# PhishDestroy domain threat record: guildcapitaldale.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/guildcapitaldale.shop/ Machine-readable companion: https://phishdestroy.io/domain/guildcapitaldale.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-28 02:11:42 UTC - Stored record updated: 2026-10-28 02:30:34 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.97.1 - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-17 23:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019f88dd-743f-75ea-ad48-838a51b6d453/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/guildcapitaldale.shop - Certificate Transparency search: https://crt.sh/?q=%25.guildcapitaldale.shop - Web Archive lookup: https://web.archive.org/web/*/https://guildcapitaldale.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added guildcapitaldale.shop to its internal blocklist because several security engines flagged the domain as malicious. The recorded page title reads "Guildcapitaldale | AI Trading Platform | Official Website". The domain was first seen by PhishDestroy on 2026-10-28 and returned HTTP 200 at that time. How the scam works The listing is based on vendor detections that commonly indicate attempts to deceive users, such as phishing or fraudulent service offers, but no specific malicious behavior was observed on the captured page. In general, domains with similar detections may be used to lure visitors into providing credentials or financial information under a false premise. Evidence VirusTotal scanned the domain on 2026-10-21 (retrieved 2026-10-28) and reported 14 malicious and 4 suspicious detections out of 92 engines, with vendors including BitDefender, Fortinet and Sophos labeling it phishing or malicious. Google Safe Browsing checked on 2026-10-28 and did not flag the site. urlscan.io captured the page on 2026-07-22 and gave an overall clean verdict, though its engine score was 98 and marked it malicious. Cloudflare Radar scanned on 2026-10-28 and classified the domain as phishing and malware. OTX listed one pulse referencing the domain on 2026-10-28. PhishDestroy’s internal blocklist marks the domain as blocked, while external blocklists showed no hits at the time of checking. Infrastructure The domain was registered on 2026-03-18, giving it an age of about 124 days at the time of capture. Hosting is provided through Cloudflare (recorded IP 188.114.97.1, also observed 188.114.96.3) with the network identified as CloudFLARENET‑EU in Great Britain. The TLS certificate, issued by Google Trust Services, is valid from 2026-09-12 to 2026-12-11. What to do Visitors should avoid entering any credentials, personal data, or financial information on the site and should change passwords if they suspect they have been submitted. Organizations should block the exact domain and monitor network logs for connections to the recorded Cloudflare IP addresses. Continue to watch for updates from security vendors and PhishDestroy for any change in the site’s status. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019f88dd-743f-75ea-ad48-838a51b6d453/ Cloudflare Radar report: https://radar.cloudflare.com/scan/0d0372aa-be22-41b1-af74-d819cf945079 Stored capture screenshot: https://urlscan.io/screenshots/019f88dd-743f-75ea-ad48-838a51b6d453.png Cloudflare Radar screenshot (2026-10-28T02:13:07Z): https://screenshots.phishdestroy.io/cf/0d0372aa-be22-41b1-af74-d819cf945079.png VirusTotal report: https://www.virustotal.com/gui/domain/guildcapitaldale.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=guildcapitaldale.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-28 02:15:06 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019f88dd-743f-75ea-ad48-838a51b6d453.png Captured: 2026-10-28 02:11:42 UTC - URLScan capture: https://screenshots.phishdestroy.io/019f88dd-743f-75ea-ad48-838a51b6d453.png Source report: https://urlscan.io/result/019f88dd-743f-75ea-ad48-838a51b6d453/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0d0372aa-be22-41b1-af74-d819cf945079.png Captured: 2026-10-28 02:13:07 UTC Source report: https://radar.cloudflare.com/scan/0d0372aa-be22-41b1-af74-d819cf945079 SHA-256: 56a5b23425c88500bad28bc633853fda5dd38cb5b53d40645ff2f46a7940ce3f ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-28T02:14:33Z", "uuid": "019f88dd-743f-75ea-ad48-838a51b6d453", "scanned_at": "2026-07-22T08:07:34Z", "final_url": "https://guildcapitaldale.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://guildcapitaldale.shop/", "from": "http://guildcapitaldale.shop/", "status": 307 } ], "ip": "188.114.96.3", "domains": [ "cdnjs.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflareinsights.com", "static.cloudflare.com" ], "ips": [ "104.17.207.5", "192.178.170.95", "104.17.24.14", "188.114.96.3" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "447e875786721f6f20c48c9f5df72aebab92185f8d82dd5fed5b6ecab5376c1f", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_e6tyarcy", "toggleTermsPopup", "__cfQR", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "guildcapitaldale.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "guildcapitaldale.shop", "protocol": "QUIC", "valid_to": "2026-10-12T22:41:21Z", "valid_from": "2026-07-14T21:41:27Z" }, "domain_age_days": 124, "apex_age_days": 124, "tls_age_days": 7, "tls_valid_days": 90, "requests": 16, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://cloudflar", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-28T02:14:35Z", "uuid": "0d0372aa-be22-41b1-af74-d819cf945079", "scanned_at": "2026-10-28T02:13:07Z", "final_url": "https://guildcapitaldale.shop/", "status": 200, "history": [ { "url": "https://guildcapitaldale.shop/", "status": 200 } ], "dom_hash": "e8b662a50dd64f2d54b1fad030251457e5e851986a45c2f476be2b125cb8c46a", "doc_hash": "d90967bfe90c3a720e23db0d82fb9a82fd5ed08d5693b75bb2f5988485671bac", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "guildcapitaldale.shop", "type": "A", "value": "188.114.97.0" }, { "name": "guildcapitaldale.shop", "type": "A", "value": "188.114.96.0" }, { "name": "guildcapitaldale.shop", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "guildcapitaldale.shop", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "127.0.1.9", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-28T02:12:40Z", "analysis_at": "2026-10-21T13:57:21Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 14, "suspicious": 4, "undetected": 30 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "spam", "Bfore.Ai PreCrime": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Spam (alphaMountain.ai)" }, "created": "2026-03-18T00:00:00Z", "updated": "2026-03-19T00:00:00Z", "first_seen": "2026-03-19T09:20:18Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:af8c" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:5372" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "meg.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.83.114" }, { "ttl": 21600, "type": "NS", "value": "meg.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "reese.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.175.140" } ], "dns_at": "2026-10-21T14:02:55Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "guildcapitaldale.shop" ], "issuer": "Google Trust Services / WE1", "serial": "a0cf39a681d3c30f13befb6205e59786", "sha256": "6fbefd2a4a1a275948ccf3332506aea0e31244063c66175da3c86a4bcbb66530", "subject": "guildcapitaldale.shop", "valid_to": "2026-12-11T04:05:13Z", "valid_from": "2026-09-12T03:05:17Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-28T02:14:50Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "guildcapitaldale.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-28T02:13:15Z", "first": "2026-10-28T02:13:15Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 44503 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://guildcapitaldale.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "ogUrl": "https://guildcapitaldale.shop/", "title": "Guildcapitaldale | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Guildcapitaldale", "description": "Guildcapitaldale delivers a premium, portfolio-style dashboard for AI-assisted trading, autonomous bots, and streamlined execution workflows—designed to empower decisive, data-driven decisions.", "canonicalUrl": "https://guildcapitaldale.shop/", "ogDescription": "Premium portfolio-style dashboard for AI-assisted trading and automated bots." }, "trackers": { "requests": 16, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 6 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 8, "tls": 65, "wait": 118, "connect": 56, "download": 33 }, "response_ms": 280 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 152036, "co2_grams": 0.0056, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "172.64.35.117", "host": "reese.ns.cloudflare.com" }, { "ip": "173.245.58.196", "host": "meg.ns.cloudflare.com" } ], "zone": "guildcapitaldale.shop" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "guildcapitaldale.shop" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "reese.ns.cloudflare.com", "meg.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"meg.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418084026, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::3", "2a06:98c1:3120::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=15552000; includeSubDomains; preload", "message": "HSTS max-age is 15552000, below the 31536000 minimum." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "default-src 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; frame-ancestors", "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://guildcapitaldale.shop" ] }, "linked_pages": { "internal_count": 46 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; script", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```