# trademarketoptions-ltd.com investment landing page with account creation | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/trademarketoptions-ltd.com/
Machine-readable companion: https://phishdestroy.io/domain/trademarketoptions-ltd.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-01 12:24:26 UTC
- Selected availability observation: 2026-11-02T23:22:03Z
- Stored record updated: 2026-11-03 11:24:32 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored labels and detections
- Automated brand label (collector metadata; not a confirmed impersonation finding): Investmentscam
## Stored infrastructure
- Observed IP address: 198.251.81.188
- Registrar in stored WHOIS data: Gransy, s.r.o.
- Last stored HTTP status: 200 (observed: 2026-11-02T23:22:03Z)
## Evidence links
- URLScan report: https://urlscan.io/result/01a1970f-9b7b-775f-bbc4-77637eee5d89/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/trademarketoptions-ltd.com
- Certificate Transparency search: https://crt.sh/?q=%25.trademarketoptions-ltd.com
- Web Archive lookup: https://web.archive.org/web/*/https://trademarketoptions-ltd.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy records the trademarketoptions-ltd.com landing page, which invites visitors to create an account and choose an investment plan.
The captured landing page for trademarketoptions-ltd.com presents itself as an investment service under the branding "Trade Market Options LTD," with a hero headline inviting visitors to "Join the Global Leader of Financial Investments." The main interaction is a prominent "Create an Account" button, supported by a three-step flow describing membership, plan selection, and passive earnings, alongside Login and Sign Up controls in the header.
The stored VirusTotal domain result reports 1 detection out of 92 engines. desenmascara.me reported "malicious".
Package revision: 4ccf1296132b7c052fbf34769d57f81e050b6233876fc062137a9b23e05a36c5
Text generated (not scan time): 2026-11-01 13:56:30
Reviewed evidence snapshot: {"domain":"trademarketoptions-ltd.com","screenshot_available":true,"page_title":"Home - Trade Market Options LTD","original_meta_description":"Trade Market Options LTD is a group of financial experts. We carefully examine the volatility of cryptocurrencies, invest and make good profits.","initial_ai_description":"The website presents itself as an investment platform offering financial advice and investment services with promises of passive earnings and high returns, which are common characteristics of fraudulent investment schemes. The domain was registered very recently (0 days old) and lacks SSL, which are additional risk factors for such sites.","metadata_observed_on":"2026-11-01","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-11-01","analysis_date":"2026-11-01","flagging_vendors":["desenmascara.me"],"vendor_labels":{"desenmascara.me":"malicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T12:54:54Z","final_host":"trademarketoptions-ltd.com","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detection out of 92 engines. desenmascara.me reported \"malicious\".","page_paragraph_target_characters":536}
Source facts (timestamps as stored): {"record_id":1730543,"first_recorded_at":"2026-11-01 13:24:26","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"desenmascara.me":"malicious"},"observed_at":"2026-11-01T09:55:58Z","checked_at":null,"fetched_at":"2026-11-01T12:54:47Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["desenmascara.me"],"observed_at":"2026-11-01 09:55:58","checked_at":"2026-11-01 13:54:47","fetched_at":"2026-11-01 12:54:47","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"desenmascara.me":"malicious"},"vendor_names":["desenmascara.me"],"stats":{"timeout":0,"harmless":51,"malicious":1,"suspicious":0,"undetected":40}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 18:01:52"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-01 16:30:16"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1730543,"scope":"checked_url","observed_at":"2026-11-02T23:22:03Z","http_status":200,"http_observed_at":"2026-11-02T23:22:03Z","stored_http_code":200,"stored_http_observed_at":"2026-11-02T23:22:03Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-02T11:53:40Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/01a1970f-9b7b-775f-bbc4-77637eee5d89.png
Captured: 2026-11-01 12:22:40 UTC
Source report: https://urlscan.io/result/01a1970f-9b7b-775f-bbc4-77637eee5d89/
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a19714-bb66-726b-a70e-56463aedb899.png
Captured: 2026-11-01 12:28:13 UTC
Source report: https://urlscan.io/result/01a19714-bb66-726b-a70e-56463aedb899/
SHA-256: a900f09f71d3e955df2a97d09fdab97f9b8b1ea0e29ef343b689d229d6d7cac7
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9f20e66a-cb42-495e-bfc0-d1d2cdb4ab8d.png
Captured: 2026-11-01 12:54:54 UTC
Source report: https://radar.cloudflare.com/scan/9f20e66a-cb42-495e-bfc0-d1d2cdb4ab8d
SHA-256: c84a4a1236a13b752e9e27f7a54d9b295d88a5a8c006dda9cc79847c5e846cec
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-01T12:41:31Z",
"uuid": "01a1970f-9b7b-775f-bbc4-77637eee5d89",
"scanned_at": "2026-11-01T12:22:40Z",
"final_url": "https://trademarketoptions-ltd.com/",
"status": 200,
"redirected": "https-only",
"redirects": [
{
"to": "https://trademarketoptions-ltd.com/",
"from": "http://trademarketoptions-ltd.com/",
"status": 307
}
],
"ip": "198.251.81.188",
"ptr": "s12.my-control-panel.com",
"domains": [
"widget-v3.smartsuppcdn.com",
"fonts.gstatic.com",
"websocket-visitors.smartsupp.com",
"bootstrap.smartsuppchat.com",
"www.smartsuppchat.com",
"fonts.googleapis.com"
],
"ips": [
"79.127.206.208",
"18.184.200.240",
"142.251.210.35",
"152.233.10.59",
"142.251.211.202",
"198.251.81.188"
],
"asns": [
"60068",
"16509",
"15169",
"53667"
],
"countries": [
"US",
"DE"
],
"link_domains": [
"account.trademarketoptions-ltd.com",
"telegram.me"
],
"social": [
"https://telegram.me/trademarketsupportl"
],
"doc_hash": "110358efbd6dfa68d29941f6b3b41b801f85deea594df475fe38a1766c902650",
"script_hashes": [
"afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a",
"9810aee7e6d57d8cceaa96322b88e6df46710194689ae12b284149148cabc2f3",
"57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37",
"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264",
"694da45e033114445455ea32bc0448bd950165a0eda0f92e16b9ed32bf5eb493",
"ef2c95c4bbf76100ae385819502fa0f4faf435f6dfd4b36ab1adbe10f971e98a",
"9282de0b7b2fe087d467ebd6400049a9de09ebf41d8a98a06d908b8f2a07a745",
"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"92559a8e68f61d39286ff5f69164e3f9d70658124e4426145a929bc215334214",
"533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020"
],
"globals": [
"_wpemojiSettings",
"jQuery",
"a",
"___FONT_AWESOME___",
"fontawesome-free-shims",
"_smartsupp",
"smartsupp",
"SMARTSUPP_LOADED",
"$smartsupp",
"astra",
"astraGetParents",
"getParents",
"astraToggleClass",
"toggleClass",
"astraTriggerEvent",
"astraSmoothScroll",
"astScrollToTopHandler",
"popupTriggerClick",
"AstraToggleSubMenu",
"AstraToggleSetup",
"astraNavMenuToggle",
"chaty_settings",
"launch_chaty",
"googleV3Token",
"onloadCallbackChatyV3",
"refreshG3Token",
"onloadChatyCallback",
"localize",
"isEditMode",
"ea",
"HappyLocalize",
"gtranslateSettings",
"webpackChunkelementor_pro",
"webpackChunkelementor",
"elementorModules",
"runtime",
"regeneratorRuntime",
"setImmediate",
"clearImmediate",
"wp"
],
"cookies": [
"activechatyWidgets",
"chatyWidget_0"
],
"storage_keys": [
"elementor"
],
"tls": {
"san": [
"account.trademarketoptions-ltd.com",
"autoconfig.trademarketoptions-ltd.com",
"autodiscover.trademarketoptions-ltd.com",
"cpanel.trademarketoptions-ltd.com",
"cpcalendars.trademarketoptions-ltd.com",
"cpcontacts.trademarketoptions-ltd.com",
"mail.trademarketoptions-ltd.com",
"trademarketoptions-ltd.com",
"webdisk.trademarketoptions-ltd.com",
"webmail.trademarketoptions-ltd.com"
],
"cipher": "AES_128_GCM",
"issuer": "YR1",
"subject": "webmail.trademarketoptions-ltd.com",
"protocol": "TLS 1.3",
"valid_to": "2027-01-29T14:53:42Z",
"valid_from": "2026-10-31T14:53:43Z"
},
"domain_age_days": 0,
"apex_age_days": 0,
"tls_age_days": 0,
"tls_valid_days": 89,
"requests": 89,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 99,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"investmentscam"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Investment Scam"
],
"malicious": true,
"categories": [
"phishing"
]
}
},
"headers": {
"server": "LiteSpeed",
"content-type": "text/html; charset=UTF-8",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; type=\"application/json\"\n200000"
},
"dns": [
{
"name": "trademarketoptions-ltd.com",
"type": "A",
"value": "198.251.81.188"
}
],
"dnssec_valid": false,
"ip": "127.0.1.1",
"whois": {
"registrar": "Gransy, s.r.o.",
"created": "2026-10-31T13:50:16Z",
"updated": "2026-10-31T13:53:33Z",
"expires": "2027-10-31T13:50:16Z",
"nameservers": [
"ns17.my-control-panel.com",
"ns18.my-control-panel.com"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-01T12:54:47Z",
"analysis_at": "2026-11-01T09:55:58Z",
"stats": {
"timeout": 0,
"harmless": 51,
"malicious": 1,
"suspicious": 0,
"undetected": 40
},
"detections": {
"desenmascara.me": "malicious"
},
"reputation": 0,
"registrar": "Gransy, s.r.o.",
"created": "2026-10-31T13:50:16Z",
"expires": "2027-10-31T13:50:16Z",
"updated": "2026-10-31T13:53:33Z",
"first_seen": "2026-10-31T15:16:53Z",
"dns": [
{
"ttl": 21600,
"type": "NS",
"value": "ns18.my-control-panel.com"
},
{
"ttl": 10949,
"type": "SOA",
"rname": "alerts.my-control-panel.com",
"value": "ns17.my-control-panel.com"
},
{
"ttl": 14400,
"type": "TXT",
"value": "v=spf1 +a +mx +ip4:192.168.168.2 ~all"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns17.my-control-panel.com"
},
{
"ttl": 14400,
"type": "A",
"value": "198.251.81.188"
},
{
"ttl": 14400,
"type": "MX",
"value": "trademarketoptions-ltd.com",
"priority": 0
}
],
"dns_at": "2026-11-01T10:01:31Z",
"jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
"cert": {
"san": [
"account.trademarketoptions-ltd.com",
"autoconfig.trademarketoptions-ltd.com",
"autodiscover.trademarketoptions-ltd.com",
"cpanel.trademarketoptions-ltd.com",
"cpcalendars.trademarketoptions-ltd.com",
"cpcontacts.trademarketoptions-ltd.com",
"mail.trademarketoptions-ltd.com",
"trademarketoptions-ltd.com",
"webdisk.trademarketoptions-ltd.com",
"webmail.trademarketoptions-ltd.com"
],
"issuer": "Let's Encrypt / YR1",
"serial": "6b96d79f9ff92611e93cff7f65c0e746ac4",
"sha256": "9910ea5f6ab303d4f827b9cf3253478e65c5d394ae6fa260364959c27d8c3f15",
"subject": "webmail.trademarketoptions-ltd.com",
"valid_to": "2027-01-29T14:53:42Z",
"valid_from": "2026-10-31T14:53:43Z"
},
"whois": {
"registrar": "Gransy, s.r.o.",
"registrar_iana_id": "1505",
"registrar_url": "http://regtons.com",
"created": "2026-10-31T13:50:16Z",
"updated": "2026-10-31T13:53:33Z",
"expires": "2027-10-31T13:50:16Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"ns17.my-control-panel.com",
"ns18.my-control-panel.com"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"client transfer prohibited",
"add period"
],
"events": {
"expiration": "2027-10-31T13:50:16Z",
"last changed": "2026-10-31T13:53:34Z",
"registration": "2026-10-31T13:50:16Z",
"registrar expiration": "2027-10-31T13:50:16Z",
"last update of RDAP database": "2026-10-31T15:16:53Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-01T12:56:00Z",
"mail_config": {
"mx": [
"trademarketoptions-ltd.com"
],
"spf": "v=spf1 +a +mx +ip4:192.168.168.2 ~all",
"dkim": [
"default"
],
"dmarc": true,
"dkim_bits": 2048,
"spf_lookups": 2
},
"caa_records": {
"domain": "trademarketoptions-ltd.com"
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-11-01T12:26:27Z",
"first": "2026-11-01T12:26:27Z",
"changes": 0,
"days_archived": 1,
"avg_page_bytes": 42905
},
"robots_txt": {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://trademarketoptions-ltd.com/sitemap_index.xml"
]
},
"social_tags": {
"ogUrl": "https://trademarketoptions-ltd.com/",
"title": "Home - Trade Market Options LTD",
"ogType": "website",
"robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
"ogImage": "https://trademarketoptions-ltd.com/wp-content/uploads/2023/05/Hero-Bg.jpg",
"ogTitle": "Home - Trade Market Options LTD",
"generator": "WordPress 6.2",
"ogSiteName": "Trade Market Options LTD",
"description": "Trade Market Options LTD is a group of financial experts. We carefully examine the volatility of cryptocurrencies, invest and make good profits.",
"twitterCard": "summary_large_image",
"canonicalUrl": "https://trademarketoptions-ltd.com/",
"ogDescription": "Trade Market Options LTD is a group of financial experts. We carefully examine the volatility of cryptocurrencies, invest and make good profits."
},
"mixed_content": {
"third_party_scripts": 0
},
"status": {
"up": true,
"code": 200,
"timings": {
"dns": 554,
"tls": 196,
"wait": 3773,
"connect": 192,
"download": 4579
},
"response_ms": 9294
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
21,
25,
53,
80,
110,
143,
443,
587,
993,
995
]
},
"dns_server": {
"ns": [
{
"ip": "198.251.81.247",
"host": "ns18.my-control-panel.com"
},
{
"ip": "198.251.81.188",
"host": "ns17.my-control-panel.com"
}
],
"zone": "trademarketoptions-ltd.com"
},
"location": {
"ip": "198.251.81.188",
"asn": "53667",
"org": "FranTech Solutions",
"city": "Staten Island",
"country": "US"
},
"ssl": {
"issuer": "Let's Encrypt / YR1",
"subject": "webmail.trademarketoptions-ltd.com"
},
"dns": {
"A": [
"198.251.81.188"
],
"MX": [
"{\"exchange\": \"trademarketoptions-ltd.com\", \"priority\": 0}"
],
"NS": [
"ns18.my-control-panel.com",
"ns17.my-control-panel.com"
],
"SOA": "{\"nsname\": \"ns17.my-control-panel.com\", \"hostmaster\": \"alerts.my-control-panel.com\", \"serial\": 2026110105, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
"TXT": [
"v=spf1 +a +mx +ip4:192.168.168.2 ~all"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"message": "Site does not serve any HSTS headers."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"get_ip": {
"ip": "198.251.81.188",
"family": 4
},
"subdomains": {
"count": 11,
"subdomains": [
"account.trademarketoptions-ltd.com",
"autoconfig.trademarketoptions-ltd.com",
"autodiscover.trademarketoptions-ltd.com",
"cpanel.trademarketoptions-ltd.com",
"cpcalendars.trademarketoptions-ltd.com",
"cpcontacts.trademarketoptions-ltd.com",
"mail.trademarketoptions-ltd.com",
"webdisk.trademarketoptions-ltd.com",
"webmail.trademarketoptions-ltd.com",
"www.account.trademarketoptions-ltd.com",
"www.trademarketoptions-ltd.com"
]
},
"linked_pages": {
"external": [
"https://account.trademarketoptions-ltd.com/register",
"https://account.trademarketoptions-ltd.com/login"
],
"external_count": 2,
"internal_count": 17
},
"whois": {
"registrar": "Gransy, s.r.o.",
"created": "2026-10-31T13:50:16Z",
"updated": "2026-10-31T13:53:33Z",
"expires": "2027-10-31T13:50:16Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"ns17.my-control-panel.com",
"ns18.my-control-panel.com"
]
},
"headers": {
"headers": {
"server": "LiteSpeed",
"content-type": "text/html; charset=UTF-8",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; type=\"application/json\", ; rel=shortlink"
}
}
}
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/9f20e66a-cb42-495e-bfc0-d1d2cdb4ab8d.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/9f20e66a-cb42-495e-bfc0-d1d2cdb4ab8d","captured_at":"2026-11-01T12:54:54Z","sha256":"c84a4a1236a13b752e9e27f7a54d9b295d88a5a8c006dda9cc79847c5e846cec","model_image_sha256":"afc0c06ce974f6a86b5581efea780ff08537ace4f8e8de1ba737e2b91c9f3410","available":true,"content_status":null}
## Complete dated records
Availability observations: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/trademarketoptions-ltd.com/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1730543,
"scope": "checked_url",
"observed_at": "2026-11-02T23:22:03Z",
"http_status": 200,
"http_observed_at": "2026-11-02T23:22:03Z",
"stored_http_code": 200,
"stored_http_observed_at": "2026-11-02T23:22:03Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "served_at_root",
"content_classification_at": "2026-11-02T11:53:40Z",
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```