# treding.store — Live USDT Exchange Rate Deposit Popup | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/treding.store/ Machine-readable companion: https://phishdestroy.io/domain/treding.store/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-10-31 22:26:16 UTC - Selected availability observation: 2026-11-02T23:22:03Z - Stored record updated: 2026-11-02 23:24:03 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 185.199.111.153 - Registrar in stored WHOIS data: Tucows Domains Inc. - Registrar country in stored WHOIS data: CA - Last stored HTTP status: 200 (observed: 2026-11-02T23:22:03Z) - Registration date in stored WHOIS data: 2026-02-26 21:03:48 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19410-7070-7599-9941-2ad805f426cc/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/treding.store - Certificate Transparency search: https://crt.sh/?q=%25.treding.store - Web Archive lookup: https://web.archive.org/web/*/https://treding.store/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records the treding.store deposit popup showing a fixed USDT rate, a referral bonus offer, and a "Got it" dismissal button. The captured treding.store page shows a deposit screen with a modal popup titled "LIVE EXCHANGE RATE" that displays a fixed rate of 1 USDT = ₹103.00, along with the note "$1 = ₹103.00 • Fixed Rate". The popup also promotes a "Fast Deposit + Referral" offer promising a +15% bonus on a first deposit made with a referral ID, and it is dismissed through a "Got it" button. Behind the popup, the underlying page appears dimmed, with a green action button and a list of rows visible but out of focus. The stored VirusTotal domain result reports 0 detections out of 92 engines. Package revision: 5a778c8967559178c8b9c02e97b48470e19eec074084076afb8259069f755729 Text generated (not scan time): 2026-11-01 00:04:49 Reviewed evidence snapshot: {"domain":"treding.store","screenshot_available":true,"page_title":"Treding Store — Crypto, Forex & CFD Trading Platform India","original_meta_description":"Treding Store is India's crypto, forex and CFD trading platform. Trade Bitcoin, Ethereum, 25+ Forex pairs, Gold, Silver, Indices and Crude with real-time charts. Invest with daily/monthly plans. UPI deposit & withdrawal supported.","initial_ai_description":"The website presents itself as a trading platform for Crypto, Forex, and CFD, which are common themes for fraudulent investment schemes. The domain 'treding.store' is generic and does not align with a legitimate financial institution.","metadata_observed_on":"2026-10-31","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":0,"engines":92,"malicious":0,"suspicious":0,"retrieved_date":"2026-10-31","analysis_date":"2026-10-31","scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-31T23:01:17Z","final_host":"treding.store","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 0 detections out of 92 engines.","page_paragraph_target_characters":573} Source facts (timestamps as stored): {"record_id":1724256,"first_recorded_at":"2026-10-31 23:26:16","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-31T18:22:18Z","checked_at":null,"fetched_at":"2026-10-31T22:59:58Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-10-31 18:22:18","checked_at":"2026-11-01 00:00:03","fetched_at":"2026-10-31 23:00:04","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":[],"vendor_names":[],"stats":{"timeout":0,"harmless":56,"malicious":0,"suspicious":0,"undetected":36}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 06:00:45"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-01 00:30:26"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1724256,"scope":"checked_url","observed_at":"2026-11-02T23:22:03Z","http_status":200,"http_observed_at":"2026-11-02T23:22:03Z","stored_http_code":200,"stored_http_observed_at":"2026-11-02T23:22:03Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-02T11:32:00Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - Stored capture: https://i.ibb.co/S7tzygJC/da8aa6914c86.png - URLScan · 2026-10-31: https://screenshots.phishdestroy.io/01a19410-7070-7599-9941-2ad805f426cc.png Captured: 2026-10-31 22:24:36 UTC Source report: https://urlscan.io/result/01a19410-7070-7599-9941-2ad805f426cc/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/dd5aa07c-130a-49c6-9d34-2463c9c28a7b.png Captured: 2026-10-31 23:01:17 UTC Source report: https://radar.cloudflare.com/scan/dd5aa07c-130a-49c6-9d34-2463c9c28a7b SHA-256: d88644b40e073bdc508fe0c5905e87d6bb482d70dcc8d1c722b0df3de4e4af65 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-31T23:04:04Z", "uuid": "01a19410-7070-7599-9941-2ad805f426cc", "scanned_at": "2026-10-31T22:24:36Z", "final_url": "https://treding.store/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://treding.store/", "from": "http://treding.store/", "status": 307 } ], "ip": "185.199.111.153", "ptr": "cdn-185-199-111-153.github.com", "domains": [ "firestore.googleapis.com", "scanner.tradingview.com", "www.gstatic.com", "coin-images.coingecko.com", "fonts.gstatic.com", "img.icons8.com", "stream.binance.com", "api.coingecko.com", "www.googleapis.com", "treding-store-2.firebaseapp.com", "apis.google.com", "firebaseinstallations.googleapis.com", "firebase.googleapis.com", "cdnjs.cloudflare.com", "cdn.tailwindcss.com", "api.binance.com", "www.google.ca", "stats.g.doubleclick.net", "analytics.google.com", "api.ipify.org", "www.googletagmanager.com", "s3.tradingview.com", "fonts.googleapis.com", "cdn.jsdelivr.net" ], "ips": [ "172.67.142.173", "172.66.172.219", "18.238.63.201", "99.84.234.3", "172.217.118.4", "142.251.41.163", "64.233.180.154", "142.250.72.14", "142.250.190.234", "104.26.12.205", "142.251.211.72", "199.36.158.100", "142.251.210.46", "172.217.113.4", "142.251.211.195" ], "asns": [ "13335", "16509", "15169", "54113", "60068" ], "countries": [ "US" ], "doc_hash": "87d4742989f0e43a399aea58ab4373292e927f49f949c4021f58bd91987dedb0", "globals": [ "firebase", "tailwind", "Sweetalert2", "SweetAlert", "Swal", "sweetAlert", "swal", "triggerPWAInstall", "dismissPWAPopup", "/template.html", "requestNotificationPermission", "getFCMToken", "showLocalNotification", "initNotifications", "enableNotifications", "dismissNotifPopup", "initializeSecurity", "checkRateLimit", "sanitizeInput", "validatePhone", "connectBinanceWebSocket", "updateRealtimePrice", "updateRealOrderBook", "startPollingFallback", "loadTradingViewWidget", "changeTimeframe", "initializeUSDTINRRate", "updateUSDTDisplay", "checkLiquidations", "executeLiquidation", "checkProtectiveExits", "atomicBalanceTransfer", "_navigateWithoutPush", "handleHardwareBack", "openAuthModal", "closeAuthModal", "requireAuth", "showAuthScreen", "updateGuestUI", "sha256" ], "cookies": [ "_ga_9YWCKFZKB1", "_ga" ], "storage_keys": [ "__sak", "5764589700", "tv_cid", "tv_firstDay", "usdtInrRate", "usdtInrRateTime", "firestore_sequence_number_firestore/[DEFAULT]/treding-store-2/", "firestore_clients_firestore/[DEFAULT]/treding-store-2/_qtZpPbklUIFo3Vn8OVri", "firestore_mutations_firestore/[DEFAULT]/treding-store-2/_1", "firestore_online_state_firestore/[DEFAULT]/treding-store-2/", "firestore_targets_firestore/[DEFAULT]/treding-store-2/_2", "tv_last", "firestore_targets_firestore/[DEFAULT]/treding-store-2/_4", "firestore_targets_firestore/[DEFAULT]/treding-store-2/_6", "firestore_targets_firestore/[DEFAULT]/treding-store-2/_8" ], "tls": { "san": [ "treding.store", "www.treding.store" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "treding.store", "protocol": "TLS 1.3", "valid_to": "2027-01-27T07:16:20Z", "valid_from": "2026-10-29T07:16:21Z" }, "domain_age_days": 246, "apex_age_days": 246, "tls_age_days": 2, "tls_valid_days": 89, "requests": 77, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "GitHub.com", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31556952", "via": "1.1 varnish", "x-cache": "MISS", "x-cache-hits": "0", "x-served-by": "cache-yul1970039-YUL" } }, "cf": { "v": 1, "fetched_at": "2026-10-31T23:04:06Z", "uuid": "dd5aa07c-130a-49c6-9d34-2463c9c28a7b", "scanned_at": "2026-10-31T23:01:17Z", "final_url": "https://treding.store/", "status": 200, "history": [ { "url": "https://treding.store/", "status": 200 } ], "dom_hash": "a4338e3d03c54badb1b36d3da0af9bc1c0bd6d46de7bc6096700327d5a060d55", "doc_hash": "87d4742989f0e43a399aea58ab4373292e927f49f949c4021f58bd91987dedb0", "url_risks": [ "Scam" ], "domain_risks": [ "Scam", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "treding.store", "type": "A", "value": "185.199.111.153" }, { "name": "treding.store", "type": "A", "value": "185.199.108.153" }, { "name": "treding.store", "type": "A", "value": "185.199.110.153" }, { "name": "treding.store", "type": "A", "value": "185.199.109.153" } ], "dnssec_valid": false, "ip": "127.0.1.1", "whois": { "registrar": "Tucows Domains Inc.", "created": "2026-02-26T22:03:48Z", "updated": "2026-02-26T22:03:49Z", "expires": "2027-02-26T23:59:59Z", "nameservers": [ "ns1.hover.com", "ns2.hover.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-31T22:59:58Z", "analysis_at": "2026-10-31T18:22:18Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "created": "2026-02-26T00:00:00Z", "updated": "2026-02-26T00:00:00Z", "first_seen": "2026-03-01T16:04:08Z", "dns": [ { "ttl": 900, "type": "A", "value": "185.199.111.153" }, { "ttl": 900, "type": "NS", "value": "ns1.hover.com" }, { "ttl": 900, "type": "TXT", "value": "google-site-verification=xLdIvdnR_dtVopr5QjKsX-yrlcHS6cxGh4kRm8DkQqY" }, { "ttl": 900, "type": "A", "value": "185.199.109.153" }, { "ttl": 900, "type": "A", "value": "185.199.108.153" }, { "ttl": 900, "type": "A", "value": "185.199.110.153" }, { "ttl": 900, "type": "NS", "value": "ns2.hover.com" }, { "ttl": 900, "type": "SOA", "rname": "dnsmaster.hover.com", "value": "ns1.hover.com" } ], "dns_at": "2026-10-31T18:27:34Z", "jarm": "29d3fd00029d29d00041d41d00041d6b5eefa2404a56c2ced79a0d16afe36c", "cert": { "san": [ "treding.store", "www.treding.store" ], "issuer": "Let's Encrypt / YR2", "serial": "6034c677eb6ac7dc07e894ae27e09362c97", "sha256": "02b05eb783a81ed7d2c24410adba9ce7dd41050a122a2c818ed374eb70d38581", "subject": "treding.store", "valid_to": "2027-01-27T07:16:20Z", "valid_from": "2026-10-29T07:16:21Z" }, "rdap": { "status": [ "client transfer prohibited", "client update prohibited", "server transfer prohibited" ], "events": { "last changed": "2026-02-26T22:07:11Z", "registration": "2026-02-26T22:03:48Z", "registrar expiration": "2027-02-26T23:59:59Z", "last update of RDAP database": "2026-02-26T22:07:11Z" }, "registrar": "TUCOWS.COM, CO.", "registrar_iana_id": "69" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-31T22:29:36Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "treding.store" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-31T22:27:33Z", "first": "2026-10-31T22:27:33Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 178282 }, "robots_txt": { "agents": [ "*", "Googlebot", "AdsBot-Google", "GPTBot", "ChatGPT-User" ], "present": true, "sitemaps": [ "https://treding.store/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 1 }, "social_tags": { "ogUrl": "https://treding.store/", "title": "Treding Store — Crypto, Forex & CFD Trading Platform India", "author": "Treding Store", "ogType": "website", "robots": "index, follow", "ogImage": "https://treding.store/icon.svg", "ogTitle": "Treding Store — Crypto, Forex & CFD Trading", "keywords": "forex trading india, crypto trading india, gold trading, cfd trading, spot trading, futures trading, US Pairs, UPI deposit, treding store", "ogSiteName": "Treding Store", "themeColor": "#0b0e11", "description": "Treding Store is India's crypto, forex and CFD trading platform. Trade Bitcoin, Ethereum, 25+ Forex pairs, Gold, Silver, Indices and Crude with real-time charts. Invest with daily/monthly plans. UPI deposit & withdrawal supported.", "twitterCard": "summary_large_image", "canonicalUrl": "https://treding.store/", "ogDescription": "India's crypto + forex platform — trade Bitcoin, Gold, Nasdaq and Forex with daily investment plans. UPI deposit supported." }, "trackers": { "requests": 63, "trackers": [ { "name": "Google", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Analytics with signals", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Marketing Platform", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google APIs", "company": "Google", "country": "US", "category": "Hosting", "requests": 22 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 11 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 }, { "name": "ipify", "company": "ipify", "category": "Misc", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://cdn.tailwindcss.com/", "https://cdn.jsdelivr.net/npm/sweetalert2@11", "https://s3.tradingview.com/tv.js", "https://www.gstatic.com/firebasejs/10.7.0/firebase-app-compat.js", "https://www.gstatic.com/firebasejs/10.7.0/firebase-auth-compat.js", "https://www.gstatic.com/firebasejs/10.7.0/firebase-firestore-compat.js", "https://www.gstatic.com/firebasejs/10.7.0/firebase-storage-compat.js", "https://www.gstatic.com/firebasejs/10.7.0/firebase-analytics-compat.js", "https://www.gstatic.com/firebasejs/10.7.0/firebase-functions-compat.js", "https://www.gstatic.com/firebasejs/10.7.0/firebase-messaging-compat.js" ], "third_party_scripts": 10 }, "status": { "up": true, "code": 200, "timings": { "dns": 408, "tls": 21, "wait": 161, "connect": 16, "download": 74 }, "response_ms": 680 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 887826, "co2_grams": 0.0325, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "64.98.148.13", "host": "ns2.hover.com" }, { "ip": "216.40.47.26", "host": "ns1.hover.com" } ], "zone": "treding.store" }, "cookies": { "cookies": [ { "name": "_ga_9YWCKFZKB1" }, { "name": "_ga" } ] }, "location": { "ip": "185.199.108.153", "asn": "54113", "org": "Fastly, Inc.", "city": "San Francisco", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "treding.store" }, "dns": { "A": [ "185.199.110.153", "185.199.108.153", "185.199.111.153", "185.199.109.153" ], "NS": [ "ns2.hover.com", "ns1.hover.com" ], "SOA": "{\"nsname\": \"ns1.hover.com\", \"hostmaster\": \"dnsmaster.hover.com\", \"serial\": 1773316260, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 300}", "TXT": [ "google-site-verification=xLdIvdnR_dtVopr5QjKsX-yrlcHS6cxGh4kRm8DkQqY" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31556952", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31556952", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.199.108.153", "family": 4 }, "redirects": { "chain": [ "https://treding.store" ] }, "linked_pages": { "internal_count": 1 }, "whois": { "registrar": "Tucows Domains Inc.", "created": "2026-02-26T22:03:48Z", "updated": "2026-02-26T22:03:49Z", "expires": "2027-02-26T23:59:59Z", "status": [ "clientTransferProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp" ], "nameservers": [ "ns1.hover.com", "ns2.hover.com" ] }, "headers": { "headers": { "server": "GitHub.com", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31556952", "via": "1.1 varnish", "x-cache": "HIT", "x-cache-hits": "1", "x-served-by": "cache-par-lfpg1960066-PAR" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/dd5aa07c-130a-49c6-9d34-2463c9c28a7b.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/dd5aa07c-130a-49c6-9d34-2463c9c28a7b","captured_at":"2026-10-31T23:01:17Z","sha256":"d88644b40e073bdc508fe0c5905e87d6bb482d70dcc8d1c722b0df3de4e4af65","model_image_sha256":"e5002d54fb2eb46810a9f7305bc1c6feb3486249136d11e80b0e993ad53f32b5","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/treding.store/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/treding.store/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/treding.store/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/treding.store/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/treding.store/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/treding.store/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/treding.store/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/treding.store/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1724256, "scope": "checked_url", "observed_at": "2026-11-02T23:22:03Z", "http_status": 200, "http_observed_at": "2026-11-02T23:22:03Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-02T23:22:03Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-02T11:32:00Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```