# PhishDestroy domain threat record: net-rowdex.org

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/net-rowdex.org/
Machine-readable companion: https://phishdestroy.io/domain/net-rowdex.org/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 20:05:08 UTC
- Last availability or vendor check: 2026-10-26 20:05:08 UTC
- Stored record updated: 2026-10-26 21:00:11 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: binance

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-19 15:37:25 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a179cf-55d0-711c-9a47-6fbdb3a7d7d4/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/net-rowdex.org
- Certificate Transparency search: https://crt.sh/?q=%25.net-rowdex.org
- Web Archive lookup: https://web.archive.org/web/*/https://net-rowdex.org/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot shows a polished Net Rowdex landing page promoting institutional-grade digital asset intelligence, with a Request a Demo button and navigation links for Features, FAQ, Why Choose Us and Contact. PhishDestroy listed the domain following a trusted report, first seen on 2026-10-26, seven days after its 2026-10-19 registration.

How the scam works
The page invites visitors to request a demo of a unified liquidity dashboard claiming to consolidate balances, order books and exposure data from multiple exchanges into one screen. In this category of risk, such a demo request draws interested users into submitting contact details whose later use, including follow-up outreach, enables targeted social engineering aimed at digital-asset accounts.

Evidence
The screenshot shows the hero offer Unified Liquidity Intelligence for Digital Asset Portfolios, buttons for Request a Demo and View Core Capabilities, and a dashboard overview description, with no login form or wallet prompt visible. At intake on 2026-10-26 VirusTotal had not flagged the domain, Google Safe Browsing had not flagged it on 2026-10-26, and urlscan returned a clean verdict for a capture taken on 2026-10-20. OTX recorded 1 pulse as of 2026-10-26, while a page fetch on 2026-10-26 returned HTTP 200 with no cross-site redirect. These negatives are not clearance, and the domain was accepted as a trusted report on 2026-10-26 at age 7 days.

Infrastructure
Registration is recorded under Dynadot Inc, created 2026-10-19, alongside a single recorded hosting address with no CDN or firewall identified in the retained signals. No TLS, security-header, email-authentication, CAA or DNSSEC posture was captured for this domain, so those checks remain unassessed rather than clean.

What to do
If you submitted details through a demo request, end correspondence with any sender from this domain and treat follow-up messages asking for credentials, remote access or funds as malicious. Review the accounts tied to the information you sent and alert your security team to suspicious outreach. Defenders should block net-rowdex.org at proxy, DNS and mail controls and monitor for lookalike domain registrations.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a179cf-55d0-711c-9a47-6fbdb3a7d7d4/
Stored capture screenshot: https://i.ibb.co/q3g5r19n/6dbf66426eb6.png
VirusTotal report: https://www.virustotal.com/gui/domain/net-rowdex.org
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=net-rowdex.org
Archived copy: https://web.archive.org/web/20261026200333/https://net-rowdex.org/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:10:46 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/q3g5r19n/6dbf66426eb6.png
  Captured: 2026-10-26 20:05:08 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a179cf-55d0-711c-9a47-6fbdb3a7d7d4.png
  Captured: 2026-10-26 20:05:08 UTC
  Source report: https://urlscan.io/result/01a179cf-55d0-711c-9a47-6fbdb3a7d7d4/
- URLScan capture 2: https://urlscan.io/screenshots/01a158cd-f116-7655-8cde-d8985d39a865.png
  Captured: 2026-10-26 20:02:02 UTC
  Source report: https://urlscan.io/result/01a179cf-55d0-711c-9a47-6fbdb3a7d7d4/
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a156ee-9614-7478-bc1a-a08cd8208e24.png
  Captured: 2026-10-20 01:30:45 UTC
  Source report: https://urlscan.io/result/01a156ee-9614-7478-bc1a-a08cd8208e24/
  SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15dfd-d673-72ce-af57-91b628c49e8e.png
  Captured: 2026-10-21 10:24:46 UTC
  Source report: https://urlscan.io/result/01a15dfd-d673-72ce-af57-91b628c49e8e/
  SHA-256: 987a565116d919d26c9609645a089f5cd3d44dd4557449d5de6719801efe4b3c
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179d4-694b-710b-ac5b-807b5655849c.png
  Captured: 2026-10-26 20:09:02 UTC
  Source report: https://urlscan.io/result/01a179d4-694b-710b-ac5b-807b5655849c/
  SHA-256: 4c54f9f9a58d7ce30f6712ac0a411cbaad5f1c87e59195345e6f9a6c78358006
- URLQuery: https://screenshots.phishdestroy.io/uq/b47c9caa-02a5-44ea-b51e-c2cca456b4f5.png
  Source report: https://urlquery.net/report/b47c9caa-02a5-44ea-b51e-c2cca456b4f5
  SHA-256: 21700571c6928d980900c3748b3c5dcfbccc9213eaf315a01cd2c3b908bd1bd5

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:19:21Z",
        "uuid": "01a179cf-55d0-711c-9a47-6fbdb3a7d7d4",
        "scanned_at": "2026-10-26T20:03:31Z",
        "final_url": "https://net-rowdex.org/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://net-rowdex.org/",
                "from": "http://net-rowdex.org/",
                "status": 307
            },
            {
                "to": "http://net-rowdex.org/",
                "from": "https://net-rowdex.org/",
                "status": 307
            },
            {
                "to": "https://net-rowdex.org/",
                "from": "http://net-rowdex.org/",
                "status": 301
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "aa8fb7b26656f96836b333b423dc778cba12e0cd939df06ac568da75ad1aca3a",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.net-rowdex.org",
                "net-rowdex.org"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "net-rowdex.org",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-23T15:11:24Z",
            "valid_from": "2026-10-25T15:11:25Z"
        },
        "domain_age_days": 6,
        "apex_age_days": 6,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T20:35:21Z",
        "analysis_at": "2026-10-26T09:06:41Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-10-19T17:37:25Z",
        "expires": "2027-10-19T17:37:25Z",
        "updated": "2026-10-19T17:37:37Z",
        "first_seen": "2026-10-19T18:04:36Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.net-rowdex.org",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-26T09:21:16Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.net-rowdex.org",
                "net-rowdex.org"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "57636063723e2af1961631996025c0fca7d",
            "sha256": "29f3b784a29aa90c9a6e88c4801766ecd378faa452707529895a101edbc51d30",
            "subject": "net-rowdex.org",
            "valid_to": "2027-01-23T15:11:24Z",
            "valid_from": "2026-10-25T15:11:25Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-10-19T17:37:25Z",
            "updated": "2026-10-19T17:37:37Z",
            "expires": "2027-10-19T17:37:25Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "lana.ns.cloudflare.com",
                "mario.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-19T17:37:25Z",
                "last changed": "2026-10-19T17:37:38Z",
                "registration": "2026-10-19T17:37:25Z",
                "registrar expiration": "2027-10-19T17:37:25Z",
                "last update of RDAP database": "2026-10-19T17:46:59Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:36:53Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "net-rowdex.org"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-26T20:03:33Z",
            "first": "2026-10-26T20:03:33Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 23312
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://net-rowdex.org/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Net Rowdex — Unified AI Platform for Digital Asset Portfolios",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Discover with Net Rowdex a consolidated AI platform that unifies balances, risk exposure and arbitrage signals across every connected exchange. One dashboard, one source of truth.",
            "canonicalUrl": "https://net-rowdex.org/"
        },
        "trackers": {
            "requests": 47,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1207,
                "tls": 107,
                "wait": 111,
                "connect": 143,
                "download": 159
            },
            "response_ms": 1727
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "carbon": {
            "bytes": 83940,
            "co2_grams": 0.0031,
            "cleaner_than": 26
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "net-rowdex.org"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "net-rowdex.org"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.net-rowdex.org\", \"serial\": 2026102503, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://net-rowdex.org"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-19T17:37:25Z",
            "updated": "2026-10-25T15:15:32Z",
            "expires": "2027-10-19T17:37:25Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```