# ironcredmere.org AI trading platform sign-up page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/ironcredmere.org/ Machine-readable companion: https://phishdestroy.io/domain/ironcredmere.org/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-29 06:08:56 UTC - Last availability or vendor check: 2026-10-30 12:10:21 UTC - Stored record updated: 2026-10-30 14:07:53 UTC - VirusTotal detections in the stored snapshot: 19/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-08-06 10:04:44 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a18660-c1d2-7780-bf2d-2b8887016357/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/ironcredmere.org - Certificate Transparency search: https://crt.sh/?q=%25.ironcredmere.org - Web Archive lookup: https://web.archive.org/web/*/https://ironcredmere.org/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package The stored ironcredmere.org capture shows an AI-powered trading platform sign-up page, reviewed by PhishDestroy for reported security signals. The stored capture shows a landing page presenting IronCredmere as an AI-powered trading platform for cryptocurrency investing. Its main interaction is a sign-up form collecting first and last name, email and mobile phone, with a Join Now button and consent text referencing a privacy policy and terms of use. A chat widget offers FAQ, a message option and a free consultation button. The stored VirusTotal result reports 19 of 92 engines flagged the domain: 16 malicious and 3 suspicious. Representative labels include Sophos "phishing", Netcraft "malicious" and ESET "suspicious". These scanner results do not establish impersonation or current behavior. Package revision: 6d85acecc09e2f98655ef71eee79dce38e7f9a673be85c829055788f2165492f Text generated (not scan time): 2026-10-29 07:17:55 Reviewed evidence snapshot: {"domain":"ironcredmere.org","screenshot_available":true,"page_title":"IronCredmere | Official Website [2026] Platform","virustotal":{"detections":19,"engines":92,"malicious":16,"suspicious":3,"retrieved_date":"2026-10-29","analysis_date":"2026-10-26","flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","Certego","CyRadar","Fortinet","Netcraft","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Certego":"phishing","CyRadar":"phishing","Fortinet":"phishing","Netcraft":"malicious","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T06:16:15Z","final_host":"ironcredmere.org","captured_on":"2026-10-29"}} Source facts (timestamps as stored): {"record_id":1703695,"first_recorded_at":"2026-10-29 07:08:56","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":19,"denominator":92,"malicious":16,"suspicious":3,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Certego":"phishing","CyRadar":"phishing","Fortinet":"phishing","Netcraft":"malicious","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-26T19:05:04Z","checked_at":"2026-10-29 07:15:53","fetched_at":"2026-10-29T06:15:52Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":19,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Certego","Chong Lua Dao","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Netcraft","Seclookup","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-10-26 19:05:04","checked_at":"2026-10-29 07:15:53","fetched_at":"2026-10-29 06:15:54","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-30 12:03:03"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-29 08:30:24"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-30 13:10:21"}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a18660-c1d2-7780-bf2d-2b8887016357.png Captured: 2026-10-29 06:39:35 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0d67e-dfe7-721c-aa2d-d6c7b38ad894.png Captured: 2026-10-29 06:08:56 UTC Source report: https://urlscan.io/result/01a18660-c1d2-7780-bf2d-2b8887016357/ - URLScan · 2026-08-06: https://screenshots.phishdestroy.io/us/019fd89b-f856-76cb-a3b6-b07f753ce98c.png Captured: 2026-08-06 19:45:35 UTC Source report: https://urlscan.io/result/019fd89b-f856-76cb-a3b6-b07f753ce98c/ SHA-256: 1756d69140f3c6bd567dbf5be4e47644a52be6c4c26cddcf1482cb0f0315ce47 - URLScan · 2026-08-07: https://screenshots.phishdestroy.io/us/019fdaf2-0272-74f3-bf8d-7f0ad629a16c.png Captured: 2026-08-07 06:38:49 UTC Source report: https://urlscan.io/result/019fdaf2-0272-74f3-bf8d-7f0ad629a16c/ SHA-256: 58c3458fa0c0e6aaecbe8518ff238d5528f8712b8e267d19d07d34150b455821 - URLScan · 2026-08-09: https://screenshots.phishdestroy.io/us/019fe7ec-7b61-728a-bc4f-e5f9c3852ed6.png Captured: 2026-08-09 19:09:22 UTC Source report: https://urlscan.io/result/019fe7ec-7b61-728a-bc4f-e5f9c3852ed6/ SHA-256: b79f1faf40000beb347a469bc82f732e4c3c23a573901aded78123650206e093 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0843057a-382c-4eb3-90cc-ac122e9c6745.png Captured: 2026-10-29 06:16:15 UTC Source report: https://radar.cloudflare.com/scan/0843057a-382c-4eb3-90cc-ac122e9c6745 SHA-256: a2aeff1bc3f4634c9b86a1aa9d2677215376a28b6ccfca16c9d88b2d8c8b5cd3 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-29T07:15:38Z", "uuid": "01a18660-c1d2-7780-bf2d-2b8887016357", "scanned_at": "2026-10-29T06:37:41Z", "final_url": "https://ironcredmere.org/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://ironcredmere.org/", "from": "http://ironcredmere.org/", "status": 307 } ], "ip": "188.114.96.3", "domains": [ "widgets.tradingview-widget.com", "s3-symbol-logo.tradingview.com", "widgetdata.tradingview.com", "widget-sheriff.tradingview-widget.com" ], "ips": [ "185.111.111.157", "108.138.26.10", "65.9.130.73", "65.9.130.44", "188.114.96.3" ], "asns": [ "212238", "16509", "13335" ], "countries": [ "DE", "US" ], "doc_hash": "26d6c728efb3a3219a935677ad728621b6447c197c7e0b67bcd5d5c0cc5fa74f", "script_hashes": [ "51d2ac650d126800a65ca5671d2551e51fdcdb6e2e7759b65b7c59171d4dd1e9", "30625e824b8626a4aeac6ebcd2ea16de8353a851054e7d522edd590e7a531835", "a4bccfde5a153a7ec568ab723a792a97d9bf2dff76429a7a0cc2cf3509025f9c", "3af01327aa9b196c1313f25b4bd7aaac0511d84867a9b9fef0c84320eec69d52", "0161086d86459e982378b1ee575395ca76d9a50914276fbf039eb2e3073a3b67", "9c7f2b0007eeca5197ef0328287d323b93c041e7a121315faa9936fb74e89d2a", "60a23c832135d335f18c6dce43401c6973d999009a648e078bb1a65c5683a84e", "9523eead7091f1929fd1c309a8df06cf02821bc7ca282f5d086d5ca2cdc164e5", "85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf", "9843cb4e8bd3b56db36e9b269e39f65fa1ca788fa1d6000ac0ceda78e6276d79" ], "globals": [ "LAZY_ANALYTICS_CONFIG", "beaconGeoClient", "intlTelInputGlobals", "intlTelInput", "Validator", "beaconRiskBundle", "formInit", "FORM_DEBUG_ENABLED", "__CALC_INSTANCES__", "init", "openModal", "initSubmenuToggle", "__GEO_LEADERBOARD__", "__GEO_REVIEWS__", "localeLangPopupDismiss", "__lazyAnalyticsInitialized", "Calculator", "initModules", "isMobile", "resolveScreen", "hideAllScreens", "showScreen", "initToggle", "initClose", "initBack", "initNavigation", "initAccordion", "injectYoutubeThumbnails", "initChatbotBehavior", "initRandomOperators", "UIkit", "$", "jQuery", "orDoXrHUSq", "formReady_WEWkdH", "a_WEWkdH", "b_WEWkdH", "formLoaded", "KqMFGeaMoG", "formReady_tHduvdp" ], "tls": { "san": [ "*.ironcredmere.org", "ironcredmere.org" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "ironcredmere.org", "protocol": "QUIC", "valid_to": "2026-12-28T17:26:52Z", "valid_from": "2026-09-29T17:26:53Z" }, "domain_age_days": 83, "apex_age_days": 83, "tls_age_days": 29, "tls_valid_days": 89, "requests": 143, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 93, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-29T06:16:51Z", "uuid": "0843057a-382c-4eb3-90cc-ac122e9c6745", "scanned_at": "2026-10-29T06:16:15Z", "final_url": "https://ironcredmere.org/", "status": 200, "history": [ { "url": "https://ironcredmere.org/", "status": 200 } ], "dom_hash": "fd51294578269ba5023f2d9be9ada87d644c1841b5d223b5a5fef10493bcc163", "doc_hash": "415aca75f6843d3b3d9632bcd56191a04c4e173d90e1138140a9fed5b1dfc32e", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "Scam", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "ironcredmere.org", "type": "A", "value": "188.114.97.0" }, { "name": "ironcredmere.org", "type": "A", "value": "188.114.96.0" }, { "name": "ironcredmere.org", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "ironcredmere.org", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "127.0.1.8", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-08-06T12:04:44Z", "updated": "2026-09-29T18:15:26Z", "expires": "2027-08-06T12:04:44Z", "nameservers": [ "johnathan.ns.cloudflare.com", "margot.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-29T06:15:52Z", "analysis_at": "2026-10-26T19:05:04Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 16, "suspicious": 3, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Certego": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)" }, "registrar": "DYNADOT LLC", "created": "2026-08-06T12:04:44Z", "expires": "2027-08-06T12:04:44Z", "updated": "2026-09-29T18:15:26Z", "first_seen": "2026-08-06T12:48:16Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "margot.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::6815:33fb" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "johnathan.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "johnathan.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.192.131" }, { "ttl": 300, "type": "A", "value": "104.21.51.251" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::ac43:c083" } ], "dns_at": "2026-10-26T19:10:25Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.ironcredmere.org", "ironcredmere.org" ], "issuer": "Let's Encrypt / YE2", "serial": "695b1605de918e230bb1fe52d7f80553f61", "sha256": "17d040019acebe8af27b43563c4a245ace37082b4eed2dec87cba7b7fb88b204", "subject": "ironcredmere.org", "valid_to": "2026-12-28T17:26:52Z", "valid_from": "2026-09-29T17:26:53Z" }, "whois": { "registrar": "DYNADOT LLC", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-08-06T12:04:44Z", "updated": "2026-09-29T18:15:26Z", "expires": "2027-08-06T12:04:44Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "johnathan.ns.cloudflare.com", "margot.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-08-06T12:04:44Z", "last changed": "2026-09-29T18:15:26Z", "registration": "2026-08-06T12:04:44Z", "registrar expiration": "2027-08-06T12:04:44Z", "last update of RDAP database": "2026-10-23T11:01:46Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-29T06:17:13Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "ironcredmere.org" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-29T06:09:17Z", "first": "2026-10-29T06:09:17Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 538662 }, "social_tags": { "title": "IronCredmere | Official Website [2026] Platform", "robots": "index, follow", "canonicalUrl": "https://ironcredmere.org/" }, "trackers": { "requests": 79 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 17, "tls": 67, "wait": 934, "connect": 14, "download": 1155 }, "response_ms": 2187 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 1496870, "co2_grams": 0.0547, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "108.162.194.167", "host": "margot.ns.cloudflare.com" }, { "ip": "172.64.35.44", "host": "johnathan.ns.cloudflare.com" } ], "zone": "ironcredmere.org" }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "ironcredmere.org" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "margot.ns.cloudflare.com", "johnathan.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"johnathan.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416689715, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://ironcredmere.org" ] }, "linked_pages": { "internal_count": 36 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-08-06T12:04:44Z", "updated": "2026-09-29T18:15:26Z", "expires": "2027-08-06T12:04:44Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "johnathan.ns.cloudflare.com", "margot.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } } } } ```