png Captured: 2026-10-25 01:15:50 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1709e-f468-703d-90bf-76328fee1107.png Captured: 2026-10-25 01:15:50 UTC Source report: https://urlscan.io/result/01a1709e-f468-703d-90bf-76328fee1107/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3952c801-30b1-46ab-9f51-ec76b18f55e2.png Captured: 2026-10-25 01:57:23 UTC Source report: https://radar.cloudflare.com/scan/3952c801-30b1-46ab-9f51-ec76b18f55e2 SHA-256: 7668d9198267f496fa79497b80553b05ab72cc278883243f23e80f65e85fbb27 - URLQuery: https://screenshots.phishdestroy.io/uq/d315b9ce-7680-4bbe-9500-b150b909d913.png Source report: https://urlquery.net/report/d315b9ce-7680-4bbe-9500-b150b909d913 SHA-256: 85186ea41879b07b7f82447d9d4f7e72887b25499dae01fac5843669fb8fae49 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1708e-46c2-76f8-9b71-6e3d02056218.png Captured: 2026-10-25 00:58:47 UTC Source report: https://urlscan.io/result/01a1708e-46c2-76f8-9b71-6e3d02056218/ SHA-256: e48179ebc3847600517b464498d1c4544d577cc994f33f35b06fd16c9772b29f - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17099-2479-73ef-bda9-7bbb73354188.png Captured: 2026-10-25 01:07:37 UTC Source report: https://urlscan.io/result/01a17099-2479-73ef-bda9-7bbb73354188/ SHA-256: d66e031dff8f79f4ea85bfe732014b93273c9227f92a0cc28cd6e2679f5c4f62 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T01:58:42Z", "uuid": "01a1709e-f468-703d-90bf-76328fee1107", "scanned_at": "2026-10-25T01:13:58Z", "final_url": "https://cronetriumsystemtech.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://cronetriumsystemtech.com/", "from": "http://cronetriumsystemtech.com/", "status": 307 } ], "ip": "185.62.58.129", "ptr": "static-129-58-62-185.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.18.95.41", "104.17.208.5", "142.251.110.94", "104.18.94.41", "104.16.123.96", "2606:4700::6811:cf05", "104.17.25.14", "2a00:1450:4001:c0f::5f", "185.62.58.129" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "DE", "NL" ], "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747", "script_hashes": [ "08377c8d99651a4979d85194b58482a2a682f2c38d816cd50842d30d66ec1e83" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "domain_age_days": 111, "apex_age_days": 111, "tls_age_days": 36, "tls_valid_days": 90, "requests": 25, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "image/png" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T01:58:43Z", "uuid": "3952c801-30b1-46ab-9f51-ec76b18f55e2", "scanned_at": "2026-10-25T01:57:23Z", "final_url": "https://cronetriumsystemtech.com/", "status": 200, "history": [ { "url": "https://cronetriumsystemtech.com/", "status": 200 } ], "dom_hash": "03326fe869d0c7d13bfbf4b8b861f80ccd4106eaad73379156d5cdf6026a5c84", "doc_hash": "52f8fc39b3b6a123bf33ca0f56016dad9da98e804059dadda399e91f265e7163", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "cronetriumsystemtech.com", "type": "A", "value": "185.62.58.129" } ], "dnssec_valid": false, "ip": "185.62.58.129", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "MainReg Inc.", "created": "2026-07-05T07:36:02Z", "updated": "2026-07-05T08:41:02Z", "expires": "2027-07-05T07:36:02Z", "nameservers": [ "junade.ns.cloudflare.com", "oaklyn.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T02:28:38Z", "analysis_at": "2026-10-21T16:01:10Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "MainReg Inc.", "created": "2026-07-05T07:36:02Z", "expires": "2027-07-05T07:36:02Z", "updated": "2026-07-05T08:41:02Z", "first_seen": "2026-07-05T09:07:02Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "junade.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.58.129" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "junade.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "oaklyn.ns.cloudflare.com" } ], "dns_at": "2026-10-21T16:06:41Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "cronetriumsystemtech.com" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "cc4394caf1da10d16be9bdd148d78c9b", "sha256": "6dcdf962d22ad32a5170e0808c9fd3d83743335c19ca04b1adcd170de7db0ab5", "subject": "cronetriumsystemtech.com", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "whois": { "registrar": "MainReg Inc.", "registrar_iana_id": "1917", "registrar_url": "http://www.mainreg.com", "created": "2026-07-05T07:36:02Z", "updated": "2026-07-05T08:41:02Z", "expires": "2027-07-05T07:36:02Z", "status": [ "ok" ], "nameservers": [ "junade.ns.cloudflare.com", "oaklyn.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "last changed": "2026-07-05T00:00:00Z", "registration": "2026-07-05T00:00:00Z", "registrar expiration": "2027-07-05T00:00:00Z", "last update of RDAP database": "2026-10-18T15:47:00Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T01:25:45Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "cronetriumsystemtech.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T01:16:16Z", "first": "2026-10-09T22:56:57Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.07, "avg_page_bytes": 12575 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://cronetriumsystemtech.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://cronetriumsystemtech.com/", "title": "Cronetrium System | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Cronetrium System | AI-Powered Automated Trading Overview", "ogSiteName": "Cronetrium System", "themeColor": "#111111", "description": "Cronetrium System delivers a premium, AI-driven overview of automated trading bots, execution workflows, risk controls, and operating features for modern markets.", "twitterCard": "summary", "canonicalUrl": "https://cronetriumsystemtech.com/", "ogDescription": "Cronetrium System showcases AI-powered automated trading bots, execution workflows, risk controls, and operational features for modern markets with premium clarity." }, "trackers": { "requests": 20, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 5, "tls": 34, "wait": 23, "connect": 14, "download": 38 }, "response_ms": 114 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 46551, "co2_grams": 0.0017, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "172.64.34.90", "host": "oaklyn.ns.cloudflare.com" }, { "ip": "108.162.195.30", "host": "junade.ns.cloudflare.com" } ], "zone": "cronetriumsystemtech.com" }, "location": { "ip": "185.62.58.129", "asn": "62370", "org": "Snel.com B.V.", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "cronetriumsystemtech.com" }, "dns": { "A": [ "185.62.58.129" ], "NS": [ "oaklyn.ns.cloudflare.com", "junade.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"junade.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414021965, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.58.129", "family": 4 }, "redirects": { "chain": [ "https://cronetriumsystemtech.com" ] }, "linked_pages": { "internal_count": 38 }, "whois": { "registrar": "MainReg Inc.", "created": "2026-07-05T07:36:02Z", "updated": "2026-07-05T08:41:02Z", "expires": "2027-07-05T07:36:02Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "junade.ns.cloudflare.com", "oaklyn.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```