# PhishDestroy domain threat record: halaltrade-ai.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/halaltrade-ai.com/ Machine-readable companion: https://phishdestroy.io/domain/halaltrade-ai.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-28 02:13:01 UTC - Last availability or vendor check: 2026-10-28 11:00:23 UTC - Stored record updated: 2026-10-28 11:23:05 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.97.1 - Registrar in stored WHOIS data: MainReg Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-01-25 11:18:03 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019ff4ba-3fe7-773e-9613-5ad199c70f40/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/halaltrade-ai.com - Certificate Transparency search: https://crt.sh/?q=%25.halaltrade-ai.com - Web Archive lookup: https://web.archive.org/web/*/https://halaltrade-ai.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added halaltrade-ai.com to its internal blocklist on 2026-10-28 after the domain was first seen by the service. The recorded page title reads “Halal Trade AI | AI Trading Platform | Official Website”. An HTTP 200 response was observed on the same date. No external blocklists flagged the domain, but it is present on PhishDestroy’s internal list. How the scam works The detections suggest the site could be used for phishing, malware delivery, or fraudulent financial offers, but no specific malicious behavior was observed on the page itself. Fake AI‑driven trading sites typically lure visitors into providing credentials, installing software, or making payments under false pretenses. Without concrete evidence of a particular payload, the risk remains generic to fraudulent or malicious schemes. Evidence VirusTotal scanned the domain on 2026-10-22 (retrieved 2026-10-28) and reported 13 malicious and 5 suspicious detections out of 92 engines, for a total of 18 hits. Vendors marking it malicious include BitDefender, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker and others. Google Safe Browsing reported no flag on 2026-10-28. urlscan captured the site on 2026-08-12; its engine verdict was malicious with a score of 96, while the overall verdict was clean. OTX listed one pulse referencing the domain on 2026-10-28. PhishDestroy’s internal blocklist marks the domain as malicious, and external blocklist checks returned zero hits. Infrastructure The domain was registered on 2026-01-25 through MainReg Inc. Hosting is provided via Cloudflare, with recorded IPs 188.114.97.1 and 104.21.65.141. TLS is served by a Google Trust Services certificate valid until 2027-01-06. DNS records show A and AAAA entries pointing to Cloudflare edge nodes and an MX record for mail.halaltrade-ai.com. What to do Avoid entering login credentials, personal data, or financial information on this site. If such data was submitted, change associated passwords and monitor accounts for unauthorized activity. Security teams should block the domain, review access logs for connections, and apply URL filtering to prevent future access. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019ff4ba-3fe7-773e-9613-5ad199c70f40/ Cloudflare Radar report: https://radar.cloudflare.com/scan/11efaf86-71dd-46f5-b4fd-261e54e29bf8 Stored capture screenshot: https://urlscan.io/screenshots/019ff4ba-3fe7-773e-9613-5ad199c70f40.png Cloudflare Radar screenshot (2026-10-28T02:20:54Z): https://screenshots.phishdestroy.io/cf/11efaf86-71dd-46f5-b4fd-261e54e29bf8.png URLScan screenshot (2026-01-26T04:40:21Z): https://screenshots.phishdestroy.io/us/019bf89a-3f42-75f4-8f58-d41cbc3562d6.png URLScan capture report: https://urlscan.io/result/019bf89a-3f42-75f4-8f58-d41cbc3562d6/ URLScan screenshot (2026-01-27T04:19:16Z): https://screenshots.phishdestroy.io/us/019bfdad-4747-765d-aab8-898b0b4ddf97.png URLScan capture report: https://urlscan.io/result/019bfdad-4747-765d-aab8-898b0b4ddf97/ URLScan screenshot (2026-01-28T04:19:18Z): https://screenshots.phishdestroy.io/us/019c02d3-a747-748a-8eff-da5cc370ee36.png URLScan capture report: https://urlscan.io/result/019c02d3-a747-748a-8eff-da5cc370ee36/ URLScan screenshot (2026-01-29T04:51:57Z): https://screenshots.phishdestroy.io/us/019c0817-ed11-737d-9ec3-224123d1f736.png URLScan capture report: https://urlscan.io/result/019c0817-ed11-737d-9ec3-224123d1f736/ URLScan screenshot (2026-08-11T14:00:26Z): https://screenshots.phishdestroy.io/us/019ff11f-c70b-721a-a0b7-de3057b0d62d.png URLScan capture report: https://urlscan.io/result/019ff11f-c70b-721a-a0b7-de3057b0d62d/ VirusTotal report: https://www.virustotal.com/gui/domain/halaltrade-ai.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=halaltrade-ai.com Archived copy: https://web.archive.org/web/20261028021508/https://halaltrade-ai.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-28 02:28:12 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019ff4ba-3fe7-773e-9613-5ad199c70f40.png Captured: 2026-10-28 02:13:01 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/019ff4ba-3fe7-773e-9613-5ad199c70f40.png Captured: 2026-10-28 04:31:00 UTC Source report: https://urlscan.io/result/019ff4ba-3fe7-773e-9613-5ad199c70f40/ - URLScan · 2026-01-26: https://screenshots.phishdestroy.io/us/019bf89a-3f42-75f4-8f58-d41cbc3562d6.png Captured: 2026-01-26 04:40:21 UTC Source report: https://urlscan.io/result/019bf89a-3f42-75f4-8f58-d41cbc3562d6/ SHA-256: 08f90e439c710749286f05f17c244ccdab074149f14bd03a05a41c638acf98ea - URLScan · 2026-01-27: https://screenshots.phishdestroy.io/us/019bfdad-4747-765d-aab8-898b0b4ddf97.png Captured: 2026-01-27 04:19:16 UTC Source report: https://urlscan.io/result/019bfdad-4747-765d-aab8-898b0b4ddf97/ SHA-256: 595ff6d6301db50550757d6c660460999382d7d4ba66fb60b38b8a4be23ff3c4 - URLScan · 2026-01-28: https://screenshots.phishdestroy.io/us/019c02d3-a747-748a-8eff-da5cc370ee36.png Captured: 2026-01-28 04:19:18 UTC Source report: https://urlscan.io/result/019c02d3-a747-748a-8eff-da5cc370ee36/ SHA-256: 595ff6d6301db50550757d6c660460999382d7d4ba66fb60b38b8a4be23ff3c4 - URLScan · 2026-01-29: https://screenshots.phishdestroy.io/us/019c0817-ed11-737d-9ec3-224123d1f736.png Captured: 2026-01-29 04:51:57 UTC Source report: https://urlscan.io/result/019c0817-ed11-737d-9ec3-224123d1f736/ SHA-256: 595ff6d6301db50550757d6c660460999382d7d4ba66fb60b38b8a4be23ff3c4 - URLScan · 2026-08-11: https://screenshots.phishdestroy.io/us/019ff11f-c70b-721a-a0b7-de3057b0d62d.png Captured: 2026-08-11 14:00:26 UTC Source report: https://urlscan.io/result/019ff11f-c70b-721a-a0b7-de3057b0d62d/ SHA-256: 859bd9bd02f33da80dcc60261786db884c47d9824f277fc3ab88254f75286378 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/11efaf86-71dd-46f5-b4fd-261e54e29bf8.png Captured: 2026-10-28 02:20:54 UTC Source report: https://radar.cloudflare.com/scan/11efaf86-71dd-46f5-b4fd-261e54e29bf8 SHA-256: 6d5f1069336b836eccb181d2264ba3155dcb19b96bf0fc69ad56839c5207f3e1 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-28T02:27:17Z", "uuid": "019ff4ba-3fe7-773e-9613-5ad199c70f40", "scanned_at": "2026-08-12T06:48:02Z", "final_url": "https://halaltrade-ai.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://halaltrade-ai.com/", "from": "http://halaltrade-ai.com/", "status": 307 } ], "ip": "104.21.65.141", "domains": [ "cdnjs.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com" ], "ips": [ "104.17.208.5", "173.194.45.95", "104.17.25.14", "104.21.65.141" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "230023e30347d1f317f01b06b36ef1df550c36f5291a13df320392dde18eeb3e", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_zmh7ni", "toggleTermsPopup", "__cfQR", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "halaltrade-ai.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "halaltrade-ai.com", "protocol": "QUIC", "valid_to": "2026-11-08T08:00:10Z", "valid_from": "2026-08-10T07:00:15Z" }, "domain_age_days": 198, "apex_age_days": 198, "tls_age_days": 1, "tls_valid_days": 90, "requests": 16, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "img-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://cloudflareinsights.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.ne", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-28T02:27:20Z", "uuid": "11efaf86-71dd-46f5-b4fd-261e54e29bf8", "scanned_at": "2026-10-28T02:20:54Z", "final_url": "https://halaltrade-ai.com/", "status": 200, "history": [ { "url": "https://halaltrade-ai.com/", "status": 200 } ], "dom_hash": "65f5edbe7c32e7b292ff318ec5b0717afbbb350c3794aaf699162d0b97fef574", "doc_hash": "23471debc628924437e44ed64b017236a6af0eb9de8b354a4a2e00a8b1886faa", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "halaltrade-ai.com", "type": "A", "value": "188.114.97.0" }, { "name": "halaltrade-ai.com", "type": "A", "value": "188.114.96.0" }, { "name": "halaltrade-ai.com", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "halaltrade-ai.com", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "127.0.1.12", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "MainReg Inc.", "created": "2026-01-25T12:18:03Z", "updated": "2026-02-05T09:39:59Z", "expires": "2027-01-25T12:18:03Z", "nameservers": [ "carrera.ns.cloudflare.com", "elmo.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-28T02:19:17Z", "analysis_at": "2026-10-22T16:36:04Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 13, "suspicious": 5, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "PREBYTES": "suspicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "spam", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "PREBYTES": "fraud", "BitDefender": "financial", "alphaMountain.ai": "Spam (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "created": "2026-01-25T00:00:00Z", "updated": "2026-01-25T00:00:00Z", "first_seen": "2026-01-25T15:07:26Z", "dns": [ { "ttl": 300, "type": "MX", "value": "mail.halaltrade-ai.com", "priority": 10 }, { "ttl": 300, "type": "A", "value": "172.67.163.230" }, { "ttl": 300, "type": "A", "value": "104.21.65.141" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:a3e6" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:418d" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "carrera.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "carrera.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "elmo.ns.cloudflare.com" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 ip4:46.166.131.92 ~all" }, { "ttl": 300, "type": "TXT", "value": "google-site-verification=NtbwX89pMgW2P4rSm0PHYw4dfr8dQoXvVZ_21pL2tDo" } ], "dns_at": "2026-10-22T16:36:32Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "halaltrade-ai.com" ], "issuer": "Google Trust Services / WE1", "serial": "8476aa58d10b36700e178846e31d8143", "sha256": "335b197b3febca9e87e3aa919281d12b35a7570d6a1ad4b628b9eda42985222e", "subject": "halaltrade-ai.com", "valid_to": "2027-01-06T10:43:36Z", "valid_from": "2026-10-08T09:43:39Z" }, "whois": [], "rdap": { "status": [ "active" ], "events": { "last changed": "2026-02-05T00:00:00Z", "registration": "2026-01-25T00:00:00Z", "registrar expiration": "2027-01-25T00:00:00Z", "last update of RDAP database": "2026-10-18T11:57:00Z" }, "registrar": "MainReg Inc.", "registrar_iana_id": "1917" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-28T02:26:22Z", "mail_config": { "mx": [ "mail.halaltrade-ai.com" ], "spf": "v=spf1 ip4:46.166.131.92 ~all", "spf_lookups": 0 }, "caa_records": { "domain": "halaltrade-ai.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://halaltrade-ai.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "ogUrl": "https://halaltrade-ai.com/", "title": "Halal Trade AI | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Halal Trade AI — Premium AI-Driven Trading Assistance & Automation", "ogSiteName": "Halal Trade AI", "themeColor": "#0f1114", "description": "Experience Halal Trade AI: a premium AI-driven trading assistant and automation toolkit for CFD and forex workflows, delivering streamlined setup, precise controls, and actionable insights.", "twitterCard": "summary", "canonicalUrl": "https://halaltrade-ai.com/", "ogDescription": "Discover Halal Trade AI: a premium AI-driven trading assistant and automation toolkit crafted for CFD and forex workflows, providing streamlined setup, precise controls, and actionable execution insights." }, "trackers": { "requests": 17, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 2 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 21, "wait": 136, "connect": 10, "download": 37 }, "response_ms": 206 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 140288, "co2_grams": 0.0051, "cleaner_than": 15 }, "dns_server": { "ns": [ { "ip": "162.159.38.231", "host": "carrera.ns.cloudflare.com" }, { "ip": "172.64.33.163", "host": "elmo.ns.cloudflare.com" } ], "zone": "halaltrade-ai.com" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "halaltrade-ai.com" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "MX": [ "{\"exchange\": \"mail.halaltrade-ai.com\", \"priority\": 10}" ], "NS": [ "carrera.ns.cloudflare.com", "elmo.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"carrera.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418084862, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 ip4:46.166.131.92 ~all", "google-site-verification=NtbwX89pMgW2P4rSm0PHYw4dfr8dQoXvVZ_21pL2tDo" ], "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://c", "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://halaltrade-ai.com" ] }, "linked_pages": { "internal_count": 12 }, "whois": { "registrar": "MainReg Inc.", "created": "2026-01-25T12:18:03Z", "updated": "2026-02-05T09:39:59Z", "expires": "2027-01-25T12:18:03Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "carrera.ns.cloudflare.com", "elmo.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; default-src 'self'; frame-src https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://st", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```