# PhishDestroy domain threat record: smartindextraderfx.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/smartindextraderfx.com/
Machine-readable companion: https://phishdestroy.io/domain/smartindextraderfx.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 14:07:13 UTC
- Last availability or vendor check: 2026-10-25 12:05:50 UTC
- Stored record updated: 2026-10-25 12:05:50 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 5.196.171.39
- Registrar in stored WHOIS data: Sav.com, LLC
- Last stored HTTP status: 200
- Registration date (registry RDAP, smartindextraderfx.com): 2026-10-21 18:52:56 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16918-5d74-717c-988f-385bd8e9296a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/smartindextraderfx.com
- Certificate Transparency search: https://crt.sh/?q=%25.smartindextraderfx.com
- Web Archive lookup: https://web.archive.org/web/*/https://smartindextraderfx.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake system flagged smartindextraderfx.com on 2026-10-23 after a fresh URLScan capture (UUID 01a16229-…) returned a malicious verdict with an AI‑phishing confidence of 90 %. The intake AI observed page content that promotes “Unique Investment Opportunities” and promises “attractive returns without commensurate risk,” language typical of high‑yield investment program scams. The domain was first seen by PhishDestroy on 2026-10-23, two days after its registration on 2026-10-21. An HTTP request recorded on that date returned a 200 status code.

How the scam works
Fraudulent investment schemes present themselves as legitimate platforms that promise unusually high returns with little or no risk. They solicit registrations and deposits, then disappear with the funds, leaving victims without recourse.

Evidence
URLScan recorded on 2026-10-22 classified the site as malicious, matching PhishDestroy’s initial alert. VirusTotal analysis on 2026-10-22 reported one malicious detection out of 92 engines, specifically Netcraft labeling the domain malicious. Google Safe Browsing checked on 2026-10-23 did not flag the URL. OTX reported zero pulses on 2026-10-23. External blocklists contained no entries on the same date, while PhishDestroy’s internal list marked the domain as malicious.

Infrastructure
The domain was registered with Sav.com, LLC on 2026-10-21 (expires 2027-10-21) and used the nameservers ns3.ddoscure.com and ns4.ddoscure.com. At the time of observation it resolved to 5.196.171.39, an OVH SAS network in France, and presented a Let’s Encrypt certificate (valid 2026-10-22 to 2027-01-20) behind a Cloudflare front‑end.

What to do
Visitors should avoid providing personal data, login credentials, or any financial transfers to this site and report any attempted interaction to their security team. Defenders can add smartindextraderfx.com to web and email deny lists and monitor outbound traffic for connections to the recorded IP address. Regularly review access logs for any requests to this domain and treat any credentials submitted there as compromised.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16918-5d74-717c-988f-385bd8e9296a/
Cloudflare Radar report: https://radar.cloudflare.com/scan/25ae869c-d5df-4d07-81f4-1f3913cf9d22
Stored capture screenshot: https://i.ibb.co/Hf5SFG1d/1dcb4c80b1e4.png
VirusTotal report: https://www.virustotal.com/gui/domain/smartindextraderfx.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=smartindextraderfx.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 14:11:10 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/Hf5SFG1d/1dcb4c80b1e4.png
  Captured: 2026-10-23 14:10:35 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a16918-5d74-717c-988f-385bd8e9296a.png
  Captured: 2026-10-23 14:10:35 UTC
  Source report: https://urlscan.io/result/01a16918-5d74-717c-988f-385bd8e9296a/
- URLScan capture 2: https://urlscan.io/screenshots/01a16229-0f2e-7565-9400-0fcf80dd289f.png
  Captured: 2026-10-23 14:07:13 UTC
  Source report: https://urlscan.io/result/01a16918-5d74-717c-988f-385bd8e9296a/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/25ae869c-d5df-4d07-81f4-1f3913cf9d22.png
  Captured: 2026-10-23 14:09:03 UTC
  Source report: https://radar.cloudflare.com/scan/25ae869c-d5df-4d07-81f4-1f3913cf9d22
  SHA-256: e6a9de694cedfc9d5894d859b80a7a0d96666ee92348442c3d04d6bd54958c83
- URLQuery: https://screenshots.phishdestroy.io/uq/a36eacc6-8cf3-4246-a344-fff470fce941.png
  Source report: https://urlquery.net/report/a36eacc6-8cf3-4246-a344-fff470fce941
  SHA-256: 2492699c1bc616b21eaa5a2c6a955953a73381a1c3d94d15bd4445eb56077bc1
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16209-3e98-71cf-aa5b-c9ad6802a265.png
  Captured: 2026-10-22 05:15:53 UTC
  Source report: https://urlscan.io/result/01a16209-3e98-71cf-aa5b-c9ad6802a265/
  SHA-256: c11c18dc8b657b9374316b0e559c92b86ee36c5edf1188e844774f08012da3d4
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16229-0f2e-7565-9400-0fcf80dd289f.png
  Captured: 2026-10-22 05:50:28 UTC
  Source report: https://urlscan.io/result/01a16229-0f2e-7565-9400-0fcf80dd289f/
  SHA-256: 082d6f52bed2765dd0dbbf95d76b4b5d409a84bd0130f538ed406bd0a7cb7912
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a1691a-7ba1-75ba-bc6d-2f72fd9b95c3.png
  Captured: 2026-10-23 14:11:55 UTC
  Source report: https://urlscan.io/result/01a1691a-7ba1-75ba-bc6d-2f72fd9b95c3/
  SHA-256: 52276bad01ceae8133fdc92e2e7d4957568a95341be931c98b720ced2b521cb1
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16921-858d-74d2-9420-26a9ecd3c39d.png
  Captured: 2026-10-23 14:19:41 UTC
  Source report: https://urlscan.io/result/01a16921-858d-74d2-9420-26a9ecd3c39d/
  SHA-256: 73f4ee8780fcdb133a79c2b14b75b0d61b45a66443ea6471704fb316e78b3120

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T14:41:57Z",
        "uuid": "01a16918-5d74-717c-988f-385bd8e9296a",
        "scanned_at": "2026-10-23T14:09:34Z",
        "final_url": "https://smartindextraderfx.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://smartindextraderfx.com/",
                "from": "http://smartindextraderfx.com/",
                "status": 307
            }
        ],
        "ip": "5.196.171.39",
        "ptr": "ip39.ip-5-196-171.eu",
        "domains": [
            "s3-symbol-logo.tradingview.com",
            "www.tradingview-widget.com",
            "app.wabi-app.com",
            "widget-v3.smartsuppcdn.com",
            "widget-sheriff.tradingview-widget.com",
            "fonts.gstatic.com",
            "s3.tradingview.com",
            "widgetdata.tradingview.com",
            "use.fontawesome.com",
            "www.googletagmanager.com",
            "snowplow-pixel.tradingview.com",
            "scanner.tradingview.com",
            "cdn.gtranslate.net",
            "fonts.googleapis.com",
            "websocket-visitors.smartsupp.com",
            "www.google-analytics.com",
            "region1.google-analytics.com",
            "ipinfo.io",
            "code.jquery.com",
            "bootstrap.smartsuppchat.com",
            "cdnjs.cloudflare.com",
            "www.smartsuppchat.com"
        ],
        "ips": [
            "185.111.111.157",
            "142.251.14.100",
            "216.239.32.36",
            "34.117.59.81",
            "172.67.142.245",
            "151.101.129.155",
            "63.185.191.188",
            "188.166.31.111",
            "104.17.24.14",
            "142.251.20.97",
            "34.213.143.92",
            "18.64.211.27",
            "108.138.26.88",
            "142.251.20.94",
            "195.181.175.41"
        ],
        "asns": [
            "212238",
            "15169",
            "396982",
            "13335",
            "54113",
            "16509",
            "14061",
            "60068",
            "16276"
        ],
        "countries": [
            "DE",
            "US",
            "NL",
            "FR"
        ],
        "link_domains": [
            "www.tradingview.com"
        ],
        "doc_hash": "3237f5b9cd435c921873f1ca5120c1d5ae1a980d94710015dd7f3adf7196f910",
        "script_hashes": [
            "9a58782ea59d0c0632285728bc49d99abfffd2030e36c9843679d1d819cdff3b",
            "0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a",
            "7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c",
            "0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740",
            "081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22",
            "3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4",
            "80789412c92004efb771c48344cf9ce7e9c4c131a9eb847df4a60f7c84e99eea",
            "d891f208475b7f123d92ac05bc3c6d36769bc4d80ff184edf82c041f419f29af",
            "3237f5b9cd435c921873f1ca5120c1d5ae1a980d94710015dd7f3adf7196f910"
        ],
        "globals": [
            "dummies",
            "_smartsupp",
            "smartsupp",
            "gtranslateSettings",
            "$",
            "jQuery",
            "bootstrap",
            "jQueryBridget",
            "EvEmitter",
            "getSize",
            "matchesSelector",
            "fizzyUIUtils",
            "Outlayer",
            "Isotope",
            "Masonry",
            "WOW",
            "SMARTSUPP_LOADED",
            "$smartsupp",
            "listCountries",
            "listPlans",
            "transarray",
            "run",
            "request",
            "interval",
            "polyfill",
            "dataLayer",
            "doGTranslate",
            "google_tag_data",
            "google_tag_manager",
            "gaGlobal",
            "GoogleAnalyticsObject",
            "ga",
            "gaplugins",
            "gaData",
            "fillNum",
            "invNumber",
            "fillWithdraw",
            "cashNumber"
        ],
        "cookies": [
            "PHPSESSID",
            "_sp_ses.6222",
            "_sp_id.6222",
            "_ga_RJD0MXEEV1",
            "_ga",
            "_gid",
            "_gat_gtag_UA_115538286_1",
            "sp"
        ],
        "tls": {
            "san": [
                "*.smartindextraderfx.com",
                "smartindextraderfx.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YE1",
            "subject": "*.smartindextraderfx.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-20T03:59:04Z",
            "valid_from": "2026-10-22T03:59:05Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 342,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "generic"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Generic"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T14:09:50Z",
        "uuid": "25ae869c-d5df-4d07-81f4-1f3913cf9d22",
        "scanned_at": "2026-10-23T14:09:03Z",
        "final_url": "https://smartindextraderfx.com/",
        "status": 200,
        "history": [
            {
                "url": "https://smartindextraderfx.com/",
                "status": 200
            }
        ],
        "dom_hash": "06afba3121071aeb13b225f5f9e5dc459ba5427782266037ccbde71a292fcfb5",
        "doc_hash": "3237f5b9cd435c921873f1ca5120c1d5ae1a980d94710015dd7f3adf7196f910",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "Scam",
            "Security threats",
            "New Domains",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "smartindextraderfx.com",
                "type": "A",
                "value": "5.196.171.39"
            }
        ],
        "dnssec_valid": false,
        "ip": "5.196.171.39",
        "whois": {
            "registrar": "Sav.com, LLC",
            "created": "2026-10-21T18:52:56Z",
            "updated": "2026-10-21T18:54:00Z",
            "expires": "2027-10-21T18:52:56Z",
            "nameservers": [
                "ns3.ddoscure.com",
                "ns4.ddoscure.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T14:08:55Z",
        "analysis_at": "2026-10-22T09:07:01Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 38
        },
        "detections": {
            "Netcraft": "malicious"
        },
        "reputation": 0,
        "registrar": "Sav.com, LLC",
        "created": "2026-10-21T18:52:56Z",
        "expires": "2027-10-21T18:52:56Z",
        "updated": "2026-10-21T18:54:00Z",
        "first_seen": "2026-10-22T05:03:33Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "MX",
                "value": "mail.smartindextraderfx.com",
                "priority": 10
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "v=spf1 a mx ip4:37.187.155.145 ~all"
            },
            {
                "ttl": 3600,
                "type": "SOA",
                "rname": "hostmaster.smartindextraderfx.com",
                "value": "ns3.ddoscure.com"
            },
            {
                "ttl": 3600,
                "type": "A",
                "value": "5.196.171.39"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns4.ddoscure.com"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns3.ddoscure.com"
            }
        ],
        "dns_at": "2026-10-22T09:08:10Z",
        "jarm": "27d27d27d00027d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d",
        "cert": {
            "san": [
                "*.smartindextraderfx.com",
                "smartindextraderfx.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "54849fa2c74bcf97237219551ce23207f7a",
            "sha256": "15b57a9dd788d27fc9fc3f257657a2da3034bde8419d6a823730c11ab2248c49",
            "subject": "*.smartindextraderfx.com",
            "valid_to": "2027-01-20T03:59:04Z",
            "valid_from": "2026-10-22T03:59:05Z"
        },
        "whois": {
            "registrar": "Sav.com, LLC",
            "registrar_iana_id": "609",
            "registrar_url": "http://sav.com",
            "created": "2026-10-21T18:52:56Z",
            "updated": "2026-10-21T18:54:00Z",
            "expires": "2027-10-21T18:52:56Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns3.ddoscure.com",
                "ns4.ddoscure.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-21T18:52:56Z",
                "last changed": "2026-10-21T18:54:00Z",
                "registration": "2026-10-21T18:52:56Z",
                "registrar expiration": "2027-10-21T18:52:56Z",
                "last update of RDAP database": "2026-10-21T18:54:00Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T14:10:11Z",
        "mail_config": {
            "mx": [
                "mail.smartindextraderfx.com"
            ],
            "spf": "v=spf1 a mx ip4:37.187.155.145 ~all",
            "dkim": [
                "x"
            ],
            "dkim_bits": 2048,
            "spf_lookups": 2
        },
        "caa_records": {
            "domain": "smartindextraderfx.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "social_tags": {
            "title": "smartindextraderfx.com",
            "themeColor": "#ffffff"
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.gtranslate.net/widgets/latest/dwf.js",
                "https://s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js",
                "https://s3.tradingview.com/external-embedding/embed-widget-market-quotes.js",
                "https://s3.tradingview.com/external-embedding/embed-widget-screener.js",
                "https://app.wabi-app.com/widget/js/wabi.js"
            ],
            "third_party_scripts": 5
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 82,
                "tls": 38,
                "wait": 3072,
                "connect": 18,
                "download": 2
            },
            "response_ms": 3212
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                22,
                25,
                53,
                80,
                110,
                143,
                443,
                587,
                993,
                995
            ]
        },
        "carbon": {
            "bytes": 43966,
            "co2_grams": 0.0016,
            "cleaner_than": 40
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "178.32.82.177",
                    "host": "ns4.ddoscure.com"
                },
                {
                    "ip": "178.32.82.176",
                    "host": "ns3.ddoscure.com"
                }
            ],
            "zone": "smartindextraderfx.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "PHPSESSID",
                    "session": true,
                    "http_only": true
                },
                {
                    "name": "_sp_ses.6222",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_sp_id.6222",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_ga_RJD0MXEEV1"
                },
                {
                    "name": "_ga"
                },
                {
                    "name": "_gid"
                },
                {
                    "name": "_gat_gtag_UA_115538286_1"
                }
            ]
        },
        "location": {
            "ip": "5.196.171.39",
            "asn": "16276",
            "org": "OVH SAS",
            "city": "Roubaix",
            "country": "FR"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "*.smartindextraderfx.com"
        },
        "dns": {
            "A": [
                "5.196.171.39"
            ],
            "MX": [
                "{\"exchange\": \"mail.smartindextraderfx.com\", \"priority\": 10}"
            ],
            "NS": [
                "ns4.ddoscure.com",
                "ns3.ddoscure.com"
            ],
            "SOA": "{\"nsname\": \"ns3.ddoscure.com\", \"hostmaster\": \"hostmaster.smartindextraderfx.com\", \"serial\": 2026102205, \"refresh\": 3600, \"retry\": 3600, \"expire\": 1209600, \"minttl\": 1800}",
            "TXT": [
                "v=spf1 a mx ip4:37.187.155.145 ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "5.196.171.39",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://smartindextraderfx.com"
            ]
        },
        "tech_stack": {
            "technologies": [
                "PHP",
                "Bootstrap",
                "Animate.css",
                "Nginx",
                "Cloudflare",
                "Slick",
                "Smartsupp",
                "jQuery",
                "Isotope",
                "Google Analytics",
                "Google Font API",
                "cdnjs",
                "PWA"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.tradingview.com/",
                "https://www.tradingview.com/markets/cryptocurrencies/prices-all/"
            ],
            "external_count": 2,
            "internal_count": 8
        },
        "whois": {
            "registrar": "Sav.com, LLC",
            "created": "2026-10-21T18:52:56Z",
            "updated": "2026-10-21T18:54:00Z",
            "expires": "2027-10-21T18:52:56Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns3.ddoscure.com",
                "ns4.ddoscure.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```