# PhishDestroy domain threat record: ethereum-proair.app

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/ethereum-proair.app/
Machine-readable companion: https://phishdestroy.io/domain/ethereum-proair.app/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 22:52:09 UTC
- Last availability or vendor check: 2026-10-25 23:00:28 UTC
- Stored record updated: 2026-10-26 04:30:17 UTC
- VirusTotal detections in the stored snapshot: 19/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: flagged

## Stored classification

- Targeted brand: Ethereum

## Stored infrastructure

- Observed IP address: 185.98.60.138
- Registrar in stored WHOIS data: TLD Registrar Solutions Ltd
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2023-11-14 11:37:23 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019fb1ff-d515-7747-8a65-7280b87c13f0/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/ethereum-proair.app
- Certificate Transparency search: https://crt.sh/?q=%25.ethereum-proair.app
- Web Archive lookup: https://web.archive.org/web/*/https://ethereum-proair.app/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added ethereum-proair.app to its blocklist on 2026-10-25 after Google Safe Browsing flagged it for social engineering. The recorded page title reads "Immediate 8.5 Pro Air ™ | The Official & Updated Website 2025 🥇". An HTTP 200 response was observed on 2026-10-26 when the page was fetched.

How the scam works
The detections indicate the site could be used to lure visitors into revealing credentials or personal data by presenting a seemingly legitimate trading or product page. No concrete malicious behavior was observed in the captured page.

Evidence
Google Safe Browsing marked the domain as SOCIAL_ENGINEERING on 2026-10-25. VirusTotal reported 19 detections from 92 engines on 2026-10-25, with 18 classified as malicious and one as suspicious. urlscan.io recorded a malicious engine score of 96 on 2026-07-30, though its overall verdict was not malicious. Cloudflare Radar flagged the domain as phishing and malware on 2026-10-25. OTX listed one pulse referencing the domain on 2026-10-25. PhishDestroy’s internal blocklist also contains the domain, while external blocklists showed no entries.

Infrastructure
The domain was registered on 2023-11-14 through TLD Registrar Solutions Ltd (also shown as ENOM in some records). The recorded IP address was 185.98.60.138, which at the time was associated with Ideal Hosting Teknoloji A.S. in Turkey. The TLS certificate issued by Let’s Encrypt / YE2 was valid from 2026-09-18 to 2026-12-17 and covered *.ethereum-proair.app.

What to do
Visitors should avoid entering any credentials, personal data, or cryptocurrency information on this site and change passwords if they suspect they have been submitted. Organizations should block the domain ethereum-proair.app at the network perimeter, monitor logs for connections to the recorded IP, and add the domain to threat‑intel feeds for continued observation.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019fb1ff-d515-7747-8a65-7280b87c13f0/
Cloudflare Radar report: https://radar.cloudflare.com/scan/2567c8df-fa7f-4e90-abfd-b21306dcf256
Stored capture screenshot: https://urlscan.io/screenshots/019fb1ff-d515-7747-8a65-7280b87c13f0.png
Cloudflare Radar screenshot (2026-10-25T22:57:18Z): https://screenshots.phishdestroy.io/cf/2567c8df-fa7f-4e90-abfd-b21306dcf256.png
URLScan screenshot (2026-10-25T22:59:39Z): https://screenshots.phishdestroy.io/us/01a1754a-3bdd-7578-a837-3e92f5fdc4bd.png
URLScan capture report: https://urlscan.io/result/01a1754a-3bdd-7578-a837-3e92f5fdc4bd/
VirusTotal report: https://www.virustotal.com/gui/domain/ethereum-proair.app
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ethereum-proair.app
Archived copy: https://web.archive.org/web/20261025225251/https://ethereum-proair.app/de/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 23:01:17 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019fb1ff-d515-7747-8a65-7280b87c13f0.png
  Captured: 2026-10-25 22:52:09 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019fb1ff-d515-7747-8a65-7280b87c13f0.png
  Captured: 2026-10-26 04:30:17 UTC
  Source report: https://urlscan.io/result/019fb1ff-d515-7747-8a65-7280b87c13f0/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2567c8df-fa7f-4e90-abfd-b21306dcf256.png
  Captured: 2026-10-25 22:57:18 UTC
  Source report: https://radar.cloudflare.com/scan/2567c8df-fa7f-4e90-abfd-b21306dcf256
  SHA-256: ac5dd72f0ec9a25831a213033b9ce78367c1f11fb99e64cc5a416b409064e64d
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1754a-3bdd-7578-a837-3e92f5fdc4bd.png
  Captured: 2026-10-25 22:59:39 UTC
  Source report: https://urlscan.io/result/01a1754a-3bdd-7578-a837-3e92f5fdc4bd/
  SHA-256: 78cc755cd519c5c5a014efd4fe61879d84a0ec21f712ffd2317258391fafc028

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T23:00:27Z",
        "uuid": "019fb1ff-d515-7747-8a65-7280b87c13f0",
        "scanned_at": "2026-07-30T07:49:28Z",
        "final_url": "https://ethereum-proair.app/tr/",
        "status": 200,
        "redirected": "same-domain",
        "redirects": [
            {
                "to": "https://ethereum-proair.app/",
                "from": "http://ethereum-proair.app/",
                "status": 307
            },
            {
                "to": "https://ethereum-proair.app/tr/",
                "from": "https://ethereum-proair.app/",
                "status": 302
            }
        ],
        "ip": "185.98.60.138",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.250.154.94",
            "142.250.154.95",
            "185.98.60.138"
        ],
        "asns": [
            "15169",
            "201064"
        ],
        "countries": [
            "US",
            "TR"
        ],
        "doc_hash": "932aab7b28f8c5700d8644d80935257212cc3ad9e81495c3248d77739086aa14",
        "script_hashes": [
            "b1dc3a468eb8949e17762628c68205ee4ffad52ec1cdbe48e3456bf96c1c9603",
            "81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113"
        ],
        "globals": [
            "__VUE__",
            "switcher",
            "switcherButton",
            "modal",
            "btn"
        ],
        "cookies": [
            "lang_fx"
        ],
        "tls": {
            "san": [
                "*.ethereum-proair.app",
                "ethereum-proair.app"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "ethereum-proair.app",
            "protocol": "TLS 1.3",
            "valid_to": "2026-10-18T17:44:14Z",
            "valid_from": "2026-07-20T17:44:15Z"
        },
        "domain_age_days": 988,
        "apex_age_days": 988,
        "tls_age_days": 9,
        "tls_valid_days": 89,
        "requests": 58,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx/1.30.1",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T23:00:29Z",
        "uuid": "2567c8df-fa7f-4e90-abfd-b21306dcf256",
        "scanned_at": "2026-10-25T22:57:18Z",
        "final_url": "https://ethereum-proair.app/",
        "status": 200,
        "history": [
            {
                "url": "https://ethereum-proair.app/",
                "status": 200
            }
        ],
        "dom_hash": "b9c0f7b0fa9e936829d2948f5752bca8077d51e4e11c752bb490fad4e45da7cc",
        "doc_hash": "2819c521d8941ccaaa8cb6e05a22fe7c4b9f2571bb9d5a2c4f569c372e3d25c6",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "ethereum-proair.app",
                "type": "A",
                "value": "185.98.60.138"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.98.60.138",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "TLD Registrar Solutions Ltd",
            "created": "2023-11-14T12:37:23Z",
            "updated": "2026-05-20T14:02:34Z",
            "expires": "2027-11-14T12:37:23Z",
            "nameservers": [
                "ns1.cryptodns.co",
                "ns2.cryptodns.co"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T22:56:23Z",
        "analysis_at": "2026-10-23T00:03:17Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 18,
            "suspicious": 1,
            "undetected": 29
        },
        "detections": {
            "Bkav": "malicious",
            "ESET": "phishing",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Emsisoft": "malware",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "ADMINUSLabs": "malicious",
            "BitDefender": "phishing",
            "ChainPatrol": "malicious",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Google Safe Browsing": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "registrar": "ENOM, INC.",
        "created": "2023-11-14T12:37:23Z",
        "expires": "2025-11-14T12:37:23Z",
        "updated": "2024-04-18T09:35:34Z",
        "first_seen": "2023-11-17T08:14:22Z",
        "dns": [
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "admin.cryptodns.co",
                "value": "ns1.cryptodns.co"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.cryptodns.co"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.98.60.138"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.cryptodns.co"
            }
        ],
        "dns_at": "2026-10-23T00:03:38Z",
        "jarm": "1dd40d40d00040d00042d43d000000831b6af40378e2dd35eeac4e9311926e",
        "cert": {
            "san": [
                "*.ethereum-proair.app",
                "ethereum-proair.app"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6adb9494f5a1c85840adf3b284236761011",
            "sha256": "1547f9f59e5df686b679c63f8d7ad2398d1b454eac6224a85c2c7a080ed9fb4c",
            "subject": "ethereum-proair.app",
            "valid_to": "2026-12-17T16:54:28Z",
            "valid_from": "2026-09-18T16:54:29Z"
        },
        "whois": {
            "registrar": "ENOM, INC.",
            "registrar_iana_id": "48",
            "registrar_url": "WWW.ENOMDOMAINS.COM",
            "created": "2023-11-14T12:37:00Z",
            "updated": "2024-04-18T09:35:34Z",
            "expires": "2025-11-14T12:37:00Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "armfazh.ns.cloudflare.com",
                "kimora.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-11-14T12:37:23Z",
                "last changed": "2026-05-20T14:02:34Z",
                "registration": "2023-11-14T12:37:23Z",
                "registrar expiration": "2027-11-14T12:37:23Z",
                "last update of RDAP database": "2026-10-17T11:49:18Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T23:00:49Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "ethereum-proair.app"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T22:52:53Z",
            "first": "2024-01-12T12:29:42Z",
            "changes": 26,
            "days_archived": 28,
            "scans_per_day": 0.03,
            "avg_page_bytes": 13166
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://ethereum-proair.app/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 128
        },
        "social_tags": {
            "title": "Immediate 8.5 Pro Air ™ | The Official & Updated Website 2025 🥇",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "description": "Explore Immediate 8.5 Pro Air trading on a trusted platform. Learn about crypto trading trends worldwide. Join today!",
            "twitterCard": "summary",
            "canonicalUrl": "https://ethereum-proair.app/"
        },
        "trackers": {
            "requests": 51,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 124,
                "tls": 51,
                "wait": 102,
                "connect": 57,
                "download": 1
            },
            "response_ms": 335
        },
        "tls_connection": {
            "alpn": "http/1.1",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                53,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 65384,
            "co2_grams": 0.0024,
            "cleaner_than": 31
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "185.98.60.138",
                    "host": "ns2.cryptodns.co"
                },
                {
                    "ip": "185.98.60.138",
                    "host": "ns1.cryptodns.co"
                }
            ],
            "zone": "ethereum-proair.app"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "lang_fx"
                }
            ]
        },
        "location": {
            "ip": "185.98.60.138",
            "asn": "201064",
            "org": "Ideal Hosting Teknoloji A.S.",
            "city": "Mahmutbey",
            "country": "TR"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "ethereum-proair.app"
        },
        "dns": {
            "A": [
                "185.98.60.138"
            ],
            "NS": [
                "ns2.cryptodns.co",
                "ns1.cryptodns.co"
            ],
            "SOA": "{\"nsname\": \"ns1.cryptodns.co\", \"hostmaster\": \"admin.cryptodns.co\", \"serial\": 2026052113, \"refresh\": 3600, \"retry\": 1800, \"expire\": 604800, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.98.60.138",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://ethereum-proair.app"
            ]
        },
        "linked_pages": {
            "internal_count": 37
        },
        "headers": {
            "headers": {
                "server": "nginx/1.30.1",
                "content-type": "text/html"
            }
        }
    }
}
```