# PhishDestroy domain threat record: cryptotradingdesk-dapp.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/cryptotradingdesk-dapp.com/ Machine-readable companion: https://phishdestroy.io/domain/cryptotradingdesk-dapp.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 17:07:40 UTC - Last availability or vendor check: 2026-10-22 17:12:26 UTC - Stored record updated: 2026-10-22 18:30:23 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 206.119.72.93 - Registrar in stored WHOIS data: GMO Internet Group, Inc. d/b/a Onamae.com - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-17 00:42:40 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16498-0c32-77cd-95ab-735626db814b/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/cryptotradingdesk-dapp.com - Certificate Transparency search: https://crt.sh/?q=%25.cryptotradingdesk-dapp.com - Web Archive lookup: https://web.archive.org/web/*/https://cryptotradingdesk-dapp.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed cryptotradingdesk-dapp.com following an admin report that noted the domain was only five days old at the time of intake on 2026-10-22. The recorded page title is “Turtrobln” and the HTTP response was 200 on the same date. No concrete malicious behavior was observed on the page, so the assessment remains “unknown”. How the scam works The domain is flagged because new, short‑lived sites with security‑engine detections are often used for phishing, fake exchanges, or wallet‑draining campaigns, but no specific mechanism was observed on this page. Without evidence of credential capture, wallet interaction, or malicious scripts, the risk is limited to the possibility of future abuse typical of such suspicious domains. Evidence VirusTotal scanned the domain on 2026-10-19 and reported three suspicious detections out of 92 engines, with Fortinet labeling it as spam, Gridinsoft as suspicious, and alphaMountain.ai as spam. Google Safe Browsing checked on 2026-10-22 and did not flag the site. URLScan captured the page on 2026-10-22, returned an overall clean verdict but its engine score was 99 with malicious tags, and no external blocklists listed the domain at that time. PhishDestroy’s internal blocklist includes the domain, while external blocklist counts were zero, and OTX reported no pulses. Infrastructure The domain was registered with GMO Internet Group (Onamae.com) on 2026-10-17 and is set to expire on 2027-10-17 under a clientTransferProhibited status. The recorded observation showed the domain pointing to IP 206.119.72.93, which belonged to FASTNET DATA INC in the United States, and the site was served behind Cloudflare using a TLS 1.3 certificate from Let’s Encrypt/YR1 that was valid until 2027-01-15. Nameservers are ns1.julydns.com and ns2.julydns.com, and the site presented a standard nginx server header. What to do Visitors should avoid entering credentials or approving any wallet connections on this site; if any credentials were submitted, change them immediately. Defenders should add cryptotradingdesk-dapp.com to blocklists, monitor network traffic for connections to 206.119.72.93, and review Cloudflare logs for any suspicious activity. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16340-4365-759a-8665-bca5ec13275e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/9ec81305-72f5-4758-b23b-796c7b48b8d0 Stored capture screenshot: https://urlscan.io/screenshots/01a16340-4365-759a-8665-bca5ec13275e.png Cloudflare Radar screenshot (2026-10-22T17:09:40Z): https://screenshots.phishdestroy.io/cf/9ec81305-72f5-4758-b23b-796c7b48b8d0.png URLScan screenshot (2026-10-21T22:36:05Z): https://screenshots.phishdestroy.io/us/01a1609b-5612-73da-8813-346c4d734ecb.png URLScan capture report: https://urlscan.io/result/01a1609b-5612-73da-8813-346c4d734ecb/ VirusTotal report: https://www.virustotal.com/gui/domain/cryptotradingdesk-dapp.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=cryptotradingdesk-dapp.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 17:11:16 UTC ## Stored page captures - Primary capture: https://i.ibb.co/TB7H4Vcx/6a3b46528de7.png Captured: 2026-10-22 17:12:26 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a16498-0c32-77cd-95ab-735626db814b.png Captured: 2026-10-22 17:12:26 UTC Source report: https://urlscan.io/result/01a16498-0c32-77cd-95ab-735626db814b/ - URLScan capture 2: https://urlscan.io/screenshots/01a16340-4365-759a-8665-bca5ec13275e.png Captured: 2026-10-22 17:07:40 UTC Source report: https://urlscan.io/result/01a16498-0c32-77cd-95ab-735626db814b/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9ec81305-72f5-4758-b23b-796c7b48b8d0.png Captured: 2026-10-22 17:09:40 UTC Source report: https://radar.cloudflare.com/scan/9ec81305-72f5-4758-b23b-796c7b48b8d0 SHA-256: dfd446589f175564cbc336ebc792d24f93d9ce68aa1594dbe3dfef77a4986aea - URLQuery: https://screenshots.phishdestroy.io/uq/4bad84b6-5c53-4ad5-a963-11def03ef359.png Source report: https://urlquery.net/report/4bad84b6-5c53-4ad5-a963-11def03ef359 SHA-256: f9e91eab51441fe0454713720f754af6e61f9fca6f18fda3612d9dd5c866b3e7 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a1609b-5612-73da-8813-346c4d734ecb.png Captured: 2026-10-21 22:36:05 UTC Source report: https://urlscan.io/result/01a1609b-5612-73da-8813-346c4d734ecb/ SHA-256: 7dd7c3a16ef2cb3ea451410bc0aee44dde1933e88f94d9db1695fbdb79db07a4 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16340-4365-759a-8665-bca5ec13275e.png Captured: 2026-10-22 10:55:29 UTC Source report: https://urlscan.io/result/01a16340-4365-759a-8665-bca5ec13275e/ SHA-256: 25c391dab66292a55efb4ba59a60c71730ab78c3676986cf97bf5d399ab0dd04 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1649d-3a44-71a9-969a-7188caf576ce.png Captured: 2026-10-22 17:17:25 UTC Source report: https://urlscan.io/result/01a1649d-3a44-71a9-969a-7188caf576ce/ SHA-256: 84d7243075aaf4ccd820e99753e6800b71aee9a65dacae690405c1b3cedcdfe0 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T17:23:08Z", "uuid": "01a16498-0c32-77cd-95ab-735626db814b", "scanned_at": "2026-10-22T17:11:00Z", "final_url": "https://cryptotradingdesk-dapp.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://cryptotradingdesk-dapp.com/", "from": "http://cryptotradingdesk-dapp.com/", "status": 307 } ], "ip": "206.119.72.93", "domains": [ "webapi.robinboohpro.org", "plugin-code.salesmartly.com", "assets.kraken.com", "msg.salesmartly.com", "heco.oss-cn-hongkong.aliyuncs.com", "srz.salesmartly.com", "assets-cdn.salesmartly.com", "widget.salesmartly.com", "client.salesmartly.com", "api.salesmartly.com", "mix-ads.oss-accelerate.aliyuncs.com", "static.cloudflareinsights.com" ], "ips": [ "47.79.64.186", "104.17.187.205", "2606:4700::6812:17f2", "47.254.187.140", "2600:9000:208a:6000:1a:c771:1f40:93a1", "104.18.23.242", "188.114.97.3", "2600:9000:2490:0:17:cdfa:4740:93a1", "2606:4700::6810:4f49", "2600:9000:266e:5000:1b:20a4:b040:93a1", "206.119.72.93" ], "asns": [ "45102", "13335", "16509", "8796" ], "countries": [ "HK", "US", "DE" ], "doc_hash": "05f4148f60884d9de9a65095754729390012da2d79f465f0ccc77c083b2577c0", "script_hashes": [ "bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb", "e39c1d288273f4fda7049041b762e2899a323a1be11241dfd600f52fee2c6319", "c481315663ec3fe8439699ac4f4641938abd0ded4e2909ec051d7c6659dc0401", "d2b5af4e357ece68fdd5dc01ae3ed6501984f966c2de4af1b3c0ea9dd260ee91", "e75e683fe6d8e0f0e3238d6442166f3dfbc0272eeb61f568a2b920668e93e076", "7f960ba98847f38d4ac9490a4ac87a11757c62f73b9951b61297b981f6506657", "164b0b670b72d260372aac6968651cd6b2caee948e5a9d2e8fdcf4c5d3307155", "4f7f071f372db6267b72ed168c066b8a99fb45195e37a1f8b6b7393cc78e5b51", "7d41e24636c0aa160a65f4edbef83e037fae63ddfc38d006e9649c732cd6e14e", "fae88a24a1fdc090e23ac57517524f7574159476bf3dda71af0439ed624b3015" ], "globals": [ "TradingView", "addLink", "addMeta", "__ssc", "ssq", "lib", "rem", "dpr", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "__INTLIFY_PROD_DEVTOOLS__", "__INTLIFY_JIT_COMPILATION__", "__INTLIFY_DROP_MESSAGE_COMPILER__", "__VUE_I18N_FULL_INSTALL__", "__VUE_I18N_LEGACY_API__", "PubSub", "__config", "__theme", "__VUE__", "__i18nInstance", "__vite_is_modern_browser", "__cfBeacon", "__read", "__spreadArray", "__SS_CHAT_RUNTIME__", "__SS_CHAT_SCRIPT_MODE__", "SHOPINFO", "ASSETS_HOSTNAME_VARIABLE", "ASSETS_CDN_HOSTNAME_VARIABLE", "STATIC_HOSTNAME_VARIABLE", "__SS_CHAT_SHADOWROOT__", "ssmEvent", "saveAs", "marked", "__SS_MARKED_CONFIGURED__", "hostname", "hostParts", "mainDomain", "webApiHost" ], "cookies": [ "ss_uid", "_ss_s_uid", "__cf_bm" ], "storage_keys": [ "helixua_THEME", "helixua_LANGUAGE", "main", "salesmartly_p_g1dlaxh_session_tab_key", "salesmartly_p_g1dlaxh_u_i", "salesmartly_p_g1dlaxh_custom_fields_local_map", "salesmartly_p_g1dlaxh_p_xma_", "salesmartly_p_g1dlaxh_g_uid", "salesmartly_p_g1dlaxh_token_date", "salesmartly_p_g1dlaxh_token", "ss_p_c_l_v_pro", "home_activity_banner_cache", "salesmartly_p_g1dlaxh_n_u" ], "tls": { "san": [ "cryptoifcm-dapp.com", "cryptointl-dapp.com", "cryptotradingdesk-dapp.com", "ifcmctp-dapp.com", "secondcontract-dapp.com", "www.cryptoifcm-dapp.com", "www.cryptointl-dapp.com", "www.cryptotradingdesk-dapp.com", "www.ifcmctp-dapp.com", "www.secondcontract-dapp.com" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "www.ifcmctp-dapp.com", "protocol": "TLS 1.3", "valid_to": "2027-01-15T08:54:46Z", "valid_from": "2026-10-17T08:54:47Z" }, "domain_age_days": 5, "apex_age_days": 5, "tls_age_days": 5, "tls_valid_days": 89, "requests": 90, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000\nmax-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T17:10:28Z", "uuid": "9ec81305-72f5-4758-b23b-796c7b48b8d0", "scanned_at": "2026-10-22T17:09:40Z", "final_url": "https://cryptotradingdesk-dapp.com/", "status": 200, "history": [ { "url": "https://cryptotradingdesk-dapp.com/", "status": 200 } ], "dom_hash": "db4c92a08bcd7a52e6c41e45300f1eb315b01c10396e68198ea8fde50d85ad99", "doc_hash": "05f4148f60884d9de9a65095754729390012da2d79f465f0ccc77c083b2577c0", "domain_risks": [ "New Domains", "Security Risks", "Newly Seen Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "cryptotradingdesk-dapp.com", "type": "A", "value": "206.119.72.93" } ], "dnssec_valid": false, "ip": "206.119.72.93", "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-10-17T02:42:40Z", "updated": "2026-10-17T06:33:33Z", "expires": "2027-10-17T02:42:40Z", "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T17:09:22Z", "analysis_at": "2026-10-19T15:51:27Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 0, "suspicious": 3, "undetected": 36 }, "detections": { "Fortinet": "spam", "Gridinsoft": "suspicious", "alphaMountain.ai": "spam" }, "reputation": 0, "categories": { "alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)" }, "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-10-17T02:42:40Z", "expires": "2027-10-17T02:42:40Z", "updated": "2026-10-17T06:33:33Z", "first_seen": "2026-10-17T09:57:56Z", "dns": [ { "ttl": 1, "type": "A", "value": "206.119.72.93" }, { "ttl": 600, "type": "SOA", "rname": "master.jmdns.com", "value": "ns1.julydns.com" }, { "ttl": 21600, "type": "NS", "value": "ns2.julydns.com" }, { "ttl": 21600, "type": "NS", "value": "ns1.julydns.com" } ], "dns_at": "2026-10-19T16:40:54Z", "jarm": "3fd3fd0003fd3fd00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "cryptoifcm-dapp.com", "cryptointl-dapp.com", "cryptotradingdesk-dapp.com", "ifcmctp-dapp.com", "secondcontract-dapp.com", "www.cryptoifcm-dapp.com", "www.cryptointl-dapp.com", "www.cryptotradingdesk-dapp.com", "www.ifcmctp-dapp.com", "www.secondcontract-dapp.com" ], "issuer": "Let's Encrypt / YR1", "serial": "504aee27dd63de1af3fe2b9d6d318f7a833", "sha256": "657a790fc828926679be422ff87284a4cec9149e336c404dacfd0f9a434a41d9", "subject": "www.ifcmctp-dapp.com", "valid_to": "2027-01-15T08:54:46Z", "valid_from": "2026-10-17T08:54:47Z" }, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "registrar_iana_id": "49", "registrar_url": "https://internet.gmo/", "created": "2026-10-17T02:42:40Z", "updated": "2026-10-17T06:33:33Z", "expires": "2027-10-17T02:42:40Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-10-16T15:00:00Z", "last changed": "2026-10-17T09:48:05Z", "registration": "2026-10-16T17:42:40Z", "registrar expiration": "2027-10-16T15:00:00Z", "last update of RDAP database": "2026-10-17T09:57:46Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T17:10:51Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "cryptotradingdesk-dapp.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "agents": [ "*", "Amazonbot", "Applebot-Extended", "Bytespider", "CCBot" ], "present": true }, "social_tags": { "title": "Turtrobln", "robots": "all", "ogImage": "/platform/144.png?2.0.1785058790954", "ogTitle": "Turtrobln", "keywords": "KEYWORDS", "themeColor": "#ffffff" }, "mixed_content": { "no_sri": [ "https://plugin-code.salesmartly.com/js/project_573938_593039_1765983042.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 185, "tls": 157, "wait": 189, "connect": 154, "download": 0 }, "response_ms": 685 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 5909, "co2_grams": 0.0002, "cleaner_than": 83 }, "dns_server": { "ns": [ { "ip": "162.159.27.251", "host": "ns2.julydns.com" }, { "ip": "162.159.48.223", "host": "ns1.julydns.com" } ], "zone": "cryptotradingdesk-dapp.com" }, "location": { "ip": "206.119.72.93", "asn": "8796", "org": "FASTNET DATA INC", "city": "Los Angeles", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "www.ifcmctp-dapp.com" }, "dns": { "A": [ "206.119.72.93" ], "NS": [ "ns1.julydns.com", "ns2.julydns.com" ], "SOA": "{\"nsname\": \"ns1.julydns.com\", \"hostmaster\": \"master.jmdns.com\", \"serial\": 1792230688, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000, max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000, max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "206.119.72.93", "family": 4 }, "redirects": { "chain": [ "https://cryptotradingdesk-dapp.com" ] }, "subdomains": { "count": 1, "subdomains": [ "www.cryptotradingdesk-dapp.com" ] }, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-10-17T02:42:40Z", "updated": "2026-10-17T06:33:33Z", "expires": "2027-10-17T02:42:40Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000, max-age=31536000" } } } } ```