# PhishDestroy domain threat record: thevgtech.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/thevgtech.com/
Machine-readable companion: https://phishdestroy.io/domain/thevgtech.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 16:19:04 UTC
- Last availability or vendor check: 2026-10-26 16:36:47 UTC
- Stored record updated: 2026-10-26 20:13:01 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: GoDaddy.com, LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-25 14:03:17 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17910-eca7-738f-ae2f-5ed4cf6a5354/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/thevgtech.com
- Certificate Transparency search: https://crt.sh/?q=%25.thevgtech.com
- Web Archive lookup: https://web.archive.org/web/*/https://thevgtech.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot shows a dark trading interface headlined TRADE, INVEST & PARTNER with the Globally Trusted & Regulated Leader in Financial Derivatives, price cards for BTC/USD, XAU/USD and ETH/USD, a Popular coins table listing ETH/USD, XRP/USD, BTC/USD and LTC/USD, and bottom navigation for Home, Financing, Trade, Order and Assets. Capture metadata recorded the page title as POEX. PhishDestroy listed the domain after a malicious verdict on VirusTotal and its young registration age, and first saw it on 2026-10-26.

How the scam works
The page imitates a professional derivatives exchange, using attractive market tickers, percentage changes and a Financing tab to steer visitors toward depositing money. As a category risk, this style of fake trading site harvests account credentials and deposits while offering no verifiable trading venue behind it. Anyone funding an account on the captured page would be handing money to an unverified operator.

Evidence
As observed on 2026-10-26, the screenshot shows live-style price tickers, percentage fluctuations and a Popular coins table designed to look legitimate. URLScan's ML engine scored the capture 98 and flagged it malicious on 2026-10-26 while its overall verdict stayed non-malicious; VirusTotal flagged the domain as malicious with SOCRadar labelling it phishing, and Cloudflare Radar classified the capture as phishing. Google Safe Browsing did not flag it and Spamhaus did not list it on 2026-10-26, while the MetaMask and SEAL blocklists, PhishDestroy's internal list and 5 AlienVault OTX pulses flagged it. Inspection recorded a Vue front end with TradingView and Highcharts libraries, 52 tracker requests, and 10 distinct script SHA256 hashes for pivoting, one starting bcee984fd52b.

Infrastructure
Registration was recorded on 2026-08-25 through GoDaddy, with Cloudflare hosting and the Cloudflare WAF in front of the page. Weaknesses first: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and COOP/COEP/CORP all absent; HSTS present with max-age=31536000; TLS 1.3 with AES-256-GCM-SHA384, forward secrecy and ALPN h2; no email authentication observed; CAA present; DNSSEC unsigned. Plain HTTP was redirected to HTTPS with a 307 response on 2026-10-26.

What to do
If you submitted an account password, change it on the genuine service and enable two-factor authentication, and stop sending money or documents to this domain. Do not rely on the price figures shown. Security teams should block thevgtech.com in proxy, DNS and email controls and pivot on the recorded script hashes.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17910-eca7-738f-ae2f-5ed4cf6a5354/
Cloudflare Radar report: https://radar.cloudflare.com/scan/d57a62ab-44f4-4a7e-baef-bd8194669a20
URLQuery report: https://urlquery.net/report/3ab6a852-9af6-4d07-b1b2-0227f4b5a2be
Stored capture screenshot: https://i.ibb.co/WWbWC5M0/31624dc88c15.png
Cloudflare Radar screenshot (2026-10-26T16:30:53Z): https://screenshots.phishdestroy.io/cf/d57a62ab-44f4-4a7e-baef-bd8194669a20.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/3ab6a852-9af6-4d07-b1b2-0227f4b5a2be.png
URLScan screenshot (2026-10-22T15:18:00Z): https://screenshots.phishdestroy.io/us/01a16430-86ce-7573-94c4-77a182f524aa.png
URLScan capture report: https://urlscan.io/result/01a16430-86ce-7573-94c4-77a182f524aa/
URLScan screenshot (2026-10-22T15:30:03Z): https://screenshots.phishdestroy.io/us/01a1643b-8754-7068-8eea-7e77e0d7c076.png
URLScan capture report: https://urlscan.io/result/01a1643b-8754-7068-8eea-7e77e0d7c076/
URLScan screenshot (2026-10-22T15:31:40Z): https://screenshots.phishdestroy.io/us/01a1643d-132e-7693-b61c-1913894f2163.png
URLScan capture report: https://urlscan.io/result/01a1643d-132e-7693-b61c-1913894f2163/
URLScan screenshot (2026-10-23T19:11:28Z): https://screenshots.phishdestroy.io/us/01a16a2c-b19f-758b-8a1c-2722b8358bad.png
URLScan capture report: https://urlscan.io/result/01a16a2c-b19f-758b-8a1c-2722b8358bad/
URLScan screenshot (2026-10-26T16:48:54Z): https://screenshots.phishdestroy.io/us/01a1791d-4b9d-75b4-be38-ec03bda59dfc.png
URLScan capture report: https://urlscan.io/result/01a1791d-4b9d-75b4-be38-ec03bda59dfc/
VirusTotal report: https://www.virustotal.com/gui/domain/thevgtech.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=thevgtech.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:13:01 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/WWbWC5M0/31624dc88c15.png
  Captured: 2026-10-26 16:36:47 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17910-eca7-738f-ae2f-5ed4cf6a5354.png
  Captured: 2026-10-26 16:36:47 UTC
  Source report: https://urlscan.io/result/01a17910-eca7-738f-ae2f-5ed4cf6a5354/
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a2c-b19f-758b-8a1c-2722b8358bad.png
  Captured: 2026-10-23 19:11:28 UTC
  Source report: https://urlscan.io/result/01a16a2c-b19f-758b-8a1c-2722b8358bad/
  SHA-256: b4ff24ce62c820bea31f964d2b0e5046bed9cae76347e4bae456d0f03a8c9e02
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16430-86ce-7573-94c4-77a182f524aa.png
  Captured: 2026-10-22 15:18:00 UTC
  Source report: https://urlscan.io/result/01a16430-86ce-7573-94c4-77a182f524aa/
  SHA-256: f838e23c5a597583756afc3425724f378e0e2ef69a0e813fa236fb17e3c59f26
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1643b-8754-7068-8eea-7e77e0d7c076.png
  Captured: 2026-10-22 15:30:03 UTC
  Source report: https://urlscan.io/result/01a1643b-8754-7068-8eea-7e77e0d7c076/
  SHA-256: c325045fa7f6d101d77099dc31ec40fd53a5e3adac130a271065a2a84fb654f2
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1643d-132e-7693-b61c-1913894f2163.png
  Captured: 2026-10-22 15:31:40 UTC
  Source report: https://urlscan.io/result/01a1643d-132e-7693-b61c-1913894f2163/
  SHA-256: 5ad244579db46ff0ea961a1fe482ca8076b1e29b80254ae7b17864be1dedecdd
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a1791d-4b9d-75b4-be38-ec03bda59dfc.png
  Captured: 2026-10-26 16:48:54 UTC
  Source report: https://urlscan.io/result/01a1791d-4b9d-75b4-be38-ec03bda59dfc/
  SHA-256: 1d565e65520f295e3252239f68c0bae633ac9dde7a092b6520d8753e9fa42ca4
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d57a62ab-44f4-4a7e-baef-bd8194669a20.png
  Captured: 2026-10-26 16:30:53 UTC
  Source report: https://radar.cloudflare.com/scan/d57a62ab-44f4-4a7e-baef-bd8194669a20
  SHA-256: 7a46671ae2522f4a9f39e2f16b811cff0afbd6fc870b36c615fa0b53c629f8e2
- URLQuery: https://screenshots.phishdestroy.io/uq/3ab6a852-9af6-4d07-b1b2-0227f4b5a2be.png
  Source report: https://urlquery.net/report/3ab6a852-9af6-4d07-b1b2-0227f4b5a2be
  SHA-256: d5419fe3379d8e15fe53222fe1d3b4eaa57115eca8581c76eb22c9480b77531b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T16:38:16Z",
        "uuid": "01a17910-eca7-738f-ae2f-5ed4cf6a5354",
        "scanned_at": "2026-10-26T16:35:28Z",
        "final_url": "https://thevgtech.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://thevgtech.com/",
                "from": "http://thevgtech.com/",
                "status": 307
            }
        ],
        "ip": "104.21.16.9",
        "domains": [
            "api.thevgspace.com",
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "172.67.184.66",
            "104.21.16.9"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "d19af63ae47167488983d503516dab686e0454481e8d975b0855e434a18db1fe",
        "script_hashes": [
            "bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb",
            "69125f5e5d57e4d0c07fbe287b8349df57e60d6185fe60a076001f7c5ac57d93",
            "3f96bd32b526cf3743a241f07f0e53fdaa4ad07b8be49c6f993f788ab596e6ea",
            "d2e4a76318dbdc1be22f6a463756e08d2bd5d5f71d426603f95be0f57a3868be",
            "b02a0d7d2e8c42ad5afe5781c14d4632b51114bd86e255203ff022f302da4e9d",
            "00e52ca55c79f3d5c207cec3ad851126dbd32dfa4925e69d4ee63fb4836ca68d",
            "22fd1781984ddfa4f85a8bf51a1fe9ab73b35268f62b8d7681b757350434e68e",
            "52540e0c67df2e789e6f66ee909846aa616a237560b0537e2110f51622cb1a8e",
            "531357a0e1309beac0c4ae29c35740ab93b9b250549d6c688dcdc976b31b799c",
            "1867e702ef5a483027b1eaa45fa02cadd50b395dc26b385e2a5efdc1c9f01258"
        ],
        "globals": [
            "addLink",
            "addMeta",
            "TradingView",
            "lib",
            "rem",
            "dpr",
            "__VUE_INSTANCE_SETTERS__",
            "__INTLIFY_PROD_DEVTOOLS__",
            "__INTLIFY_JIT_COMPILATION__",
            "__INTLIFY_DROP_MESSAGE_COMPILER__",
            "__VUE_I18N_FULL_INSTALL__",
            "__VUE_I18N_LEGACY_API__",
            "setImmediate",
            "clearImmediate",
            "PubSub",
            "__config",
            "__theme",
            "__VUE__",
            "__vite_is_modern_browser",
            "__isBfcacheRestore",
            "_Highcharts"
        ],
        "cookies": [
            "app_device_id"
        ],
        "storage_keys": [
            "production_THEME",
            "main",
            "app_device_id",
            "production_LANGUAGE"
        ],
        "tls": {
            "san": [
                "thevgtech.com",
                "*.thevgtech.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "thevgtech.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-21T19:39:01Z",
            "valid_from": "2026-10-23T18:40:29Z"
        },
        "domain_age_days": 61,
        "apex_age_days": 61,
        "tls_age_days": 2,
        "tls_valid_days": 90,
        "requests": 107,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T16:33:17Z",
        "uuid": "d57a62ab-44f4-4a7e-baef-bd8194669a20",
        "scanned_at": "2026-10-26T16:30:53Z",
        "final_url": "https://thevgtech.com/",
        "status": 200,
        "history": [
            {
                "url": "https://thevgtech.com/",
                "status": 200
            }
        ],
        "dom_hash": "911758e259451c9a2c271bfb3a2a99f09f0f90dedbf9740002c7ee45b9767fa5",
        "doc_hash": "d19af63ae47167488983d503516dab686e0454481e8d975b0855e434a18db1fe",
        "phishing_v2": [
            "phishing"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "thevgtech.com",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "thevgtech.com",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "thevgtech.com",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            },
            {
                "name": "thevgtech.com",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.96.0",
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-08-25T16:03:17Z",
            "updated": "2026-08-25T16:09:16Z",
            "expires": "2027-08-25T16:03:17Z",
            "nameservers": [
                "dan.ns.cloudflare.com",
                "love.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T17:01:25Z",
        "analysis_at": "2026-10-24T07:56:16Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 36
        },
        "detections": {
            "SOCRadar": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "registrar": "GoDaddy.com, LLC",
        "created": "2026-08-25T16:03:17Z",
        "expires": "2027-08-25T16:03:17Z",
        "updated": "2026-08-25T16:09:16Z",
        "first_seen": "2026-08-25T16:48:09Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "love.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:a5a6"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.16.9"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "dan.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.165.166"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "dan.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::6815:1009"
            }
        ],
        "dns_at": "2026-10-24T08:10:45Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "thevgtech.com",
                "*.thevgtech.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "b85046cee9e3e6c8137de5b1d2f1bae9",
            "sha256": "fee373983d7ae681b02f401df4e2a68f4314d25b7cf5572db5093403c9fe88b8",
            "subject": "thevgtech.com",
            "valid_to": "2027-01-21T19:39:01Z",
            "valid_from": "2026-10-23T18:40:29Z"
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "registrar_iana_id": "146",
            "registrar_url": "http://www.godaddy.com",
            "created": "2026-08-25T16:03:17Z",
            "updated": "2026-08-25T16:09:16Z",
            "expires": "2027-08-25T16:03:17Z",
            "status": [
                "clientDeleteProhibited",
                "clientRenewProhibited",
                "clientTransferProhibited",
                "clientUpdateProhibited"
            ],
            "nameservers": [
                "dan.ns.cloudflare.com",
                "love.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client renew prohibited",
                "client transfer prohibited",
                "client update prohibited"
            ],
            "events": {
                "expiration": "2027-08-25T16:03:17Z",
                "last changed": "2026-08-25T16:09:16Z",
                "registration": "2026-08-25T16:03:17Z",
                "last update of RDAP database": "2026-10-22T16:33:50Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T16:38:38Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "thevgtech.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T16:29:22Z",
            "first": "2026-10-26T16:29:22Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 4526
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true
        },
        "social_tags": {
            "title": "POEX",
            "robots": "noindex, nofollow",
            "ogImage": "/platform/dev/logo_144.png?2.0.1792472982176",
            "ogTitle": "POEX",
            "keywords": "financial services, asset management, digital platform, investment platform",
            "themeColor": "#ffffff",
            "description": "POEX professional financial services and digital asset management platform.",
            "ogDescription": "POEX professional financial services and digital asset management platform."
        },
        "trackers": {
            "requests": 52
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 14,
                "tls": 26,
                "wait": 979,
                "connect": 7,
                "download": 0
            },
            "response_ms": 1026
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 8834,
            "co2_grams": 0.0003,
            "cleaner_than": 74
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.119",
                    "host": "love.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.108",
                    "host": "dan.ns.cloudflare.com"
                }
            ],
            "zone": "thevgtech.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "app_device_id"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "thevgtech.com"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "love.ns.cloudflare.com",
                "dan.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"dan.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418273122, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://thevgtech.com"
            ]
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-08-25T16:03:17Z",
            "updated": "2026-08-25T16:09:16Z",
            "expires": "2027-08-25T16:03:17Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientRenewProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "clientUpdateProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "dan.ns.cloudflare.com",
                "love.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000"
            }
        }
    }
}
```