# quartzflowai.capital: AI Trading Platform Landing Page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/quartzflowai.capital/ Machine-readable companion: https://phishdestroy.io/domain/quartzflowai.capital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Reachable · access restricted - First observed by PhishDestroy: 2026-11-02 10:20:45 UTC - Selected availability observation: 2026-11-02T12:07:52Z - Stored record updated: 2026-11-02 12:07:52 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 104.21.53.210 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 403 (observed: 2026-11-02T12:07:52Z) - Registration date in stored WHOIS data: 2026-05-19 12:58:01 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19bc4-bb32-750f-aca8-d9ae6163c2f1/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/quartzflowai.capital - Certificate Transparency search: https://crt.sh/?q=%25.quartzflowai.capital - Web Archive lookup: https://web.archive.org/web/*/https://quartzflowai.capital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records quartzflowai.capital as a page presenting an AI-powered trading platform with an account summary figure and cryptocurrency price listings. quartzflowai.capital presents itself as an AI-powered trading platform. The landing page features a large headline reading "Trade Effortlessly With Cutting-Edge Technology — A New Era Awaits," alongside a "Verified Strategy" badge and a call-to-action button labeled "GET STARTED." An account summary panel shows a figure of $141,280 with a rising chart, plus listings for BTC/USDT, ETH/USDT, and SOL/USDT. The stored VirusTotal domain result reports 18 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "suspicious". Package revision: 480eddfc2821c6f51fb16c7377d30f7c0144327dd0f54087c6eb42446cfa8d5d Text generated (not scan time): 2026-11-02 11:56:00 Reviewed evidence snapshot: {"domain":"quartzflowai.capital","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"quartzflowai.capital","final_host":"quartzflowai.capital","redirects":[{"to":"https://quartzflowai.capital/","from":"http://quartzflowai.capital/","status":307}],"captured_at":"2026-11-02T10:18:51.338000Z","uuid":"01a19bc4-bb32-750f-aca8-d9ae6163c2f1","report_url":"https://urlscan.io/result/01a19bc4-bb32-750f-aca8-d9ae6163c2f1/","sha256":"0887a156605449808d4bb81a286577fe07370ffe47e078f3dc641e845ef4e364","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":18,"engines":92,"malicious":14,"suspicious":4,"analysis_date":"2026-10-25","retrieved_date":"2026-11-02","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","PREBYTES":"suspicious","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Bfore.Ai PreCrime":"malicious","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Fortinet","PREBYTES","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Bfore.Ai PreCrime","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 18 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"suspicious\".","page_paragraph_target_characters":547} Source facts (timestamps as stored): {"record_id":1744011,"first_recorded_at":"2026-11-02 11:20:45","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":18,"denominator":92,"malicious":14,"suspicious":4,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","PREBYTES":"suspicious","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Bfore.Ai PreCrime":"malicious","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-25T10:22:07Z","checked_at":null,"fetched_at":"2026-11-02T10:51:45Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":18,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Bfore.Ai PreCrime","BitDefender","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","PREBYTES","Seclookup","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-10-25 10:22:07","checked_at":"2026-11-02 11:51:49","fetched_at":"2026-11-02 10:51:50","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","PREBYTES":"suspicious","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Bfore.Ai PreCrime":"malicious","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Fortinet","PREBYTES","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Bfore.Ai PreCrime","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":43,"malicious":14,"suspicious":4,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 11:52:11"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-02 12:30:13"},"availability":{"state":"restricted","label_key":"availability.access_restricted","detail_key":"detail.restricted","params":[],"source":"current_http_probe","record_id":1744011,"scope":"checked_url","observed_at":"2026-11-02T12:07:52Z","http_status":403,"http_observed_at":"2026-11-02T12:07:52Z","stored_http_code":403,"stored_http_observed_at":"2026-11-02T12:07:52Z","legacy_site_status":"dead","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19bc4-bb32-750f-aca8-d9ae6163c2f1.png Captured: 2026-11-02 10:18:51 UTC Source report: https://urlscan.io/result/01a19bc4-bb32-750f-aca8-d9ae6163c2f1/ SHA-256: 0887a156605449808d4bb81a286577fe07370ffe47e078f3dc641e845ef4e364 - URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a26a-f6c9-7248-9409-8d721a90d194.png Captured: 2026-09-15 00:15:20 UTC Source report: https://urlscan.io/result/01a0a26a-f6c9-7248-9409-8d721a90d194/ SHA-256: 2024d72e03ee41aa7b16ce38923aced9ee312aa19adf9ad1dd2471ae763a7911 - URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a4bf-e86f-7156-b462-b1db46c4cac1.png Captured: 2026-09-15 11:07:21 UTC Source report: https://urlscan.io/result/01a0a4bf-e86f-7156-b462-b1db46c4cac1/ SHA-256: 2024d72e03ee41aa7b16ce38923aced9ee312aa19adf9ad1dd2471ae763a7911 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7ee34900-bb49-4abf-aa9c-324c44b5251e.png Captured: 2026-11-02 10:52:35 UTC Source report: https://radar.cloudflare.com/scan/7ee34900-bb49-4abf-aa9c-324c44b5251e SHA-256: de762a2f243423f1cd8662817b10dd210ec41103a6c9fd2ec439c7803dea0074 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-02T10:23:17Z", "uuid": "01a19bc4-bb32-750f-aca8-d9ae6163c2f1", "scanned_at": "2026-11-02T10:18:51Z", "final_url": "https://quartzflowai.capital/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://quartzflowai.capital/", "from": "http://quartzflowai.capital/", "status": 307 } ], "ip": "172.67.218.214", "domains": [ "cdn.jsdelivr.net", "fonts.gstatic.com", "cdnjs.cloudflare.com", "modernroomdesigns.com", "fonts.googleapis.com" ], "ips": [ "151.101.193.229", "172.67.222.66", "142.250.154.94", "104.17.25.14", "2a04:4e42:600::485", "2a00:1450:4001:c0f::5f", "172.67.218.214" ], "asns": [ "54113", "13335", "15169" ], "countries": [ "US", "DE" ], "doc_hash": "8a9ebd0900773fd0d9ca3c853445e287878669986a81d3cea17a01a58a4a347c", "script_hashes": [ "4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885", "af93b897d52a896630f89a789b01919a54b0ba0356d90b52b61d850d9153e852", "f0e17009bb7befabe2454f430e6e1066584c63ea7571ef3479a5ad247f8cfe6c", "5c2fd935e5647cfffd22e6ca06b8fdd3f2cfe2301c6ab2fb2f51a952defff165", "3af888c30f7ca10b314d5aba53e06c9d34ce5169046551c90fced3ac4ed6253c" ], "globals": [ "polylang", "_language", "_loader", "GEO_API_URL", "_phone_error", "_form_unknown_error", "__offerChatWidgetMounted", "intlTelInput", "Lenis", "gsapVersions", "Linear", "Power0", "Quad", "Power1", "Cubic", "Power2", "Quart", "Power3", "Quint", "Power4", "Strong", "Elastic", "Bounce", "Expo", "Circ", "Sine", "Back", "SteppedEase", "TweenLite", "TweenMax", "TimelineMax", "TimelineLite", "AttrPlugin", "EndArrayPlugin", "RoundPropsPlugin", "ModifiersPlugin", "SnapPlugin", "gsap", "CSSPlugin", "Observer" ], "cookies": [ "_subid", "csrftoken" ], "tls": { "san": [ "*.quartzflowai.capital", "quartzflowai.capital" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "quartzflowai.capital", "protocol": "QUIC", "valid_to": "2026-12-13T16:59:04Z", "valid_from": "2026-09-14T16:59:05Z" }, "domain_age_days": 166, "apex_age_days": 166, "tls_age_days": 48, "tls_valid_days": 89, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin", "priority": "u=0,i" } }, "cf": { "v": 1, "fetched_at": "2026-11-02T10:55:15Z", "uuid": "7ee34900-bb49-4abf-aa9c-324c44b5251e", "scanned_at": "2026-11-02T10:52:35Z", "final_url": "https://quartzflowai.capital/cdn-cgi/phish-bypass", "status": 400, "history": [ { "url": "https://quartzflowai.capital/", "status": 403 }, { "url": "https://quartzflowai.capital/cdn-cgi/phish-bypass", "status": 400 } ], "dom_hash": "7fc99aa2d89e0695afe980fa5a4f6850d050e60e0805209b2ab086fa92f20e16", "doc_hash": "9a0f91e672db4eb3ce93433f0fdd9bba4e8254a616567b1a66a6701196c4c11a", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "quartzflowai.capital", "type": "A", "value": "172.67.218.214" }, { "name": "quartzflowai.capital", "type": "A", "value": "104.21.53.210" }, { "name": "quartzflowai.capital", "type": "AAAA", "value": "2606:4700:3034::ac43:dad6" }, { "name": "quartzflowai.capital", "type": "AAAA", "value": "2606:4700:3032::6815:35d2" } ], "dnssec_valid": false, "ip": "127.0.1.1", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-05-19T14:58:01Z", "updated": "2026-08-11T22:20:16Z", "expires": "2027-05-19T14:58:01Z", "nameservers": [ "moura.ns.cloudflare.com", "romina.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-02T10:51:45Z", "analysis_at": "2026-10-25T10:22:07Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 4, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "PREBYTES": "suspicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Bfore.Ai PreCrime": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-05-19T15:48:05Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.53.210" }, { "ttl": 21600, "type": "NS", "value": "romina.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.218.214" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::ac43:dad6" }, { "ttl": 3600, "type": "TXT", "value": "google-site-verification=udprBavJzZtURR0CU6V8zY0nGqxAy3O_aoQX26dToDw" }, { "ttl": 21600, "type": "NS", "value": "moura.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::6815:35d2" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "moura.ns.cloudflare.com" } ], "dns_at": "2026-10-25T10:27:28Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.quartzflowai.capital", "quartzflowai.capital" ], "issuer": "Let's Encrypt / YE2", "serial": "6e3c4b14c41db9b47e871e0a26b2789fa43", "sha256": "3667e7f8421c9b39d9544d7a6c859c2059678b64e321e21820570f35f4c64040", "subject": "quartzflowai.capital", "valid_to": "2026-12-13T16:59:04Z", "valid_from": "2026-09-14T16:59:05Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-05-19T14:58:01Z", "last changed": "2026-05-19T16:08:44Z", "registration": "2026-05-19T14:58:01Z", "registrar expiration": "2027-05-19T14:58:01Z", "last update of RDAP database": "2026-10-23T10:38:05Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-02T10:55:27Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "quartzflowai.capital" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-11-02T10:21:41Z", "first": "2026-10-12T06:17:50Z", "changes": 2, "days_archived": 3, "scans_per_day": 0.09, "avg_page_bytes": 18907 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://quartzflowai.capital/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 7 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "dns_server": { "ns": [ { "ip": "108.162.194.159", "host": "romina.ns.cloudflare.com" }, { "ip": "172.64.35.217", "host": "moura.ns.cloudflare.com" } ], "zone": "quartzflowai.capital" }, "location": { "ip": "2606:4700:3034::ac43:dad6", "asn": "13335", "org": "Cloudflare, Inc.", "city": "San Francisco", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "quartzflowai.capital" }, "dns": { "A": [ "172.67.218.214", "104.21.53.210" ], "NS": [ "moura.ns.cloudflare.com", "romina.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"moura.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414894365, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "google-site-verification=udprBavJzZtURR0CU6V8zY0nGqxAy3O_aoQX26dToDw" ], "AAAA": [ "2606:4700:3034::ac43:dad6", "2606:4700:3032::6815:35d2" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3032::6815:35d2", "family": 6 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "referrer-policy": "same-origin" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a19bc4-bb32-750f-aca8-d9ae6163c2f1.png","source":"URLScan","report_url":"https://urlscan.io/result/01a19bc4-bb32-750f-aca8-d9ae6163c2f1/","captured_at":"2026-11-02T10:18:51Z","sha256":"0887a156605449808d4bb81a286577fe07370ffe47e078f3dc641e845ef4e364","model_image_sha256":"b7e6ec30216275fcd2552a92e3d3807d8df187c3606e439ebf8631f616d51b82","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/quartzflowai.capital/records.json?source=content&format=json ## Dated availability observation Reachable response; page content was not verified ```json { "state": "restricted", "label_key": "availability.access_restricted", "detail_key": "detail.restricted", "params": [], "source": "current_http_probe", "record_id": 1744011, "scope": "checked_url", "observed_at": "2026-11-02T12:07:52Z", "http_status": 403, "http_observed_at": "2026-11-02T12:07:52Z", "stored_http_code": 403, "stored_http_observed_at": "2026-11-02T12:07:52Z", "legacy_site_status": "dead", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```