# PhishDestroy domain threat record: nototalkcapital.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/nototalkcapital.net/
Machine-readable companion: https://phishdestroy.io/domain/nototalkcapital.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 20:05:23 UTC
- Last availability or vendor check: 2026-10-26 20:05:23 UTC
- Stored record updated: 2026-10-26 21:00:11 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-21 01:06:26 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a179cf-7d63-72a8-9698-64e96c0aca0f/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/nototalkcapital.net
- Certificate Transparency search: https://crt.sh/?q=%25.nototalkcapital.net
- Web Archive lookup: https://web.archive.org/web/*/https://nototalkcapital.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot dated 2026-10-26 shows a Japanese-language marketing page branded Nototalk Capital, with a headline about changing tomorrow and setting a new standard, navigation covering reasons to choose it, our strengths, features and contact, an JA language selector and two calls to action. PhishDestroy listed the domain on 2026-10-26 after an intake assessment rated it malicious with 90% confidence and tied it to an AI trading investment theme. It was first seen on 2026-10-26.

How the scam works
The page functions as a promotional front for an AI trading investment scheme, using polished branding and feature-focused buttons to draw visitors toward an investment offer. As a category risk, pages of this kind typically continue into off-site messaging or data and deposit collection after a visitor engages, while the capture itself showed no pricing, no risk disclosure and no sign of a regulated operator behind the pitch.

Evidence
The screenshot shows the Nototalk Capital wordmark, a Japanese headline, navigation links, an JA language selector and buttons reading 選ばれる理由を見る and 機能・特徴を探す, with no payment form visible in the capture. PhishDestroy intake AI assessed the domain as malicious with 90% confidence on 2026-10-26, citing an AI trading platform theme. VirusTotal did not flag the domain as malicious, though a vendor marked it suspicious on 2026-10-26; Google Safe Browsing did not flag it and OTX recorded zero pulses, both on 2026-10-26. A page fetch on 2026-10-26 returned HTTP 200 with no cross-site redirect, and these negatives do not indicate the domain is safe.

Infrastructure
The domain was created on 2026-07-21 and registered through Dynadot Inc, with a recorded hosting address and retained nameserver records; no CDN or firewall vendor was identified in the recorded data. It was first seen 97 days after registration, on 2026-10-26, a short-lived registration history typical of campaign domains.

What to do
If you submitted contact details or investment funds after engaging with the captured page, change any password you reused on the genuine service, enable two-factor authentication, and alert your financial provider about the transactions. Treat any investment promise from this page as unverified and do not send further funds. Defenders should block nototalkcapital.net at the DNS or proxy layer, monitor for similar lures, and retain the capture for pivoting.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a179cf-7d63-72a8-9698-64e96c0aca0f/
Stored capture screenshot: https://i.ibb.co/mCMPDzzs/2d06666f5209.png
VirusTotal report: https://www.virustotal.com/gui/domain/nototalkcapital.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=nototalkcapital.net
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:10:57 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/mCMPDzzs/2d06666f5209.png
  Captured: 2026-10-26 20:05:23 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a179cf-7d63-72a8-9698-64e96c0aca0f.png
  Captured: 2026-10-26 20:05:23 UTC
  Source report: https://urlscan.io/result/01a179cf-7d63-72a8-9698-64e96c0aca0f/
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179d4-e9de-768a-b97d-8c318d48b7ab.png
  Captured: 2026-10-26 20:09:29 UTC
  Source report: https://urlscan.io/result/01a179d4-e9de-768a-b97d-8c318d48b7ab/
  SHA-256: b1fea920bec9d2afa1631774e1d16c9da9855ba30d2945282771719dfe03113a
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4b190a5f-9ec3-4f4b-9bd4-841f2007ddb3.png
  Source report: https://radar.cloudflare.com/scan/4b190a5f-9ec3-4f4b-9bd4-841f2007ddb3
  SHA-256: 58f8a97e54e0b46947187a7d49401616c366a126a085861ddbd61a43bd95e702
- URLQuery: https://screenshots.phishdestroy.io/uq/66d4a820-13c9-4ef3-a718-6652900f8acb.png
  Source report: https://urlquery.net/report/66d4a820-13c9-4ef3-a718-6652900f8acb
  SHA-256: 0fc3bcdeb87a568945ea51991343107254b7d7001b8f16787742f1fbbee9b0aa

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:19:21Z",
        "uuid": "01a179cf-7d63-72a8-9698-64e96c0aca0f",
        "scanned_at": "2026-10-26T20:05:06Z",
        "final_url": "https://nototalkcapital.net/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://nototalkcapital.net/",
                "from": "http://nototalkcapital.net/",
                "status": 307
            },
            {
                "to": "http://nototalkcapital.net/",
                "from": "https://nototalkcapital.net/",
                "status": 307
            },
            {
                "to": "https://nototalkcapital.net/",
                "from": "http://nototalkcapital.net/",
                "status": 301
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "0a5828f13b7499ed9d4f117d61acef059708c98d14ba74ce7e8510c2a14cccf2",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "navToggle",
            "mainNav",
            "langSwitcher",
            "langBtn",
            "bars",
            "barObserver"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "nototalkcapital.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "nototalkcapital.net",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-30T20:40:57Z",
            "valid_from": "2026-09-01T20:40:58Z"
        },
        "domain_age_days": 97,
        "apex_age_days": 97,
        "tls_age_days": 54,
        "tls_valid_days": 89,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T20:36:05Z",
        "analysis_at": "2026-10-26T06:41:20Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 0,
            "suspicious": 1,
            "undetected": 38
        },
        "detections": {
            "ESET": "suspicious"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-07-21T03:06:26Z",
        "expires": "2027-07-21T03:06:26Z",
        "updated": "2026-08-13T12:44:00Z",
        "first_seen": "2026-07-21T04:07:43Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.nototalkcapital.net",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-26T06:41:41Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "nototalkcapital.net"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "57fc3a6eb807ca108cc5ebca8ee733c72d5",
            "sha256": "b83e96950a994f29e8410106501d13c9d5a54765246df4aed809e579f58766f6",
            "subject": "nototalkcapital.net",
            "valid_to": "2026-11-30T20:40:57Z",
            "valid_from": "2026-09-01T20:40:58Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-07-21T03:06:26Z",
            "updated": "2026-08-13T12:44:00Z",
            "expires": "2027-07-21T03:06:26Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-21T03:06:26Z",
                "last changed": "2026-09-01T13:42:06Z",
                "registration": "2026-07-21T03:06:26Z",
                "registrar expiration": "2027-07-21T03:06:26Z",
                "last update of RDAP database": "2026-10-23T10:56:42Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:36:39Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "nototalkcapital.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T20:06:41Z",
            "first": "2026-10-26T20:06:41Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 25011
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://nototalkcapital.net/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "AIトレーディングプラットフォームで賢い投資 — Nototalk Capital",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "シームレスな統合基盤 & インテリジェント連携 — Nototalk Capitalは、積極的な投資家が自動売買システムを活用して資産運用を最適化できるようサポートします。",
            "canonicalUrl": "https://nototalkcapital.net/"
        },
        "trackers": {
            "requests": 38,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 974,
                "tls": 91,
                "wait": 1814,
                "connect": 105,
                "download": 252
            },
            "response_ms": 3236
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 96897,
            "co2_grams": 0.0035,
            "cleaner_than": 23
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "nototalkcapital.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "connect.sid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "nototalkcapital.net"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.nototalkcapital.net\", \"serial\": 2026090101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://nototalkcapital.net"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Node.js",
                "Express",
                "lit-html",
                "lit-element",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 25
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-21T03:06:26Z",
            "updated": "2026-08-13T12:44:00Z",
            "expires": "2027-07-21T03:06:26Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```