# PhishDestroy domain threat record: ekquiholdplatform.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/ekquiholdplatform.digital/
Machine-readable companion: https://phishdestroy.io/domain/ekquiholdplatform.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 16:09:41 UTC
- Last availability or vendor check: 2026-10-25 16:09:41 UTC
- Stored record updated: 2026-10-25 23:22:28 UTC
- VirusTotal detections in the stored snapshot: 19/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: celer

## Stored infrastructure

- Observed IP address: 185.62.56.63
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-06 04:32:55 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a173d1-53c7-74ef-8e6e-47c1bb0279ff/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/ekquiholdplatform.digital
- Certificate Transparency search: https://crt.sh/?q=%25.ekquiholdplatform.digital
- Web Archive lookup: https://web.archive.org/web/*/https://ekquiholdplatform.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed ekquiholdplatform.digital as a suspicious domain based on automated analysis that identified multiple security detections. The site was first seen by PhishDestroy on 2026-10-25, 111 days after its registration. An HTTP request on that date returned a 200 OK response and the page title advertised an AI‑powered trading platform.

How the scam works
A domain classified as suspicious without concrete evidence may be used to impersonate legitimate financial services, encouraging visitors to trust a fake trading platform and potentially submit credentials or funds. No phishing form, wallet request, or credential‑harvesting element was observed on the captured page, so the exact malicious mechanism remains unconfirmed.

Evidence
VirusTotal scanned the domain on 2026-10-25 and returned 19 detections from 92 engines, including 15 malicious and 4 suspicious labels. Google Safe Browsing checked on the same day and did not flag the site. urlscan.io recorded a 200 response on 2026-10-25, flagged by its engine with a high malicious score but gave an overall non‑malicious verdict; Cloudflare Radar marked the domain as phishing/malware. OTX listed five pulses referencing the domain as of 2026-10-25, and PhishDestroy’s internal blocklist includes it while external blocklists showed none.

Infrastructure
The domain was registered with Dynadot Inc on 2026-07-06 and uses Cloudflare nameservers connie.ns.cloudflare.com and lochlan.ns.cloudflare.com. The recorded IP was 185.62.56.63, listed under ASN 62370 (Snel.com B.V.) in the Netherlands, and the observed TLS 1.3 certificate from ZeroSSL was valid until 2026-12-18. DNSSEC was not enabled for the zone.

What to do
Do not enter login credentials, personal data, or financial information on the site; if any were submitted, change associated passwords and monitor accounts for unauthorized activity. Network defenders should block ekquiholdplatform.digital and review logs for any connections to the domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a173d1-53c7-74ef-8e6e-47c1bb0279ff/
Cloudflare Radar report: https://radar.cloudflare.com/scan/a8e8b9c3-bf31-4a84-9c13-2da81b2485e8
URLQuery report: https://urlquery.net/report/6bba69a3-a41d-46f7-a85c-749d536a9adf
Stored capture screenshot: https://urlscan.io/screenshots/01a173d1-53c7-74ef-8e6e-47c1bb0279ff.png
Cloudflare Radar screenshot (2026-10-25T16:43:50Z): https://screenshots.phishdestroy.io/cf/a8e8b9c3-bf31-4a84-9c13-2da81b2485e8.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/6bba69a3-a41d-46f7-a85c-749d536a9adf.png
VirusTotal report: https://www.virustotal.com/gui/domain/ekquiholdplatform.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ekquiholdplatform.digital
Archived copy: https://web.archive.org/web/20261025161029/https://ekquiholdplatform.digital/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 16:45:46 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a173d1-53c7-74ef-8e6e-47c1bb0279ff.png
  Captured: 2026-10-25 16:09:41 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a173d1-53c7-74ef-8e6e-47c1bb0279ff.png
  Captured: 2026-10-25 16:09:41 UTC
  Source report: https://urlscan.io/result/01a173d1-53c7-74ef-8e6e-47c1bb0279ff/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a8e8b9c3-bf31-4a84-9c13-2da81b2485e8.png
  Captured: 2026-10-25 16:43:50 UTC
  Source report: https://radar.cloudflare.com/scan/a8e8b9c3-bf31-4a84-9c13-2da81b2485e8
  SHA-256: b74c85da99d4245d0798de0e90f95e5f8f4803553fad5dee5c4a4fb3efd1a6f1
- URLQuery: https://screenshots.phishdestroy.io/uq/6bba69a3-a41d-46f7-a85c-749d536a9adf.png
  Source report: https://urlquery.net/report/6bba69a3-a41d-46f7-a85c-749d536a9adf
  SHA-256: 2f7ed5fe0d842324247b24735f9bfe00163893aa24a68cf97de2e2505e7d8bf9

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T16:22:42Z",
        "uuid": "01a173d1-53c7-74ef-8e6e-47c1bb0279ff",
        "scanned_at": "2026-10-25T16:07:51Z",
        "final_url": "https://ekquiholdplatform.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://ekquiholdplatform.digital/",
                "from": "http://ekquiholdplatform.digital/",
                "status": 307
            }
        ],
        "ip": "185.62.56.63",
        "ptr": "s46060.hosted-by-snel.com",
        "domains": [
            "cdn.jsdelivr.net",
            "challenges.cloudflare.com",
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "www.cloudflare.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "104.17.208.5",
            "192.178.183.94",
            "104.18.95.41",
            "104.16.123.96",
            "2606:4700::6811:cf05",
            "104.17.25.14",
            "2a00:1450:4001:c15::5f",
            "185.62.56.63"
        ],
        "asns": [
            "13335",
            "15169",
            "62370"
        ],
        "countries": [
            "US",
            "DE",
            "NL"
        ],
        "doc_hash": "eccfa9ba6112c6d41d3d28d55ceeb6cbd04ea77897ca8cd4c0c5bb74e4f96e1a",
        "script_hashes": [
            "f9aced9f09c5d9de4e03829a6f3bb5a2821719f07c6787e21ed21b6aaf1155dc"
        ],
        "globals": [
            "toggleTermsPopup",
            "intlTelInput",
            "__TS_SITEKEY",
            "__tsGet",
            "__tsReset",
            "__tsNeedsClick",
            "__tsShow",
            "__lgBS",
            "ClientJS",
            "__visitorCountry",
            "turnstile"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "ekquiholdplatform.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "ekquiholdplatform.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-18T23:59:59Z",
            "valid_from": "2026-09-19T00:00:00Z"
        },
        "domain_age_days": 111,
        "apex_age_days": 111,
        "tls_age_days": 36,
        "tls_valid_days": 90,
        "requests": 22,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T16:45:13Z",
        "uuid": "a8e8b9c3-bf31-4a84-9c13-2da81b2485e8",
        "scanned_at": "2026-10-25T16:43:50Z",
        "final_url": "https://ekquiholdplatform.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://ekquiholdplatform.digital/",
                "status": 200
            }
        ],
        "dom_hash": "38f5b82782da2dd6ffa017183b7f31b703d7f6d4f5d5bcaedf18c5423ef01802",
        "doc_hash": "eccfa9ba6112c6d41d3d28d55ceeb6cbd04ea77897ca8cd4c0c5bb74e4f96e1a",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "ekquiholdplatform.digital",
                "type": "A",
                "value": "185.62.56.63"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.56.63",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-06T06:32:55Z",
            "updated": "2026-08-12T01:49:27Z",
            "expires": "2027-07-06T06:32:55Z",
            "nameservers": [
                "connie.ns.cloudflare.com",
                "lochlan.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T16:42:36Z",
        "analysis_at": "2026-10-21T16:00:37Z",
        "stats": {
            "timeout": 0,
            "harmless": 40,
            "malicious": 15,
            "suspicious": 4,
            "undetected": 33
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "first_seen": "2026-07-06T10:17:31Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "connie.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "connie.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.56.63"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lochlan.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-21T16:06:10Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "ekquiholdplatform.digital"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "682cd8de4ecf51e8e0fa6acdfdeed52a",
            "sha256": "d069328d534ed8faaedc70b224a081df98f3cfabdaab4c4701f124ea2d2567b6",
            "subject": "ekquiholdplatform.digital",
            "valid_to": "2026-12-18T23:59:59Z",
            "valid_from": "2026-09-19T00:00:00Z"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-06T06:32:55Z",
                "last changed": "2026-07-06T09:32:47Z",
                "registration": "2026-07-06T06:32:55Z",
                "registrar expiration": "2027-07-06T06:32:55Z",
                "last update of RDAP database": "2026-10-16T07:21:23Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T16:44:52Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "ekquiholdplatform.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://ekquiholdplatform.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://ekquiholdplatform.digital/",
            "title": "Ekquihold | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Ekquihold | Premium AI trading workspace",
            "ogSiteName": "Ekquihold",
            "themeColor": "#000000",
            "description": "Ekquihold showcases a premium AI-powered trading workflow with automated execution, intelligent routing, and risk-aware configuration for proactive market participants.",
            "twitterCard": "summary",
            "canonicalUrl": "https://ekquiholdplatform.digital/",
            "ogDescription": "Ekquihold delivers a premium AI-powered trading workflow with automated execution, intelligent routing, and risk-aware configuration for proactive market participants."
        },
        "trackers": {
            "requests": 19,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 4,
                "tls": 36,
                "wait": 31,
                "connect": 36,
                "download": 13
            },
            "response_ms": 120
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 51062,
            "co2_grams": 0.0019,
            "cleaner_than": 36
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.234",
                    "host": "lochlan.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.247",
                    "host": "connie.ns.cloudflare.com"
                }
            ],
            "zone": "ekquiholdplatform.digital"
        },
        "location": {
            "ip": "185.62.56.63",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "ekquiholdplatform.digital"
        },
        "dns": {
            "A": [
                "185.62.56.63"
            ],
            "NS": [
                "connie.ns.cloudflare.com",
                "lochlan.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"connie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414116284, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.56.63",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://ekquiholdplatform.digital"
            ]
        },
        "linked_pages": {
            "internal_count": 14
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```