# PhishDestroy domain threat record: litecoinsofficialtrade.cc Content language: English Canonical HTML report: https://phishdestroy.io/domain/litecoinsofficialtrade.cc/ Machine-readable companion: https://phishdestroy.io/domain/litecoinsofficialtrade.cc/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-26 22:02:35 UTC - Stored record updated: 2026-10-26 22:38:12 UTC - VirusTotal detections in the stored snapshot: 4/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: ankr ## Stored infrastructure - Observed IP address: 198.251.81.188 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-24 15:03:47 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a178b0-d45d-776c-a94e-f9b519efde72/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/litecoinsofficialtrade.cc - Certificate Transparency search: https://crt.sh/?q=%25.litecoinsofficialtrade.cc - Web Archive lookup: https://web.archive.org/web/*/https://litecoinsofficialtrade.cc/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI classified litecoinsofficialtrade.cc as malicious because the page presents itself as a Bitcoin and cryptocurrency investment service and urges visitors to “Connect Wallet”, a common lure for fraudulent investment schemes. The site was first observed by PhishDestroy on 2026-10-26, just two days after the domain was registered on 2026-10-24. An HTTP 200 response was recorded on the same day, indicating the page was reachable at that time. How the scam works Fake cryptocurrency investment sites typically promise high returns and ask users to link their crypto wallets. Once a wallet is connected, the operator can request transaction approvals and drain the funds without the victim’s knowledge. Evidence URLScan captured the page on 2026-10-26 and returned a malicious verdict with a score of 100, categorising it as phishing. VirusTotal’s scan on the same date reported four detections, three of which labeled the domain malicious and one as suspicious, from a total of 92 engines. Google Safe Browsing did not flag the URL, OTX listed two pulses mentioning the domain, and PhishDestroy’s internal blocklist contains the domain while external blocklists showed no entries. Infrastructure The domain was registered with Dynadot Inc on 2026-10-24 and resolves to IP 198.251.81.188, hosted by FranTech Solutions in the United States. The site uses a Let’s Encrypt TLS certificate valid from 2026-10-24 to 2027-01-22 and the web server identified itself as LiteSpeed. What to do Visitors should avoid clicking any “Connect Wallet” buttons and should not enter private keys or seed phrases on the site. If a wallet was connected, immediately revoke all approvals and consider moving assets to a new, secure wallet. Defenders can block the domain at the network perimeter and review logs for any connections to the recorded IP address. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a178b0-d45d-776c-a94e-f9b519efde72/ Cloudflare Radar report: https://radar.cloudflare.com/scan/c3fb2a41-5dba-4658-974e-45553a185bab Stored capture screenshot: https://urlscan.io/screenshots/01a178b0-d45d-776c-a94e-f9b519efde72.png Cloudflare Radar screenshot (2026-10-26T22:05:09Z): https://screenshots.phishdestroy.io/cf/c3fb2a41-5dba-4658-974e-45553a185bab.png VirusTotal report: https://www.virustotal.com/gui/domain/litecoinsofficialtrade.cc Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=litecoinsofficialtrade.cc Archived copy: https://web.archive.org/web/20261026220502/https://litecoinsofficialtrade.cc/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-26 22:36:29 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a178b0-d45d-776c-a94e-f9b519efde72.png Captured: 2026-10-26 22:02:35 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a178b0-d45d-776c-a94e-f9b519efde72.png Source report: https://urlscan.io/result/01a178b0-d45d-776c-a94e-f9b519efde72/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c3fb2a41-5dba-4658-974e-45553a185bab.png Captured: 2026-10-26 22:05:09 UTC Source report: https://radar.cloudflare.com/scan/c3fb2a41-5dba-4658-974e-45553a185bab SHA-256: 059cb139a60dc714eb02c40798aa5e74d3641cc52118ad9eaa15363dc8ced08e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T22:05:57Z", "uuid": "01a178b0-d45d-776c-a94e-f9b519efde72", "scanned_at": "2026-10-26T14:50:28Z", "final_url": "https://litecoinsofficialtrade.cc/", "status": 200, "ip": "198.251.81.188", "ptr": "s12.my-control-panel.com", "domains": [ "fonts.gstatic.com", "www.youtube.com", "code.jivosite.com", "coin-images.coingecko.com", "www.gstatic.com", "jnn-pa.googleapis.com", "googleads.g.doubleclick.net", "translate-pa.googleapis.com", "i.ytimg.com", "node-sb1-az1-27.jivosite.com", "www.google.com", "static.doubleclick.net", "api.coingecko.com", "translate.googleapis.com", "widgets.coingecko.com", "translate.google.com" ], "ips": [ "2001:4860:4844:400::", "2001:4860:4846:400::", "2001:4860:4820:600::", "5.252.32.145", "142.251.156.119", "142.251.157.4", "2a00:1450:4001:c25::94", "142.251.110.157", "2606:4700:3034::6815:3f20", "142.251.13.94", "2001:4860:4828:400::", "172.66.172.219", "2a00:1450:4001:c17::5f", "2a00:1450:4001:c21::5e", "2a13:1ec0::1037" ], "asns": [ "15169", "59796", "13335", "201589", "53667" ], "countries": [ "US", "SK", "DE", "AM" ], "link_domains": [ "translate.google.com", "autowalletconnecthub.com", "www.jivochat.com" ], "doc_hash": "bde3ad62cbe054953a1242910646d8d7ec94e9445230c574bf5b1d0fca561633", "script_hashes": [ "160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef", "864899acd5e30907a80dfb51d1d6d541f0c7f2ab692d671a46c216d6aca6d617", "118bc89d45113fced7ccd227a1c2daa6e9d52dd7fa5e7d4f4f5c6b38cea75b53", "7260b793661c409c4ee61edfd12e4dd71281f328746008e840655e7129429fe8", "6731844b3d9cd12abef210b8c374156d8448fae7d82682da2f49fbba03a72e92", "ee4a99978f49792845630da2169bf98164f013c7c88502d1928bd4c2c9628fab", "240fbd8c2b292c2323267e879f0173bbe7e4fbb330e80d46ec988cb39befaad3", "f41a3782c26daa128c1ae4edcf1b6ecc600cacc1dcd0b108d3aa00843c6b1fca", "66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a", "2fb896d59ab96b495498601fb1a0b126b53057ac7583e9ad13b319a3e532a943" ], "globals": [ "googleTranslateElementInit", "_DumpException", "google", "__core-js_shared__", "core", "default_tr", "_F_toggles_default_tr", "$", "jQuery", "bootstrap", "html5", "Modernizr", "yepnope", "objectFitImages", "_gsScope", "autosize", "Swiper", "EvEmitter", "imagesLoaded", "jarallax", "VideoWorker", "mediumZoom", "ScrollMagic", "jQueryBridget", "getSize", "matchesSelector", "fizzyUIUtils", "Outlayer", "Isotope", "Masonry", "_gsQueue", "GreenSockGlobals", "com", "_gsDefine", "Ease", "Power4", "Strong", "Quint", "Power3", "Quart" ], "cookies": [ "PHPSESSID", "__Secure-YNID", "YSC", "VISITOR_INFO1_LIVE", "VISITOR_PRIVACY_METADATA", "__Secure-ROLLOUT_TOKEN" ], "storage_keys": [ "modernizr", "testLocalStorage", "jv_loader_info_52GJbtXTko", "jv_store_52GJbtXTko_app", "jv_temp_sess_enter_ts_52GJbtXTko", "jv_temp_sess_vi_presence_52GJbtXTko", "jv_temp_visits_count_52GJbtXTko", "jv_store_52GJbtXTko_client", "jv_sync_52GJbtXTko", "jv_history_52GJbtXTko" ], "tls": { "san": [ "*.litecoinsofficialtrade.cc", "litecoinsofficialtrade.cc", "litecoinsofficialtrade.cc.wealthcoveempire.com", "www.litecoinsofficialtrade.cc.wealthcoveempire.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "www.litecoinsofficialtrade.cc.wealthcoveempire.com", "protocol": "TLS 1.3", "valid_to": "2027-01-22T22:01:33Z", "valid_from": "2026-10-24T22:01:34Z" }, "domain_age_days": 0, "apex_age_days": 0, "tls_age_days": 1, "tls_valid_days": 89, "requests": 107, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "generic" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/5.6.40" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T22:05:59Z", "uuid": "c3fb2a41-5dba-4658-974e-45553a185bab", "scanned_at": "2026-10-26T22:05:09Z", "final_url": "https://litecoinsofficialtrade.cc/", "status": 200, "history": [ { "url": "https://litecoinsofficialtrade.cc/", "status": 200 } ], "dom_hash": "d7593ff87c98350cc6623d880e2de93520518cf489ba93a3523ea19eec3acd1f", "doc_hash": "f073145961f4ccbc1ec7bcea5c9383a3eb07b5162c0c9835323b0bc0e8379a44", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "Scam", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "litecoinsofficialtrade.cc", "type": "A", "value": "198.251.81.188" } ], "dnssec_valid": false, "ip": "198.251.81.188", "whois": { "registrar": "Dynadot Inc", "created": "2026-10-24T17:03:47Z", "updated": "2026-10-24T21:46:20Z", "expires": "2027-10-24T17:03:47Z", "nameservers": [ "ns17.my-control-panel.com", "ns18.my-control-panel.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T22:35:00Z", "analysis_at": "2026-10-26T10:57:45Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 3, "suspicious": 1, "undetected": 36 }, "detections": { "Netcraft": "malicious", "desenmascara.me": "malicious", "alphaMountain.ai": "suspicious", "Forcepoint ThreatSeeker": "malicious" }, "reputation": 0, "categories": { "Google": "financial_services", "alphaMountain.ai": "Suspicious (alphaMountain.ai)", "Forcepoint ThreatSeeker": "suspicious content" }, "registrar": "Dynadot Inc", "created": "2026-10-24T17:03:47Z", "expires": "2027-10-24T17:03:47Z", "updated": "2026-10-24T21:46:20Z", "first_seen": "2026-10-24T23:05:17Z", "dns": [ { "ttl": 14400, "type": "A", "value": "198.251.81.188" }, { "ttl": 14400, "type": "MX", "value": "litecoinsofficialtrade.cc", "priority": 0 }, { "ttl": 21600, "type": "NS", "value": "ns18.my-control-panel.com" }, { "ttl": 21600, "type": "NS", "value": "ns17.my-control-panel.com" }, { "ttl": 21600, "type": "SOA", "rname": "alerts.my-control-panel.com", "value": "ns17.my-control-panel.com" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:192.168.168.2 ~all" } ], "dns_at": "2026-10-26T11:41:00Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "*.litecoinsofficialtrade.cc", "litecoinsofficialtrade.cc", "litecoinsofficialtrade.cc.wealthcoveempire.com", "www.litecoinsofficialtrade.cc.wealthcoveempire.com" ], "issuer": "Let's Encrypt / YR1", "serial": "679d584eabb9295546b4f4ed4cbd3ac4869", "sha256": "21f83e15a8fb840d7b6d5508739bb06dc8ad68fa1c2b3c0bafc17dddfcda742b", "subject": "www.litecoinsofficialtrade.cc.wealthcoveempire.com", "valid_to": "2027-01-22T22:01:33Z", "valid_from": "2026-10-24T22:01:34Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-10-24T17:03:47Z", "updated": "2026-10-24T21:46:20Z", "expires": "2027-10-24T17:03:47Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns17.my-control-panel.com", "ns18.my-control-panel.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-10-24T17:03:47Z", "last changed": "2026-10-24T21:46:21Z", "registration": "2026-10-24T17:03:47Z", "registrar expiration": "2027-10-24T17:03:47Z", "last update of RDAP database": "2026-10-24T21:50:59Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T22:06:22Z", "mail_config": { "mx": [ "litecoinsofficialtrade.cc" ], "spf": "v=spf1 +a +mx +ip4:192.168.168.2 ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "caa_records": { "domain": "litecoinsofficialtrade.cc" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-26T22:05:02Z", "first": "2026-10-26T22:05:02Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 8987 }, "mixed_content": { "no_sri": [ "https://translate.google.com/translate_a/element.js", "https://widgets.coingecko.com/coingecko-coin-price-marquee-widget.js", "https://code.jivosite.com/widget/52GJbtXTko" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 167, "tls": 197, "wait": 1046, "connect": 191, "download": 381 }, "response_ms": 1982 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 50646, "co2_grams": 0.0019, "cleaner_than": 37 }, "dns_server": { "ns": [ { "ip": "198.251.81.188", "host": "ns17.my-control-panel.com" }, { "ip": "198.251.81.247", "host": "ns18.my-control-panel.com" } ], "zone": "litecoinsofficialtrade.cc" }, "location": { "ip": "198.251.81.188", "asn": "53667", "org": "FranTech Solutions", "city": "Staten Island", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "www.litecoinsofficialtrade.cc.wealthcoveempire.com" }, "dns": { "A": [ "198.251.81.188" ], "MX": [ "{\"exchange\": \"litecoinsofficialtrade.cc\", \"priority\": 0}" ], "NS": [ "ns17.my-control-panel.com", "ns18.my-control-panel.com" ], "SOA": "{\"nsname\": \"ns17.my-control-panel.com\", \"hostmaster\": \"alerts.my-control-panel.com\", \"serial\": 2026102414, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:192.168.168.2 ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "198.251.81.188", "family": 4 }, "redirects": { "chain": [ "https://litecoinsofficialtrade.cc" ] }, "linked_pages": { "external": [ "https://autowalletconnecthub.com/" ], "external_count": 1, "internal_count": 14 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-10-24T17:03:47Z", "updated": "2026-10-24T21:46:20Z", "expires": "2027-10-24T17:03:47Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns17.my-control-panel.com", "ns18.my-control-panel.com" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/5.6.40" } } } } ```