# tradementor-pro.shop: TradeMentor Pro AI trading companion landing page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/tradementor-pro.shop/ Machine-readable companion: https://phishdestroy.io/domain/tradementor-pro.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-08 15:20:36 UTC - Selected availability observation: 2026-07-26T20:03:16Z - Stored record updated: 2026-11-08 19:24:45 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 185.62.58.129 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 (observed: not recorded) - Registration date in stored WHOIS data: 2026-03-30 13:45:28 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019fa006-3a2f-7049-9b45-ee0e1b918a4e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/tradementor-pro.shop - Certificate Transparency search: https://crt.sh/?q=%25.tradementor-pro.shop - Web Archive lookup: https://web.archive.org/web/*/https://tradementor-pro.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records tradementor-pro.shop as a landing page presenting TradeMentor Pro as an AI-powered trading companion with a premium access registration form. On 2026-07-26, tradementor-pro.shop displayed a landing page branded TradeMentor Pro, headed "TradeMentor Pro — Your AI-Powered Trading Companion." The page describes a premium overview of AI-driven automated traders and assistance for market monitoring, order routing logic, and operational coordination, with feature labels such as AI-guided analytics, customizable execution rules, and secure data handling. A registration panel invites visitors to open a premium access profile by entering given name, family name, email address, and contact number before selecting GET ACCESS. The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported "suspicious"; ESET reported "suspicious". Package revision: 4aff80d6776f1cf21f5992b93d64a630ea136247be40fd8f770b748adcda4578 Text generated (not scan time): 2026-11-08 17:35:37 Reviewed evidence snapshot: {"domain":"tradementor-pro.shop","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"tradementor-pro.shop","final_host":"tradementor-pro.shop","redirects":[],"captured_at":"2026-07-26T20:03:16.185000Z","uuid":"019fa006-3a2f-7049-9b45-ee0e1b918a4e","report_url":"https://urlscan.io/result/019fa006-3a2f-7049-9b45-ee0e1b918a4e/","sha256":"aa33c4ee632d73e8bc287ec209d401b3e09472ad2f71401251918c749b99f900","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":17,"engines":92,"malicious":14,"suspicious":3,"analysis_date":"2026-11-01","retrieved_date":"2026-11-08","vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported \"suspicious\"; ESET reported \"suspicious\".","page_paragraph_target_characters":546} Source facts (timestamps as stored): {"record_id":1860503,"first_recorded_at":"2026-11-08 16:20:36","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":17,"denominator":92,"malicious":14,"suspicious":3,"vendors":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-01T03:55:29Z","checked_at":null,"fetched_at":"2026-11-08T16:03:20Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":17,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-01 03:55:29","checked_at":"2026-11-08 17:03:20","fetched_at":"2026-11-08 16:03:20","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":44,"malicious":14,"suspicious":3,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 17:31:24"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-08 16:31:10"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"URLScan","record_id":1860503,"scope":"checked_url","observed_at":"2026-07-26T20:03:16Z","http_status":200,"http_observed_at":"2026-07-26T20:03:16Z","stored_http_code":200,"stored_http_observed_at":null,"legacy_site_status":"unknown","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2","scan_uuid":"019fa006-3a2f-7049-9b45-ee0e1b918a4e","fetched_at":"2026-11-08T15:26:49Z"}} ## Stored page captures - URLScan · 2026-07-26: https://screenshots.phishdestroy.io/us/019fa006-3a2f-7049-9b45-ee0e1b918a4e.png Captured: 2026-07-26 20:03:16 UTC Source report: https://urlscan.io/result/019fa006-3a2f-7049-9b45-ee0e1b918a4e/ SHA-256: aa33c4ee632d73e8bc287ec209d401b3e09472ad2f71401251918c749b99f900 - URLScan · 2026-03-30: https://screenshots.phishdestroy.io/us/019d3fa8-a851-701f-9853-95be0f9c20b0.png Captured: 2026-03-30 16:51:57 UTC Source report: https://urlscan.io/result/019d3fa8-a851-701f-9853-95be0f9c20b0/ SHA-256: 68975e96fb6255b7aae8cbcbd13d01be096dd9c6075d1530351b4587a25c6e7c - URLScan · 2026-05-27: https://screenshots.phishdestroy.io/us/019e6ab7-9cb3-751a-a3b9-509aad19fa9a.png Captured: 2026-05-27 18:34:45 UTC Source report: https://urlscan.io/result/019e6ab7-9cb3-751a-a3b9-509aad19fa9a/ SHA-256: a76d2550389f33ff7abef561c9919d6e3b834a60da355b6dc9d574be2b05c408 - URLScan · 2026-07-20: https://screenshots.phishdestroy.io/us/019f7edd-a9b1-73ac-b1c7-cf67df8e496f.png Captured: 2026-07-20 09:31:30 UTC Source report: https://urlscan.io/result/019f7edd-a9b1-73ac-b1c7-cf67df8e496f/ SHA-256: 457c8879ea0e9580cd46465949e51e1752fdd2840e0ef8a4ccd6d332852c18b7 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-08T15:26:49Z", "uuid": "019fa006-3a2f-7049-9b45-ee0e1b918a4e", "scanned_at": "2026-07-26T20:03:16Z", "final_url": "https://tradementor-pro.shop/", "status": 200, "ip": "185.62.58.129", "ptr": "static-129-58-62-185.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "142.251.20.94", "151.101.1.229", "104.16.123.96", "2a04:4e42::485", "104.17.25.14", "2a00:1450:400a:1009::5f", "185.62.58.129" ], "asns": [ "15169", "54113", "13335", "62370" ], "countries": [ "US", "CH", "NL" ], "doc_hash": "0c63f1b40c6a009623e033789129855cb65bdbcec21a3ae01badaa8811b7c623", "script_hashes": [ "e776c8e03ae39686bf5344edf2667ee34a517077e47c1b709c3cc2c8dd1792c3" ], "globals": [ "toggleTermsPopup", "intlTelInput", "FingerprintJS", "__visitorCountry" ], "storage_keys": [ "t_fingerprint" ], "tls": { "san": [ "tradementor-pro.shop" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "tradementor-pro.shop", "protocol": "TLS 1.3", "valid_to": "2026-10-18T23:59:59Z", "valid_from": "2026-07-20T00:00:00Z" }, "domain_age_days": 118, "apex_age_days": 118, "tls_age_days": 6, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "vt": { "v": 1, "fetched_at": "2026-11-08T16:03:20Z", "analysis_at": "2026-11-01T03:55:29Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 14, "suspicious": 3, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Information Technology, Phishing (alphaMountain.ai)" }, "created": "2026-03-30T00:00:00Z", "updated": "2026-03-30T00:00:00Z", "first_seen": "2026-03-30T17:07:10Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "anderson.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "nola.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.58.129" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "anderson.ns.cloudflare.com" } ], "dns_at": "2026-11-01T04:38:56Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "tradementor-pro.shop" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "1d302100ebec0135d2f0a75d1bdad81f", "sha256": "c2d9225e0c342c5fe882b39963a9fe843a5ea53546ba8cf328ce5cee0e870653", "subject": "tradementor-pro.shop", "valid_to": "2026-12-17T23:59:59Z", "valid_from": "2026-09-18T00:00:00Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-08T15:30:47Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://tradementor-pro.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "ogUrl": "https://tradementor-pro.shop/", "title": "TradeMentor Pro | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "TradeMentor Pro | AI-Powered Automated Trading Overview", "ogSiteName": "TradeMentor Pro", "themeColor": "#111111", "description": "TradeMentor Pro delivers a focused briefing on AI-powered automated trading bots, execution workflows, risk safeguards, and operational features for today’s markets.", "twitterCard": "summary", "canonicalUrl": "https://tradementor-pro.shop/", "ogDescription": "TradeMentor Pro delivers a focused briefing on AI-powered automated trading bots, execution workflows, risk safeguards, and operational features for today’s markets." }, "trackers": { "requests": 24, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 9, "tls": 29, "wait": 29, "connect": 19, "download": 14 }, "response_ms": 100 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 47607, "co2_grams": 0.0017, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "108.162.195.177", "host": "anderson.ns.cloudflare.com" }, { "ip": "108.162.192.212", "host": "nola.ns.cloudflare.com" } ], "zone": "tradementor-pro.shop" }, "location": { "ip": "185.62.58.129", "asn": "62370", "org": "Snel.com B.V.", "city": "Schiedam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "tradementor-pro.shop" }, "dns": { "A": [ "185.62.58.129" ], "NS": [ "nola.ns.cloudflare.com", "anderson.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"anderson.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416901712, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.58.129", "family": 4 }, "redirects": { "chain": [ "https://tradementor-pro.shop" ] }, "linked_pages": { "internal_count": 45 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/019fa006-3a2f-7049-9b45-ee0e1b918a4e.png","source":"URLScan","report_url":"https://urlscan.io/result/019fa006-3a2f-7049-9b45-ee0e1b918a4e/","captured_at":"2026-07-26T20:03:16Z","sha256":"aa33c4ee632d73e8bc287ec209d401b3e09472ad2f71401251918c749b99f900","model_image_sha256":"64b78252681d2567375dd0b5e6a2731b0b4091732ad1d3c300fc98590f269775","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/tradementor-pro.shop/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "URLScan", "record_id": 1860503, "scope": "checked_url", "observed_at": "2026-07-26T20:03:16Z", "http_status": 200, "http_observed_at": "2026-07-26T20:03:16Z", "stored_http_code": 200, "stored_http_observed_at": null, "legacy_site_status": "unknown", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2", "scan_uuid": "019fa006-3a2f-7049-9b45-ee0e1b918a4e", "fetched_at": "2026-11-08T15:26:49Z" } ```