# PhishDestroy domain threat record: diamonte.net Content language: English Canonical HTML report: https://phishdestroy.io/domain/diamonte.net/ Machine-readable companion: https://phishdestroy.io/domain/diamonte.net/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 08:30:59 UTC - Last availability or vendor check: 2026-10-25 08:30:59 UTC - Stored record updated: 2026-10-25 09:26:32 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-24 06:00:15 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1722e-4b0a-77ef-a932-9199d3284e74/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/diamonte.net - Certificate Transparency search: https://crt.sh/?q=%25.diamonte.net - Web Archive lookup: https://web.archive.org/web/*/https://diamonte.net/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added diamonte.net to its internal blocklist because VirusTotal reported 14 malicious and 2 suspicious detections from 92 scanning engines. A recorded page title read “Diamonte: Intelligent Enterprise Trading Platform”. The domain was first seen by PhishDestroy on 2026-10-25 and returned an HTTP 200 response on that date. Google Safe Browsing reported no threat and no external blocklists listed the domain as of the same day. How the scam works The detections suggest a phishing risk, meaning the site could be used to trick visitors into disclosing credentials or personal data, but no specific phishing page or credential‑harvesting form was observed. In general, such pages mimic legitimate services—in this case a trading platform—to lure users into providing sensitive information. Evidence VirusTotal analysis on 2026-10-18 (retrieved 2026-10-25) recorded 14 malicious and 2 suspicious vendor classifications, with vendors such as BitDefender, Fortinet and Kaspersky labeling the domain as phishing. Google Safe Browsing checked on 2026-10-25 reported the domain as not flagged. URLScan performed two captures: one on 2026-08-06 returned a clean verdict, while a later scan on 2026-10-25 flagged the URL as malicious with an ML score of 85. OTX listed five pulses referencing the domain as of 2026-10-25. PhishDestroy’s internal blocklist marks the domain as malicious, while external blocklist checks showed zero hits. Infrastructure The domain was registered on 2026-07-24 through Dynadot Inc and resolved to IP address 158.94.210.119, belonging to ASN 202412 (Omegatech LTD) in Amsterdam, NL. TLS was provided by a Let’s Encrypt certificate valid from 2026-09-12 to 2026-12-11, and DNS records included an A record, NS records (ns1.dyna-ns.net, ns2.dyna-ns.net) and an SOA record; DNSSEC was not enabled. Open ports observed were 22 (SSH) and 80 (HTTP). What to do Visitors should avoid entering any credentials or personal data on the site and, if they have already done so, change affected passwords and monitor accounts for suspicious activity. Organizations should add diamonte.net to their threat‑intel feeds and web‑filter policies. Security teams reviewing logs should look for HTTP requests to the domain and verify TLS certificates against trusted authorities. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1722e-4b0a-77ef-a932-9199d3284e74/ Cloudflare Radar report: https://radar.cloudflare.com/scan/3826acc4-fd99-4d3a-a417-d3589f252a39 URLQuery report: https://urlquery.net/report/4dfcca73-e386-4125-81ae-abae290dc22b Stored capture screenshot: https://i.ibb.co/0jfhXtdJ/a10dce62e4c8.png Cloudflare Radar screenshot (2026-10-25T09:15:23Z): https://screenshots.phishdestroy.io/cf/3826acc4-fd99-4d3a-a417-d3589f252a39.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/4dfcca73-e386-4125-81ae-abae290dc22b.png URLScan screenshot (2026-08-06T16:30:16Z): https://screenshots.phishdestroy.io/us/019fd7e9-2901-73c6-bec5-a792a4ee314a.png URLScan capture report: https://urlscan.io/result/019fd7e9-2901-73c6-bec5-a792a4ee314a/ URLScan screenshot (2026-08-07T06:36:44Z): https://screenshots.phishdestroy.io/us/019fdaf0-2236-7455-82a1-b545ac3acf2a.png URLScan capture report: https://urlscan.io/result/019fdaf0-2236-7455-82a1-b545ac3acf2a/ URLScan screenshot (2026-10-25T08:36:14Z): https://screenshots.phishdestroy.io/us/01a17233-eb87-7179-bfeb-f1a6c3745616.png URLScan capture report: https://urlscan.io/result/01a17233-eb87-7179-bfeb-f1a6c3745616/ VirusTotal report: https://www.virustotal.com/gui/domain/diamonte.net Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=diamonte.net Archived copy: https://web.archive.org/web/20261025082413/https://diamonte.net/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 09:21:42 UTC ## Stored page captures - Primary capture: https://i.ibb.co/0jfhXtdJ/a10dce62e4c8.png Captured: 2026-10-25 08:30:59 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1722e-4b0a-77ef-a932-9199d3284e74.png Captured: 2026-10-25 08:30:59 UTC Source report: https://urlscan.io/result/01a1722e-4b0a-77ef-a932-9199d3284e74/ - URLScan capture 2: https://urlscan.io/screenshots/019fd7e9-2901-73c6-bec5-a792a4ee314a.png Captured: 2026-10-25 08:23:12 UTC Source report: https://urlscan.io/result/01a1722e-4b0a-77ef-a932-9199d3284e74/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3826acc4-fd99-4d3a-a417-d3589f252a39.png Captured: 2026-10-25 09:15:23 UTC Source report: https://radar.cloudflare.com/scan/3826acc4-fd99-4d3a-a417-d3589f252a39 SHA-256: 2232ba23ac4c61155a3f88088e42b100ee86720aac581a73d6d91a500905a8ac - URLQuery: https://screenshots.phishdestroy.io/uq/4dfcca73-e386-4125-81ae-abae290dc22b.png Source report: https://urlquery.net/report/4dfcca73-e386-4125-81ae-abae290dc22b SHA-256: d4172601c5e3ac8ef5045099615be08ade236e8a4d9eecd7bd1d67407e76078b - URLScan · 2026-08-06: https://screenshots.phishdestroy.io/us/019fd7e9-2901-73c6-bec5-a792a4ee314a.png Captured: 2026-08-06 16:30:16 UTC Source report: https://urlscan.io/result/019fd7e9-2901-73c6-bec5-a792a4ee314a/ SHA-256: 480912d1123141d8a77b63be5af742e87e189ac2bbcba601639ce550daa8dac2 - URLScan · 2026-08-07: https://screenshots.phishdestroy.io/us/019fdaf0-2236-7455-82a1-b545ac3acf2a.png Captured: 2026-08-07 06:36:44 UTC Source report: https://urlscan.io/result/019fdaf0-2236-7455-82a1-b545ac3acf2a/ SHA-256: a167092d51e78e23cd383e8d66a4215bbf3bb2c1883876cfcbed1cab8af54ff7 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17233-eb87-7179-bfeb-f1a6c3745616.png Captured: 2026-10-25 08:36:14 UTC Source report: https://urlscan.io/result/01a17233-eb87-7179-bfeb-f1a6c3745616/ SHA-256: 633e32e21bf8708aed81f1124cd0d26a9553651c892586706acf277d7097f67e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T09:16:36Z", "uuid": "01a1722e-4b0a-77ef-a932-9199d3284e74", "scanned_at": "2026-10-25T08:30:05Z", "final_url": "https://diamonte.net/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://diamonte.net/", "from": "http://diamonte.net/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "9e9ab493e93bfc8e6e369f6a4f1610c91725183457a90db5870625c785427171", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput", "navToggle", "mobileNav", "langSwitcher", "langBtn" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "*.diamonte.net", "diamonte.net" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "diamonte.net", "protocol": "TLS 1.3", "valid_to": "2026-12-11T17:00:34Z", "valid_from": "2026-09-12T17:00:35Z" }, "domain_age_days": 3090, "apex_age_days": 3090, "tls_age_days": 42, "tls_valid_days": 89, "requests": 5, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 85, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T09:18:30Z", "uuid": "3826acc4-fd99-4d3a-a417-d3589f252a39", "scanned_at": "2026-10-25T09:15:23Z", "final_url": "https://diamonte.net/", "status": 200, "history": [ { "url": "https://diamonte.net/", "status": 200 } ], "dom_hash": "fb824ac04f72dcf5bd7f17b776e62afdd987e046a7aab67cef4a22d8d1d1941e", "doc_hash": "03b04ca07b5dcf06cd4e53250d73992d40aef9600055a27778e2959fe8faa1a5", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "Scam", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "diamonte.net", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-24T08:00:15Z", "updated": "2026-08-13T12:28:26Z", "expires": "2027-07-24T08:00:15Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T09:13:54Z", "analysis_at": "2026-10-18T13:42:03Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 2, "undetected": 33 }, "detections": { "CRDF": "malicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "Dynadot Inc", "created": "2026-07-24T08:00:15Z", "expires": "2027-07-24T08:00:15Z", "updated": "2026-08-13T12:28:26Z", "first_seen": "2026-07-24T08:17:30Z", "dns": [ { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.diamonte.net", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" } ], "dns_at": "2026-10-18T13:47:26Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "*.diamonte.net", "diamonte.net" ], "issuer": "Let's Encrypt / YE2", "serial": "5dc8628da6a75edfd57fb72f33c77376adb", "sha256": "7356d9545178de4c2d71895d6bfeda3c30ac41bc21628bbfb0f728a17c519c00", "subject": "diamonte.net", "valid_to": "2026-12-11T17:00:34Z", "valid_from": "2026-09-12T17:00:35Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-07-24T08:00:15Z", "updated": "2026-08-13T12:28:26Z", "expires": "2027-07-24T08:00:15Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-07-24T08:00:15Z", "last changed": "2026-09-12T17:59:14Z", "registration": "2026-07-24T08:00:15Z", "registrar expiration": "2027-07-24T08:00:15Z", "last update of RDAP database": "2026-10-15T08:10:57Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T09:21:13Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "diamonte.net" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T08:24:13Z", "first": "2013-05-04T09:53:03Z", "changes": 27, "days_archived": 36, "scans_per_day": 0.01, "avg_page_bytes": 12788 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://diamonte.net/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Diamonte: Intelligent Enterprise Trading Platform", "robots": "index, follow", "description": "Unify global markets with unmatched precision. Diamonte delivers an AI-powered trading platform with institutional-grade governance across 180+ markets.", "canonicalUrl": "https://diamonte.net/" }, "trackers": { "requests": 20, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 1530, "tls": 86, "wait": 96, "connect": 73, "download": 219 }, "response_ms": 2004 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80 ] }, "carbon": { "bytes": 105424, "co2_grams": 0.0039, "cleaner_than": 21 }, "dns_server": { "ns": [ { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.27.158", "host": "ns1.dyna-ns.net" } ], "zone": "diamonte.net" }, "cookies": { "cookies": [ { "name": "cf-c", "http_only": true, "same_site": "Lax" }, { "name": "__cf_clicked" }, { "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "diamonte.net" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns2.dyna-ns.net", "ns1.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.diamonte.net\", \"serial\": 2026091202, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://diamonte.net" ] }, "subdomains": { "count": 1, "subdomains": [ "www.diamonte.net" ] }, "linked_pages": { "internal_count": 26 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-24T08:00:15Z", "updated": "2026-08-13T12:28:26Z", "expires": "2027-07-24T08:00:15Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```