# PhishDestroy domain threat record: greenlinefinthorpro.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/greenlinefinthorpro.com/ Machine-readable companion: https://phishdestroy.io/domain/greenlinefinthorpro.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-27 23:38:26 UTC - Stored record updated: 2026-10-28 01:00:17 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 185.62.57.40 - Registrar in stored WHOIS data: MainReg Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2025-12-29 07:56:01 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0b906-c4c0-76bb-997b-92efe0b85c5f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/greenlinefinthorpro.com - Certificate Transparency search: https://crt.sh/?q=%25.greenlinefinthorpro.com - Web Archive lookup: https://web.archive.org/web/*/https://greenlinefinthorpro.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed greenlinefinthorpro.com as a suspicious domain. The recorded page title was "Greenline Finthor | AI Trading Platform | Official Website". The domain was first seen by PhishDestroy on 2026-10-28 with an HTTP 200 response. The intake record noted a trusted report based on the domain’s age of 302 days. How the scam works Suspicious domains may be used to lure visitors into providing credentials, personal data, or financial information by mimicking legitimate services. Without observed malicious forms on this page, the primary risk is potential credential harvesting or fraud if users interact. Evidence VirusTotal scanned the domain on 2026-10-21 and reported 3 detections from 92 engines, with DNS8 and Gridinsoft marking it suspicious and SOCRadar labeling it phishing. Google Safe Browsing checked on 2026-10-28 and did not flag the site. urlscan.io captured the page on 2026-09-19; its engine score was 94 and flagged it malicious, though the overall verdict was benign. Cloudflare Radar scanned on 2026-10-28 and marked the domain malicious under the malware category. PhishDestroy’s internal blocklist contains the domain, while external blocklists showed no hits, and OTX listed three pulses referencing the domain as of 2026-10-28. Infrastructure The domain was registered on 2025-12-29 through MainReg Inc. It was observed to resolve to IP 185.62.57.40, which was associated with Snel.com B.V. in the Netherlands. The authoritative nameservers at the time were kiki.ns.cloudflare.com and valentin.ns.cloudflare.com. The TLS certificate, issued by ZeroSSL ECC DV SSL CA 2, was valid from 2026-09-01 to 2026-11-30 and used TLS 1.3 with AES_128_GCM encryption. What to do Visitors should not enter credentials or personal data on the site; if they have already done so, they should change any used passwords and monitor accounts for unauthorized activity. Organizations should add greenlinefinthorpro.com to deny lists and review access logs for connections to this exact domain. No further action is required for the IP address or hosting provider. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0b906-c4c0-76bb-997b-92efe0b85c5f/ Cloudflare Radar report: https://radar.cloudflare.com/scan/9be0de97-901b-4bf1-adb1-7259f276a352 Stored capture screenshot: https://urlscan.io/screenshots/01a0b906-c4c0-76bb-997b-92efe0b85c5f.png Cloudflare Radar screenshot (2026-10-27T23:41:59Z): https://screenshots.phishdestroy.io/cf/9be0de97-901b-4bf1-adb1-7259f276a352.png URLScan screenshot (2026-09-18T06:45:28Z): https://screenshots.phishdestroy.io/us/01a0b343-37ca-727c-b571-9890616ccfc0.png URLScan capture report: https://urlscan.io/result/01a0b343-37ca-727c-b571-9890616ccfc0/ URLScan screenshot (2026-09-18T09:54:21Z): https://screenshots.phishdestroy.io/us/01a0b3f0-252b-74a8-bd84-4e24029ae9ff.png URLScan capture report: https://urlscan.io/result/01a0b3f0-252b-74a8-bd84-4e24029ae9ff/ VirusTotal report: https://www.virustotal.com/gui/domain/greenlinefinthorpro.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=greenlinefinthorpro.com Archived copy: https://web.archive.org/web/20261027234233/https://greenlinefinthorpro.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-28 00:44:12 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a0b906-c4c0-76bb-997b-92efe0b85c5f.png Captured: 2026-10-27 23:38:26 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0b906-c4c0-76bb-997b-92efe0b85c5f.png Source report: https://urlscan.io/result/01a0b906-c4c0-76bb-997b-92efe0b85c5f/ - URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b343-37ca-727c-b571-9890616ccfc0.png Captured: 2026-09-18 06:45:28 UTC Source report: https://urlscan.io/result/01a0b343-37ca-727c-b571-9890616ccfc0/ SHA-256: 975a5b26c2e21f80a7f0b849c07396d5483f34ec5a044dcd4ad402a3a66d7258 - URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b3f0-252b-74a8-bd84-4e24029ae9ff.png Captured: 2026-09-18 09:54:21 UTC Source report: https://urlscan.io/result/01a0b3f0-252b-74a8-bd84-4e24029ae9ff/ SHA-256: 975a5b26c2e21f80a7f0b849c07396d5483f34ec5a044dcd4ad402a3a66d7258 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9be0de97-901b-4bf1-adb1-7259f276a352.png Captured: 2026-10-27 23:41:59 UTC Source report: https://radar.cloudflare.com/scan/9be0de97-901b-4bf1-adb1-7259f276a352 SHA-256: c895524de7557cb669f802ecae425cf380cf90ef695ea8e0c5db1795deb8ed9f ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T23:44:30Z", "uuid": "01a0b906-c4c0-76bb-997b-92efe0b85c5f", "scanned_at": "2026-09-19T09:37:09Z", "final_url": "https://greenlinefinthorpro.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://greenlinefinthorpro.com/", "from": "http://greenlinefinthorpro.com/", "status": 307 } ], "ip": "185.62.57.40", "domains": [ "cdn.jsdelivr.net", "fonts.gstatic.com", "www.cloudflare.com", "myip.wtf", "fonts.googleapis.com" ], "ips": [ "104.17.208.5", "142.250.154.94", "104.16.123.96", "198.27.70.99", "2606:4700::6811:d005", "2a00:1450:4001:c0f::5f", "185.62.57.40" ], "asns": [ "13335", "15169", "16276", "62370" ], "countries": [ "US", "CA", "DE", "NL" ], "doc_hash": "7e20cec9ef8da5bbb85cfe878333ff4cb3d1d4c827be0b378164466f9f7c32e5", "script_hashes": [ "dcffb692e1e6bda024f7830b7f5a3fa758c06ede0ac195daebf2c9fe01442f3f" ], "globals": [ "geoCountry", "geoPrefix", "countryPhoneCodes", "toggleTermsPopup", "intlTelInput", "__visitorCountry", "ClientJS" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "greenlinefinthorpro.com" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "greenlinefinthorpro.com", "protocol": "TLS 1.3", "valid_to": "2026-11-30T23:59:59Z", "valid_from": "2026-09-01T00:00:00Z" }, "domain_age_days": 263, "apex_age_days": 263, "tls_age_days": 18, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 94, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T23:44:31Z", "uuid": "9be0de97-901b-4bf1-adb1-7259f276a352", "scanned_at": "2026-10-27T23:41:59Z", "final_url": "https://greenlinefinthorpro.com/", "status": 200, "history": [ { "url": "https://greenlinefinthorpro.com/", "status": 200 } ], "dom_hash": "657e2d43e79d3dc51abc97037b152369cae468d50eb4f8f37910f789c27f5de5", "doc_hash": "a0b08854997d36b248f5bb2466d97d4b95ab53313ba905fb235a1f02fa63d93a", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "greenlinefinthorpro.com", "type": "A", "value": "185.62.57.40" } ], "dnssec_valid": false, "ip": "127.0.1.17", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "MainReg Inc.", "created": "2025-12-29T08:56:01Z", "updated": "2025-12-29T10:28:02Z", "expires": "2026-12-29T08:56:01Z", "nameservers": [ "kiki.ns.cloudflare.com", "valentin.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-28T00:42:29Z", "analysis_at": "2026-10-21T02:41:08Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 1, "suspicious": 2, "undetected": 33 }, "detections": { "DNS8": "suspicious", "SOCRadar": "phishing", "Gridinsoft": "suspicious" }, "reputation": 0, "created": "2025-12-29T00:00:00Z", "updated": "2025-12-29T00:00:00Z", "first_seen": "2025-12-29T10:43:31Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "kiki.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "kiki.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.40" }, { "ttl": 21600, "type": "NS", "value": "valentin.ns.cloudflare.com" } ], "dns_at": "2026-10-21T02:52:12Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "greenlinefinthorpro.com" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "c6a676a1ae4efb1c644fef9364f3600e", "sha256": "18c15a1e0d6683814ecd9de00784255ea0483917aeef8e6f46369952ef4d2bfb", "subject": "greenlinefinthorpro.com", "valid_to": "2026-11-30T23:59:59Z", "valid_from": "2026-09-01T00:00:00Z" }, "whois": [], "rdap": { "status": [ "active" ], "events": { "last changed": "2025-12-29T00:00:00Z", "registration": "2025-12-29T00:00:00Z", "registrar expiration": "2026-12-29T00:00:00Z", "last update of RDAP database": "2026-10-18T13:46:00Z" }, "registrar": "MainReg Inc.", "registrar_iana_id": "1917" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T23:44:53Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "greenlinefinthorpro.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-27T23:42:33Z", "first": "2026-10-27T23:42:33Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 12087 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://greenlinefinthorpro.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Greenline Finthor | AI Trading Platform | Official Website", "robots": "index, follow", "description": "Greenline Finthor delivers AI-enhanced trading support and autonomous bots with configurable execution controls, monitoring dashboards, and governance features for professional markets.", "canonicalUrl": "https://greenlinefinthorpro.com/" }, "trackers": { "requests": 19, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 48, "tls": 70, "wait": 49, "connect": 19, "download": 1 }, "response_ms": 187 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 39677, "co2_grams": 0.0015, "cleaner_than": 42 }, "dns_server": { "ns": [ { "ip": "162.159.44.206", "host": "valentin.ns.cloudflare.com" }, { "ip": "108.162.192.180", "host": "kiki.ns.cloudflare.com" } ], "zone": "greenlinefinthorpro.com" }, "location": { "ip": "185.62.57.40", "asn": "62370", "org": "Snel.com B.V.", "city": "Schiedam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "greenlinefinthorpro.com" }, "dns": { "A": [ "185.62.57.40" ], "NS": [ "valentin.ns.cloudflare.com", "kiki.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"kiki.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418027721, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.40", "family": 4 }, "redirects": { "chain": [ "https://greenlinefinthorpro.com" ] }, "linked_pages": { "internal_count": 11 }, "whois": { "registrar": "MainReg Inc.", "created": "2025-12-29T08:56:01Z", "updated": "2025-12-29T10:28:02Z", "expires": "2026-12-29T08:56:01Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "kiki.ns.cloudflare.com", "valentin.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```