# PhishDestroy domain threat record: euroquantumtrade.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/euroquantumtrade.com/
Machine-readable companion: https://phishdestroy.io/domain/euroquantumtrade.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 23:05:58 UTC
- Last availability or vendor check: 2026-10-25 23:05:58 UTC
- Stored record updated: 2026-10-26 01:00:17 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: celer

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-20 23:26:40 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1754e-dde2-74eb-b058-a01d756b5d38/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/euroquantumtrade.com
- Certificate Transparency search: https://crt.sh/?q=%25.euroquantumtrade.com
- Web Archive lookup: https://web.archive.org/web/*/https://euroquantumtrade.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated assessment categorizes euroquantumtrade.com as a fake crypto exchange. The recorded page title advertises a “Next‑Gen Algorithmic Trading Platform — EuroQuantum”. PhishDestroy first observed the domain on 2026-10-26 and recorded an HTTP 200 response at that time.

How the scam works
Fake exchange sites imitate legitimate trading platforms to persuade users to deposit cryptocurrency. They typically display fabricated performance data, require account creation, and then either disappear with the funds or harvest login credentials and wallet addresses. Victims may be prompted to approve token transfers or disclose private keys, enabling attackers to drain any deposited assets.

Evidence
VirusTotal scanned the domain on 2026-10-25 and reported 16 detections from 92 engines, including 12 malicious and 4 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked the URL on 2026-10-26 and returned no flag. urlscan.io captured the site on 2026-10-26; its overall verdict was non‑malicious, but its engine analysis marked it malicious with a score of 97. Spamhaus DBL listed the domain as spam on 2026-10-26. OTX recorded five pulses mentioning the domain as of 2026-10-26. PhishDestroy’s internal blocklist includes the domain, while external blocklist checks returned zero matches on the same date.

Infrastructure
The domain was registered with Dynadot Inc on 2026-07-21, giving it an age of 96 days at first sighting. The recorded IP was 158.94.210.119, which registration data linked to Omegatech LTD in the Netherlands. TLS was provided by Let’s Encrypt, valid from 2026-09-01 to 2026-11-30. The site served content over HTTPS with a TLS 1.3 cipher suite.

What to do
If you entered any crypto wallet credentials or approved transactions on this site, immediately revoke those approvals and create a new wallet with a fresh seed phrase. Change any passwords used on the site and monitor associated accounts for unauthorized activity. Defenders should block euroquantumtrade.com at the network perimeter, flag it in security policies, and review logs for any connections to the recorded IP address.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1754e-dde2-74eb-b058-a01d756b5d38/
Cloudflare Radar report: https://radar.cloudflare.com/scan/a8255dee-5cc6-4a56-9623-d9d7c97cf1f6
URLQuery report: https://urlquery.net/report/3efcc195-235a-4f42-ab77-7fbd990adcb6
Stored capture screenshot: https://i.ibb.co/bgSJqn0M/e6a178fd815d.png
Cloudflare Radar screenshot (2026-10-25T23:36:51Z): https://screenshots.phishdestroy.io/cf/a8255dee-5cc6-4a56-9623-d9d7c97cf1f6.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/3efcc195-235a-4f42-ab77-7fbd990adcb6.png
URLScan screenshot (2026-09-14T19:45:24Z): https://screenshots.phishdestroy.io/us/01a0a173-cc0d-717e-b921-fb17e4b8609f.png
URLScan capture report: https://urlscan.io/result/01a0a173-cc0d-717e-b921-fb17e4b8609f/
URLScan screenshot (2026-09-15T10:14:34Z): https://screenshots.phishdestroy.io/us/01a0a48f-9348-76ca-8cca-e763e967e0a3.png
URLScan capture report: https://urlscan.io/result/01a0a48f-9348-76ca-8cca-e763e967e0a3/
VirusTotal report: https://www.virustotal.com/gui/domain/euroquantumtrade.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=euroquantumtrade.com
Archived copy: https://web.archive.org/web/20261025230617/https://euroquantumtrade.com/
Revoke token approvals: https://revoke.cash/
Report crypto fraud (Chainabuse): https://www.chainabuse.com/report
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 00:47:07 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/bgSJqn0M/e6a178fd815d.png
  Captured: 2026-10-25 23:05:58 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1754e-dde2-74eb-b058-a01d756b5d38.png
  Captured: 2026-10-25 23:05:58 UTC
  Source report: https://urlscan.io/result/01a1754e-dde2-74eb-b058-a01d756b5d38/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a8255dee-5cc6-4a56-9623-d9d7c97cf1f6.png
  Captured: 2026-10-25 23:36:51 UTC
  Source report: https://radar.cloudflare.com/scan/a8255dee-5cc6-4a56-9623-d9d7c97cf1f6
  SHA-256: c0e3832ad8a57bdcf6c0138b145db270569dceb9fe9155bebea5fda617da3b06
- URLQuery: https://screenshots.phishdestroy.io/uq/3efcc195-235a-4f42-ab77-7fbd990adcb6.png
  Source report: https://urlquery.net/report/3efcc195-235a-4f42-ab77-7fbd990adcb6
  SHA-256: e4ea6f349169957c4ca2fc60c458bb76eb95dd468dbd92f8a15e4b75bd08e389
- URLScan · 2026-09-14: https://screenshots.phishdestroy.io/us/01a0a173-cc0d-717e-b921-fb17e4b8609f.png
  Captured: 2026-09-14 19:45:24 UTC
  Source report: https://urlscan.io/result/01a0a173-cc0d-717e-b921-fb17e4b8609f/
  SHA-256: d392eedb47190c9e24dbb8d97ae1d758520738bf250754e642de2551ebc669f7
- URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a48f-9348-76ca-8cca-e763e967e0a3.png
  Captured: 2026-09-15 10:14:34 UTC
  Source report: https://urlscan.io/result/01a0a48f-9348-76ca-8cca-e763e967e0a3/
  SHA-256: c9fa900834ef4d4360976279a1bd166368b946bedae6d0eabd471e40ee38bc80

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T23:37:27Z",
        "uuid": "01a1754e-dde2-74eb-b058-a01d756b5d38",
        "scanned_at": "2026-10-25T23:04:34Z",
        "final_url": "https://euroquantumtrade.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://euroquantumtrade.com/",
                "from": "http://euroquantumtrade.com/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "c02a85f0b02be4bcaa8d562b67db39fedae7954970f88d6efff916f75f78e703",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "navToggle",
            "mainNav",
            "langBtn",
            "langDropdown",
            "langSwitcher"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "euroquantumtrade.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "euroquantumtrade.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-30T15:46:46Z",
            "valid_from": "2026-09-01T15:46:47Z"
        },
        "domain_age_days": 96,
        "apex_age_days": 96,
        "tls_age_days": 54,
        "tls_valid_days": 89,
        "requests": 5,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T23:37:28Z",
        "uuid": "a8255dee-5cc6-4a56-9623-d9d7c97cf1f6",
        "scanned_at": "2026-10-25T23:36:51Z",
        "final_url": "https://euroquantumtrade.com/",
        "status": 200,
        "history": [
            {
                "url": "https://euroquantumtrade.com/",
                "status": 200
            }
        ],
        "dom_hash": "9d0d0579ad93a2bf8dcc97e84f6c272c9f625f564df24ab2bb4b8b7b44980713",
        "doc_hash": "e0e223c4f9b8a11aa00137767dfc9a85db4d1a227f5d9c11c8c7606aea6ab7e4",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Scam",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "euroquantumtrade.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-21T01:26:40Z",
            "updated": "2026-08-13T11:30:56Z",
            "expires": "2027-07-21T01:26:40Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T00:45:13Z",
        "analysis_at": "2026-10-25T06:33:34Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 12,
            "suspicious": 4,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "malicious",
            "Sophos": "phishing",
            "Fortinet": "spam",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-07-21T01:26:40Z",
        "expires": "2027-07-21T01:26:40Z",
        "updated": "2026-08-13T11:30:56Z",
        "first_seen": "2026-07-21T02:07:51Z",
        "dns": [
            {
                "ttl": 300,
                "type": "MX",
                "value": "parkmail.dynadot.com",
                "priority": 0
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.euroquantumtrade.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dns_at": "2026-10-25T06:38:54Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "euroquantumtrade.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "68789921f900f16ddc149d8ec31e2b633ca",
            "sha256": "b98db1f19f716329597ef36fd79a9a398ac962f1b87d2a79d7803fe750330ae6",
            "subject": "euroquantumtrade.com",
            "valid_to": "2026-11-30T15:46:46Z",
            "valid_from": "2026-09-01T15:46:47Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-07-21T01:26:40Z",
            "updated": "2026-08-13T11:30:56Z",
            "expires": "2027-07-21T01:26:40Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-21T01:26:40Z",
                "last changed": "2026-09-01T06:08:49Z",
                "registration": "2026-07-21T01:26:40Z",
                "registrar expiration": "2027-07-21T01:26:40Z",
                "last update of RDAP database": "2026-10-23T10:56:42Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T23:07:02Z",
        "mail_config": {
            "mx": [
                "parkmail.dynadot.com"
            ],
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "euroquantumtrade.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T23:06:17Z",
            "first": "2026-10-16T05:21:46Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.1,
            "avg_page_bytes": 23362
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://euroquantumtrade.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Next-Gen Algorithmic Trading Platform — EuroQuantum",
            "robots": "index, follow",
            "description": "140+ markets. Predictive intelligence compounding performance across every operational tier. EuroQuantum is your AI-powered trading platform for data-driven global execution.",
            "canonicalUrl": "https://euroquantumtrade.com/"
        },
        "trackers": {
            "requests": 21,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 303,
                "tls": 118,
                "wait": 111,
                "connect": 143,
                "download": 171
            },
            "response_ms": 846
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 94466,
            "co2_grams": 0.0035,
            "cleaner_than": 23
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "euroquantumtrade.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "euroquantumtrade.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "MX": [
                "{\"exchange\": \"parkmail.dynadot.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.euroquantumtrade.com\", \"serial\": 2026092801, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://euroquantumtrade.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.euroquantumtrade.com"
            ]
        },
        "linked_pages": {
            "internal_count": 31
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-21T01:26:40Z",
            "updated": "2026-08-13T11:30:56Z",
            "expires": "2027-07-21T01:26:40Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```