# PhishDestroy domain threat record: ekonomia-app.pro

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/ekonomia-app.pro/
Machine-readable companion: https://phishdestroy.io/domain/ekonomia-app.pro/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 16:09:38 UTC
- Last availability or vendor check: 2026-10-26 00:19:35 UTC
- Stored record updated: 2026-10-26 00:19:35 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.57.222
- Registrar in stored WHOIS data: NameCheap, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-11 10:41:43 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a173d1-4612-73a8-a722-20a067735a6f/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/ekonomia-app.pro
- Certificate Transparency search: https://crt.sh/?q=%25.ekonomia-app.pro
- Web Archive lookup: https://web.archive.org/web/*/https://ekonomia-app.pro/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added ekonomia-app.pro to its internal blocklist on 2026-10-25, labeling it a suspicious domain. The site returned HTTP 200 on that date and displayed the title “Ekonomia | Oficjalna Strona”. Google Safe Browsing reported no flag on the same day. The intake rule cited the domain’s age of 228 days as a trusted trigger for review.

How the scam works
Multiple security engines flagged the domain as malicious or phishing, which places it in common threat categories such as malware delivery or credential harvesting. However, no concrete malicious behavior was observed on the captured page, so the exact technique cannot be confirmed. Listings of this type are treated as high‑risk because they may be used to trick users into providing data or downloading unwanted code.

Evidence
VirusTotal scanned the domain on 2026-10-20 and reported 18 detections from 92 engines, including 14 malicious and 4 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-25 and returned no flag. urlscan.io captured the page on 2026-10-25; its engine scored it malicious with a 96 % confidence score while the overall verdict was benign. Cloudflare Radar flagged the domain as malicious for malware on 2026-10-25. OTX listed five pulses referencing the domain as of 2026-10-25. PhishDestroy’s internal blocklist also contains the domain as of 2026-10-25.

Infrastructure
The domain was registered on 2026-03-11 through NameCheap, Inc., giving it an age of 228 days at the time of detection. It resolved to the IP address 185.62.57.222, which was associated with the hosting provider Snel.com B.V. in Rotterdam, Netherlands, and the site was served behind Cloudflare using a TLS 1.3 certificate issued by ZeroSSL that was valid until 2026-12-21. No DNSSEC records were observed, and ports 80 and 443 were open in the scan.

What to do
Visitors should avoid entering credentials or downloading files from the site and should change any passwords if they were entered there. Network defenders can add the exact domain to blocklists or firewall rules and monitor for any traffic to the recorded IP address. Keep security tools updated and continue to review alerts for this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a173d1-4612-73a8-a722-20a067735a6f/
Cloudflare Radar report: https://radar.cloudflare.com/scan/1ee3d69d-3f8d-4d76-8dcf-6d2bf116c3a1
URLQuery report: https://urlquery.net/report/a9c277a4-3af0-49d9-95df-c8fd91796fb6
Stored capture screenshot: https://urlscan.io/screenshots/01a173d1-4612-73a8-a722-20a067735a6f.png
Cloudflare Radar screenshot (2026-10-25T16:43:51Z): https://screenshots.phishdestroy.io/cf/1ee3d69d-3f8d-4d76-8dcf-6d2bf116c3a1.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/a9c277a4-3af0-49d9-95df-c8fd91796fb6.png
URLScan screenshot (2026-10-25T16:17:09Z): https://screenshots.phishdestroy.io/us/01a173d9-d8b4-710d-bf75-e99b286ebd60.png
URLScan capture report: https://urlscan.io/result/01a173d9-d8b4-710d-bf75-e99b286ebd60/
VirusTotal report: https://www.virustotal.com/gui/domain/ekonomia-app.pro
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ekonomia-app.pro
Archived copy: https://web.archive.org/web/20261025161030/https://ekonomia-app.pro/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 17:48:36 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a173d1-4612-73a8-a722-20a067735a6f.png
  Captured: 2026-10-25 16:09:38 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a173d1-4612-73a8-a722-20a067735a6f.png
  Captured: 2026-10-25 16:09:38 UTC
  Source report: https://urlscan.io/result/01a173d1-4612-73a8-a722-20a067735a6f/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1ee3d69d-3f8d-4d76-8dcf-6d2bf116c3a1.png
  Captured: 2026-10-25 16:43:51 UTC
  Source report: https://radar.cloudflare.com/scan/1ee3d69d-3f8d-4d76-8dcf-6d2bf116c3a1
  SHA-256: 36fa197fd4a64a470f23584c6bed8aab7381a2813dc33928a5dd6780c0949912
- URLQuery: https://screenshots.phishdestroy.io/uq/a9c277a4-3af0-49d9-95df-c8fd91796fb6.png
  Source report: https://urlquery.net/report/a9c277a4-3af0-49d9-95df-c8fd91796fb6
  SHA-256: a57c8fc524bec81a151baa88d8df5cdedfc34da4eb2d36ff49350081956d5ae8
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a173d9-d8b4-710d-bf75-e99b286ebd60.png
  Captured: 2026-10-25 16:17:09 UTC
  Source report: https://urlscan.io/result/01a173d9-d8b4-710d-bf75-e99b286ebd60/
  SHA-256: a35516e67869ee00fb6d0e9352f061f7a3dad6bbdd7797b2590dd8cddb766309

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T16:22:42Z",
        "uuid": "01a173d1-4612-73a8-a722-20a067735a6f",
        "scanned_at": "2026-10-25T16:07:48Z",
        "final_url": "https://ekonomia-app.pro/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://ekonomia-app.pro/",
                "from": "http://ekonomia-app.pro/",
                "status": 307
            }
        ],
        "ip": "185.62.57.222",
        "ptr": "s46024.hosted-by-snel.com",
        "domains": [
            "cdn.jsdelivr.net",
            "fonts.gstatic.com",
            "challenges.cloudflare.com",
            "cdnjs.cloudflare.com",
            "www.cloudflare.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "192.178.183.94",
            "104.18.95.41",
            "104.16.123.96",
            "104.17.208.5",
            "104.17.25.14",
            "142.251.14.95",
            "185.62.57.222"
        ],
        "asns": [
            "15169",
            "13335",
            "62370"
        ],
        "countries": [
            "US",
            "NL"
        ],
        "doc_hash": "f0ff4fcdce052163bd1e53bbbfbd7fb505009a9bf493859d3ec0212716333fce",
        "script_hashes": [
            "e8bd546cdf6b55f81cb0afee0bbdcfc5a99a0f78c79f695001b2eb7d7d9305c6"
        ],
        "globals": [
            "toggleTermsPopup",
            "intlTelInput",
            "__TS_SITEKEY",
            "__tsGet",
            "__tsReset",
            "__tsNeedsClick",
            "__tsShow",
            "__lgBS",
            "__visitorCountry",
            "ClientJS",
            "turnstile"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "ekonomia-app.pro"
            ],
            "cipher": "CHACHA20_POLY1305",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "ekonomia-app.pro",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-21T23:59:59Z",
            "valid_from": "2026-09-22T00:00:00Z"
        },
        "domain_age_days": 228,
        "apex_age_days": 228,
        "tls_age_days": 33,
        "tls_valid_days": 90,
        "requests": 27,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T16:45:34Z",
        "uuid": "1ee3d69d-3f8d-4d76-8dcf-6d2bf116c3a1",
        "scanned_at": "2026-10-25T16:43:51Z",
        "final_url": "https://ekonomia-app.pro/",
        "status": 200,
        "history": [
            {
                "url": "https://ekonomia-app.pro/",
                "status": 200
            }
        ],
        "dom_hash": "11988d7c59dde47f1c887049e795b182760a37fc9b25500424b90caf9cc27b1c",
        "doc_hash": "f0ff4fcdce052163bd1e53bbbfbd7fb505009a9bf493859d3ec0212716333fce",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "ekonomia-app.pro",
                "type": "A",
                "value": "185.62.57.222"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.57.222",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T17:46:30Z",
        "analysis_at": "2026-10-20T17:56:55Z",
        "stats": {
            "timeout": 0,
            "harmless": 42,
            "malicious": 14,
            "suspicious": 4,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "spam",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)"
        },
        "created": "2026-03-11T00:00:00Z",
        "updated": "2026-03-11T00:00:00Z",
        "first_seen": "2026-03-11T14:58:55Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "candy.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "albert.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "albert.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.57.222"
            }
        ],
        "dns_at": "2026-10-20T18:02:33Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "ekonomia-app.pro"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "b0b7287e7e7799cd0e2b10569e5a315c",
            "sha256": "a8eb05fe78a9be847285fe6f045f3d8811c12908bc804cb3dd7d1a776ab6c5e4",
            "subject": "ekonomia-app.pro",
            "valid_to": "2026-12-21T23:59:59Z",
            "valid_from": "2026-09-22T00:00:00Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "registration": "2026-03-11T11:41:43Z",
                "registrar expiration": "2027-03-11T11:41:43Z",
                "last update of RDAP database": "2026-10-18T17:52:57Z"
            },
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T16:44:52Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "ekonomia-app.pro"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://ekonomia-app.pro/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "ogUrl": "https://ekonomia-app.pro/",
            "title": "Ekonomia | Oficjalna Strona",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Ekonomia | Premium AI Trading Automation & Bot Orchestration",
            "ogSiteName": "Ekonomia",
            "themeColor": "#0d1118",
            "description": "Ekonomia dostarcza inteligentną automatyzację dla przepływów pracy w tradingu, obejmując wspomaganie handlu AI, kontrolę botów oraz narzędzia operacyjne dla precyzyjnego, powtarzalnego wykonania.",
            "twitterCard": "summary",
            "canonicalUrl": "https://ekonomia-app.pro/",
            "ogDescription": "Ekonomia delivers intelligent automation for trading workflows, featuring AI-powered trading assistance, bot controls, and operational tools for precise, repeatable execution."
        },
        "trackers": {
            "requests": 21,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 6
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 4
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 9,
                "tls": 78,
                "wait": 31,
                "connect": 16,
                "download": 19
            },
            "response_ms": 153
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_CHACHA20_POLY1305_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 44703,
            "co2_grams": 0.0016,
            "cleaner_than": 39
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.193.58",
                    "host": "albert.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.79",
                    "host": "candy.ns.cloudflare.com"
                }
            ],
            "zone": "ekonomia-app.pro"
        },
        "location": {
            "ip": "185.62.57.222",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "ekonomia-app.pro"
        },
        "dns": {
            "A": [
                "185.62.57.222"
            ],
            "NS": [
                "albert.ns.cloudflare.com",
                "candy.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"albert.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416890709, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.57.222",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://ekonomia-app.pro"
            ]
        },
        "linked_pages": {
            "internal_count": 14
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```