# PhishDestroy domain threat record: dardocapitecto.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/dardocapitecto.com/ Machine-readable companion: https://phishdestroy.io/domain/dardocapitecto.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 16:23:54 UTC - Last availability or vendor check: 2026-10-25 16:23:54 UTC - Stored record updated: 2026-10-25 20:49:50 UTC - VirusTotal detections in the stored snapshot: 19/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: flagged ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-06-04 05:29:19 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a173df-181b-7748-9f18-32a39540749c/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/dardocapitecto.com - Certificate Transparency search: https://crt.sh/?q=%25.dardocapitecto.com - Web Archive lookup: https://web.archive.org/web/*/https://dardocapitecto.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed dardocapitecto.com as a suspicious domain based on a social‑engineering flag from Google Safe Browsing. The recorded page title was “Dardo Capitecto: Plataforma de Trading Algorítmico Inteligente”. The domain was first observed by PhishDestroy on 2026-10-25 and returned an HTTP 200 response at that time. How the scam works Social‑engineering pages that pose as intelligent algorithmic trading platforms aim to lure visitors into entering credentials, personal data, or to follow malicious links. While no specific credential‑capture form was observed on this page, the risk class matches typical fraudulent trading‑site schemes. Evidence Google Safe Browsing flagged the domain for social engineering on 2026-10-25. VirusTotal’s scan on 2026-10-22 reported 19 detections from 92 engines, with vendors such as BitDefender, ESET and Forcepoint ThreatSeeker labeling it as phishing or malicious. URLScan’s analysis on 2026-10-25 gave a malicious engine score of 91, though its overall verdict was non‑malicious. Cloudflare Radar on 2026-10-25 marked the site as malicious under the malware category. PhishDestroy’s internal blocklist contains the domain, while external blocklists checked on 2026-10-25 returned no entries. Infrastructure The domain was registered with Dynadot Inc on 2026-06-04, giving it an age of 143 days at the time of first sighting. The recorded IP address was 158.94.210.119, which was associated with Omegatech LTD in the Netherlands. The site used a Let’s Encrypt TLS certificate valid from 2026-08-31 to 2026-11-29 and was observed to have ports 22, 80 and 443 open. What to do Visitors should not enter any credentials or personal information on the site and should change passwords on any accounts where the same credentials may have been reused. Organizations should block dardocapitecto.com at the network perimeter, review access logs for connections to the recorded IP, and follow standard phishing‑incident response procedures. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a173df-181b-7748-9f18-32a39540749c/ Cloudflare Radar report: https://radar.cloudflare.com/scan/eadfede7-3198-4675-b4b4-2218eb0016b3 URLQuery report: https://urlquery.net/report/355b8938-3ee6-42d0-809c-9a61fd9039ad Stored capture screenshot: https://i.ibb.co/d0RBQHDm/74e6591e1aa4.png Cloudflare Radar screenshot (2026-10-25T16:56:03Z): https://screenshots.phishdestroy.io/cf/eadfede7-3198-4675-b4b4-2218eb0016b3.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/355b8938-3ee6-42d0-809c-9a61fd9039ad.png URLScan screenshot (2026-09-14T12:30:23Z): https://screenshots.phishdestroy.io/us/01a09fe5-8ce6-7719-8043-971fc2c9f20d.png URLScan capture report: https://urlscan.io/result/01a09fe5-8ce6-7719-8043-971fc2c9f20d/ URLScan screenshot (2026-09-15T10:13:12Z): https://screenshots.phishdestroy.io/us/01a0a48e-52cf-7579-b16b-672c64c0fc52.png URLScan capture report: https://urlscan.io/result/01a0a48e-52cf-7579-b16b-672c64c0fc52/ URLScan screenshot (2026-10-25T16:22:24Z): https://screenshots.phishdestroy.io/us/01a173de-b565-760b-830c-88021a6c36ed.png URLScan capture report: https://urlscan.io/result/01a173de-b565-760b-830c-88021a6c36ed/ VirusTotal report: https://www.virustotal.com/gui/domain/dardocapitecto.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dardocapitecto.com Archived copy: https://web.archive.org/web/20261025162538/https://dardocapitecto.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 18:01:18 UTC ## Stored page captures - Primary capture: https://i.ibb.co/d0RBQHDm/74e6591e1aa4.png Captured: 2026-10-25 16:23:54 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a173df-181b-7748-9f18-32a39540749c.png Captured: 2026-10-25 16:23:54 UTC Source report: https://urlscan.io/result/01a173df-181b-7748-9f18-32a39540749c/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/eadfede7-3198-4675-b4b4-2218eb0016b3.png Captured: 2026-10-25 16:56:03 UTC Source report: https://radar.cloudflare.com/scan/eadfede7-3198-4675-b4b4-2218eb0016b3 SHA-256: 579e556cbf6faebf10f2eff4f5a068b41e7642ac347049d49d6e0c9476f7a7a5 - URLQuery: https://screenshots.phishdestroy.io/uq/355b8938-3ee6-42d0-809c-9a61fd9039ad.png Source report: https://urlquery.net/report/355b8938-3ee6-42d0-809c-9a61fd9039ad SHA-256: 5457c396c85a8a04a7c0c3d8db9006cee11272b633e6d344f75b30173bc58e6d - URLScan · 2026-09-14: https://screenshots.phishdestroy.io/us/01a09fe5-8ce6-7719-8043-971fc2c9f20d.png Captured: 2026-09-14 12:30:23 UTC Source report: https://urlscan.io/result/01a09fe5-8ce6-7719-8043-971fc2c9f20d/ SHA-256: 530640764c588a5a7837935daf9e36e53d643c75b05535b35ad469ad5fa58303 - URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a48e-52cf-7579-b16b-672c64c0fc52.png Captured: 2026-09-15 10:13:12 UTC Source report: https://urlscan.io/result/01a0a48e-52cf-7579-b16b-672c64c0fc52/ SHA-256: 22bf65e300a80f66e4efef0d97d3d6dbf8b20e964279a4990163a9dc9f6fb72b - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a173de-b565-760b-830c-88021a6c36ed.png Captured: 2026-10-25 16:22:24 UTC Source report: https://urlscan.io/result/01a173de-b565-760b-830c-88021a6c36ed/ SHA-256: fffa5c1d5d2766694045ed41647eb6d9d24ab2338305808bccf17c75b331cf4c ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T16:58:36Z", "uuid": "01a173df-181b-7748-9f18-32a39540749c", "scanned_at": "2026-10-25T16:22:51Z", "final_url": "https://dardocapitecto.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://dardocapitecto.com/", "from": "http://dardocapitecto.com/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "1136e2ed9a55243eb8b1603ccce6fc372c81377afbe619b5f57b261fcff4de09", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput", "navToggle", "mainNav", "langSwitcher", "langBtn", "header" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "dardocapitecto.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "dardocapitecto.com", "protocol": "TLS 1.3", "valid_to": "2026-11-29T19:42:53Z", "valid_from": "2026-08-31T19:42:54Z" }, "domain_age_days": 143, "apex_age_days": 143, "tls_age_days": 54, "tls_valid_days": 89, "requests": 5, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 91, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T16:58:39Z", "uuid": "eadfede7-3198-4675-b4b4-2218eb0016b3", "scanned_at": "2026-10-25T16:56:03Z", "final_url": "https://dardocapitecto.com/", "status": 200, "history": [ { "url": "https://dardocapitecto.com/", "status": 200 } ], "dom_hash": "fc66119fb0cb85783b89a88efc62262a64b8aed586c662b15ec4e6a3a4eba554", "doc_hash": "6b803ff0b7922252741d39ec1eefda423d6bcea4b82ee60ca19cba25b73f137b", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "dardocapitecto.com", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-06-04T07:29:19Z", "updated": "2026-08-13T12:43:21Z", "expires": "2027-06-04T07:29:19Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T17:57:55Z", "analysis_at": "2026-10-22T21:04:55Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 14, "suspicious": 5, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "spam", "Netcraft": "malicious", "PREBYTES": "suspicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Google Safe Browsing": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "Dynadot Inc", "created": "2026-06-04T07:29:19Z", "expires": "2027-06-04T07:29:19Z", "updated": "2026-08-13T12:43:21Z", "first_seen": "2026-06-04T07:51:13Z", "dns": [ { "ttl": 300, "type": "SOA", "rname": "hostmaster.dardocapitecto.com", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-22T21:10:14Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "dardocapitecto.com" ], "issuer": "Let's Encrypt / YE1", "serial": "60f5e3ab0c9010b8a7f369ca397af3d36fb", "sha256": "b44ca7e8a151596ca2f58d0e865c6a6dd7c081e2ca4bee6ee3980a75157818e6", "subject": "dardocapitecto.com", "valid_to": "2026-11-29T19:42:53Z", "valid_from": "2026-08-31T19:42:54Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-06-04T07:29:19Z", "updated": "2026-08-13T12:43:21Z", "expires": "2027-06-04T07:29:19Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-04T07:29:19Z", "last changed": "2026-08-31T17:43:48Z", "registration": "2026-06-04T07:29:19Z", "registrar expiration": "2027-06-04T07:29:19Z", "last update of RDAP database": "2026-10-22T08:35:40Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T16:43:11Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "dardocapitecto.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T16:25:38Z", "first": "2026-10-25T16:25:38Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 23289 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://dardocapitecto.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Dardo Capitecto: Plataforma de Trading Algorítmico Inteligente", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Opera en 140+ mercados con precisión total. Dardo Capitecto impulsa el trading automatizado con inteligencia predictiva y resiliencia operativa del 98%.", "canonicalUrl": "https://dardocapitecto.com/" }, "trackers": { "requests": 45, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 691, "tls": 86, "wait": 115, "connect": 74, "download": 148 }, "response_ms": 1114 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 90932, "co2_grams": 0.0033, "cleaner_than": 24 }, "dns_server": { "ns": [ { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.27.158", "host": "ns1.dyna-ns.net" } ], "zone": "dardocapitecto.com" }, "cookies": { "cookies": [ { "name": "cf-c", "http_only": true, "same_site": "Lax" }, { "name": "__cf_clicked" }, { "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "dardocapitecto.com" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns2.dyna-ns.net", "ns1.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.dardocapitecto.com\", \"serial\": 2026083101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://dardocapitecto.com" ] }, "linked_pages": { "internal_count": 28 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-06-04T07:29:19Z", "updated": "2026-08-13T12:43:21Z", "expires": "2027-06-04T07:29:19Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```