# PhishDestroy domain threat record: dzplatform.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dzplatform.com/
Machine-readable companion: https://phishdestroy.io/domain/dzplatform.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 14:22:22 UTC
- Last availability or vendor check: 2026-10-25 14:25:15 UTC
- Stored record updated: 2026-10-25 20:49:50 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 172.67.188.118
- Registrar in stored WHOIS data: MAT BAO CORPORATION
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-07 01:40:35 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17371-b347-72f0-b3bd-d7073c3bcb75/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dzplatform.com
- Certificate Transparency search: https://crt.sh/?q=%25.dzplatform.com
- Web Archive lookup: https://web.archive.org/web/*/https://dzplatform.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed dzplatform.com as a suspicious domain based on automated analysis. The recorded page title reads “DzPlatform | AI Trading Platform | Official Core Gateway.” The domain was first seen by PhishDestroy on 2026-10-25, 48 days after registration on 2026-09-07. An intake check on the same day returned a clean urlscan verdict and no external blocklist hits.

How the scam works
A domain flagged as suspicious typically attempts to trick users into revealing credentials, installing malware, or redirecting traffic to malicious services. The detections point to possible phishing or malware delivery, but no specific malicious payload or credential‑harvesting form was observed on the captured page. Consequently, the listing reflects risk indicators rather than confirmed fraudulent activity.

Evidence
VirusTotal (analysis on 2026-10-18) reported 15 detections from 92 engines, with 12 labeled malicious, 3 suspicious, and vendors assigning phishing, malware, or malicious tags. Google Safe Browsing (checked 2026-10-25) reported no threat. urlscan.io (captured 2026-09-18) flagged the URL as malicious with a 92‑point engine score, though its overall verdict was benign. Cloudflare Radar (checked 2026-10-25) marked the site malicious under the malware category. OTX listed one pulse on 2026-10-25. No external blocklists reported the domain, while PhishDestroy’s internal list includes it.

Infrastructure
The domain was registered with MAT BAO CORPORATION on 2026-09-07 and expires 2027-09-07. The recorded DNS entries listed Cloudflare IPs 172.67.188.118 and 104.21.8.133 (and corresponding IPv6 addresses). TLS was provided by Google Trust Services, valid from 2026-09-07 to 2026-12-06, and the connection used TLS 1.3 with forward secrecy. The recorded location of the CDN edge was Toronto, Canada.

What to do
Visitors should avoid entering any credentials or downloading files from dzplatform.com and, if they have already submitted personal data, change those passwords on the affected service. No wallet‑related remediation is needed because wallet recommendations are disabled. Defenders should block the domain at the DNS or proxy level, monitor for connections to the listed Cloudflare IPs, and review logs for any access attempts on the dates noted.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0b3ef-7b29-741a-bf08-c1c5d8e2e762/
Cloudflare Radar report: https://radar.cloudflare.com/scan/1bde50f3-a272-4772-b278-897742fb53c5
Stored capture screenshot: https://urlscan.io/screenshots/01a0b3ef-7b29-741a-bf08-c1c5d8e2e762.png
Cloudflare Radar screenshot (2026-10-25T14:23:31Z): https://screenshots.phishdestroy.io/cf/1bde50f3-a272-4772-b278-897742fb53c5.png
URLScan screenshot (2026-09-17T17:01:48Z): https://screenshots.phishdestroy.io/us/01a0b051-1a7b-704a-962a-6d75e992697d.png
URLScan capture report: https://urlscan.io/result/01a0b051-1a7b-704a-962a-6d75e992697d/
URLScan screenshot (2026-10-25T14:23:31Z): https://screenshots.phishdestroy.io/us/01a17371-b347-72f0-b3bd-d7073c3bcb75.png
URLScan capture report: https://urlscan.io/result/01a17371-b347-72f0-b3bd-d7073c3bcb75/
VirusTotal report: https://www.virustotal.com/gui/domain/dzplatform.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dzplatform.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 14:24:36 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17371-b347-72f0-b3bd-d7073c3bcb75.png
  Captured: 2026-10-25 14:25:15 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0b3ef-7b29-741a-bf08-c1c5d8e2e762.png
  Captured: 2026-10-25 14:22:22 UTC
  Source report: https://urlscan.io/result/01a17371-b347-72f0-b3bd-d7073c3bcb75/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1bde50f3-a272-4772-b278-897742fb53c5.png
  Captured: 2026-10-25 14:23:31 UTC
  Source report: https://radar.cloudflare.com/scan/1bde50f3-a272-4772-b278-897742fb53c5
  SHA-256: bc73ca6eb69edbed07d125245315d727b789fe6f92954c3a6876ffb9bea7f631
- URLQuery: https://screenshots.phishdestroy.io/uq/16e84df0-540a-4f60-85c1-a7f760f56b5f.png
  Source report: https://urlquery.net/report/16e84df0-540a-4f60-85c1-a7f760f56b5f
  SHA-256: 781daace4219facd12231021ca74ba42ab8afe12d44da314a7f097e22e38e2e6
- URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0b051-1a7b-704a-962a-6d75e992697d.png
  Captured: 2026-09-17 17:01:48 UTC
  Source report: https://urlscan.io/result/01a0b051-1a7b-704a-962a-6d75e992697d/
  SHA-256: 5f9074f5cc513ea691e94f8a90556d63bed9495f2acb54083f38180b919966e5
- URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b3ef-7b29-741a-bf08-c1c5d8e2e762.png
  Captured: 2026-09-18 09:53:41 UTC
  Source report: https://urlscan.io/result/01a0b3ef-7b29-741a-bf08-c1c5d8e2e762/
  SHA-256: 1ecfc35831c2fc6d95ddf413551d76912c8dce436371fd4af8acc2da1eb4739a
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17377-17d5-729f-a313-eef878030c2d.png
  Captured: 2026-10-25 14:29:20 UTC
  Source report: https://urlscan.io/result/01a17377-17d5-729f-a313-eef878030c2d/
  SHA-256: a0b572447febdc558b0457728ae447e275f022541e9f682adea9c468ca360584
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17378-1366-710f-a03d-2d67e4caf33c.png
  Captured: 2026-10-25 14:30:27 UTC
  Source report: https://urlscan.io/result/01a17378-1366-710f-a03d-2d67e4caf33c/
  SHA-256: 08f8b0566c2dd6104bb2f75fea424d91eae214b4c39a9629b073e56d785b137f

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T15:11:17Z",
        "uuid": "01a17371-b347-72f0-b3bd-d7073c3bcb75",
        "scanned_at": "2026-10-25T14:23:31Z",
        "final_url": "https://dzplatform.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dzplatform.com/",
                "from": "http://dzplatform.com/",
                "status": 307
            }
        ],
        "ip": "172.67.188.118",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "104.18.95.41",
            "2606:4700::6811:cf05",
            "2a00:1450:4001:c17::5f",
            "104.17.25.14",
            "172.67.188.118"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "b355e03d7e0ab3c2c67e9d2cb28b3fb6992b01c2af1d7f2ef019ccf747b32ab1",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_kk1v7",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "dzplatform.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "dzplatform.com",
            "protocol": "QUIC",
            "valid_to": "2026-12-06T07:24:10Z",
            "valid_from": "2026-09-07T06:24:14Z"
        },
        "domain_age_days": 1348,
        "apex_age_days": 1348,
        "tls_age_days": 48,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 92,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "default-src 'self'; img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudfl",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T14:24:14Z",
        "uuid": "1bde50f3-a272-4772-b278-897742fb53c5",
        "scanned_at": "2026-10-25T14:23:31Z",
        "final_url": "https://dzplatform.com/",
        "status": 200,
        "history": [
            {
                "url": "https://dzplatform.com/",
                "status": 200
            }
        ],
        "dom_hash": "be80966929e40009dcbfa7aaee431a253e1a662811c76e29db506e5cd43d1544",
        "doc_hash": "ed1b85bc5fec24a46adac19631154b2ca223452cadf421088bff41979a6aa9b1",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "dzplatform.com",
                "type": "A",
                "value": "104.21.8.133"
            },
            {
                "name": "dzplatform.com",
                "type": "A",
                "value": "172.67.188.118"
            },
            {
                "name": "dzplatform.com",
                "type": "AAAA",
                "value": "2606:4700:3035::6815:885"
            },
            {
                "name": "dzplatform.com",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:bc76"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.8.133",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-09-07T03:40:35Z",
            "updated": "2026-09-07T07:12:18Z",
            "expires": "2027-09-07T03:40:35Z",
            "nameservers": [
                "clyde.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T14:23:08Z",
        "analysis_at": "2026-10-18T03:39:06Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 12,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "malware",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "MAT BAO CORPORATION",
        "created": "2026-09-07T03:40:35Z",
        "expires": "2027-09-07T03:40:35Z",
        "updated": "2026-09-07T07:12:18Z",
        "first_seen": "2026-03-28T03:41:21Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::6815:885"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "savanna.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.8.133"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:bc76"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "clyde.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "clyde.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.188.118"
            }
        ],
        "dns_at": "2026-10-18T03:44:36Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "dzplatform.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "b79abc2d6faac3c813490ca3173e19b",
            "sha256": "8c26a1f80480ad93b315dc5cec84b1d1d422185ec8881f1ac8f9d78eb6e8a463",
            "subject": "dzplatform.com",
            "valid_to": "2026-12-06T07:24:10Z",
            "valid_from": "2026-09-07T06:24:14Z"
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "registrar_iana_id": "1586",
            "registrar_url": "http://www.matbao.net",
            "created": "2026-09-07T03:40:35Z",
            "updated": "2026-09-07T07:12:18Z",
            "expires": "2027-09-07T03:40:35Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "clyde.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-09-07T07:12:20Z",
                "registration": "2026-09-07T03:40:35Z",
                "registrar expiration": "2027-09-07T03:40:35Z",
                "last update of RDAP database": "2026-10-17T13:38:29Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T14:23:56Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dzplatform.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T14:23:13Z",
            "first": "2009-12-19T19:08:58Z",
            "changes": 2,
            "days_archived": 4,
            "scans_per_day": 0,
            "avg_page_bytes": 11907
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://dzplatform.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://dzplatform.com/",
            "title": "DzPlatform | AI Trading Platform | Official Core Gateway",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "DzPlatform | AI-Driven Trading Assistance",
            "ogSiteName": "DzPlatform",
            "themeColor": "#180026",
            "description": "DzPlatform delivers AI-driven trading guidance, autonomous strategies, portfolio controls, and transparent market workflows for today's investors.",
            "twitterCard": "summary",
            "canonicalUrl": "https://dzplatform.com/",
            "ogDescription": "DzPlatform delivers AI-driven trading guidance, autonomous strategies, portfolio controls, and transparent market workflows for today's investors."
        },
        "trackers": {
            "requests": 16,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 393,
                "tls": 50,
                "wait": 118,
                "connect": 13,
                "download": 15
            },
            "response_ms": 589
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 136395,
            "co2_grams": 0.005,
            "cleaner_than": 15
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.136",
                    "host": "savanna.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.33.91",
                    "host": "clyde.ns.cloudflare.com"
                }
            ],
            "zone": "dzplatform.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3031::ac43:bc76",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "dzplatform.com"
        },
        "dns": {
            "A": [
                "172.67.188.118",
                "104.21.8.133"
            ],
            "NS": [
                "savanna.ns.cloudflare.com",
                "clyde.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"clyde.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086559, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3035::6815:885",
                "2606:4700:3031::ac43:bc76"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "default-src 'self'; img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; sty",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3031::ac43:bc76",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://dzplatform.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.dzplatform.com"
            ]
        },
        "linked_pages": {
            "internal_count": 39
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-09-07T03:40:35Z",
            "updated": "2026-09-07T07:12:18Z",
            "expires": "2027-09-07T03:40:35Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "clyde.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "default-src 'self'; img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self'",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```