# unitedgoldcapitallimited.ltd — Recorded security evidence | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/ Machine-readable companion: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-08 17:18:16 UTC - Selected availability observation: 2026-11-08T17:19:24Z - Stored record updated: 2026-11-08 19:00:13 UTC - VirusTotal detections in the stored snapshot: 6/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 198.251.89.30 - Registrar in stored WHOIS data: TuringSign Inc. d/b/a Cosmotown - Last stored HTTP status: 200 (observed: 2026-11-08T17:19:24Z) ## Evidence links - URLScan report: https://urlscan.io/result/01a1bb9f-365b-7358-91ca-3f0fd3a51fb2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/unitedgoldcapitallimited.ltd - Certificate Transparency search: https://crt.sh/?q=%25.unitedgoldcapitallimited.ltd - Web Archive lookup: https://web.archive.org/web/*/https://unitedgoldcapitallimited.ltd/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy stores a record for unitedgoldcapitallimited.ltd. Source observations are dated separately; missing checks do not establish safety. PhishDestroy stores a record for unitedgoldcapitallimited.ltd. Source observations are dated separately; missing checks do not establish safety. A reviewed analysis is not available for this text revision. Consult the dated source records below. Package revision: 8e73a2b39c1941f37b3a2b9c932fabb51d19992483edd2008e26488fec77f926 Source facts (timestamps as stored): {"record_id":1861896,"first_recorded_at":"2026-11-08 18:18:16","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":6,"denominator":92,"malicious":6,"suspicious":0,"vendors":{"DNS8":"phishing","VIPRE":"phishing","Netcraft":"malicious","SOCRadar":"phishing","LevelBlue":"phishing","Gridinsoft":"phishing"},"observed_at":"2026-11-08T07:08:48Z","checked_at":null,"fetched_at":"2026-11-08T17:24:01Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":6,"denominator":92,"malicious":null,"suspicious":null,"vendors":["DNS8","Gridinsoft","LevelBlue","Netcraft","SOCRadar","VIPRE"],"observed_at":"2026-11-08 07:08:48","checked_at":"2026-11-08 18:24:02","fetched_at":"2026-11-08 17:24:02","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"phishing","VIPRE":"phishing","Netcraft":"malicious","SOCRadar":"phishing","LevelBlue":"phishing","Gridinsoft":"phishing"},"vendor_names":["DNS8","VIPRE","Netcraft","SOCRadar","LevelBlue","Gridinsoft"],"stats":{"timeout":0,"harmless":53,"malicious":6,"suspicious":0,"undetected":33}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 19:36:53"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1861896,"scope":"checked_url","observed_at":"2026-11-08T17:19:24Z","http_status":200,"http_observed_at":"2026-11-08T17:19:24Z","stored_http_code":200,"stored_http_observed_at":"2026-11-08T17:19:24Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-08: https://screenshots.phishdestroy.io/us/01a1bb9f-365b-7358-91ca-3f0fd3a51fb2.png Captured: 2026-11-08 14:46:03 UTC Source report: https://urlscan.io/result/01a1bb9f-365b-7358-91ca-3f0fd3a51fb2/ SHA-256: 66c3b689dc89f7d4f7879c91b9da12b5a7b80db6cf7958711da93cef13e5f922 - URLScan · 2026-11-07: https://screenshots.phishdestroy.io/us/01a1b756-b921-7256-98f9-58908e36e21f.png Captured: 2026-11-07 18:48:13 UTC Source report: https://urlscan.io/result/01a1b756-b921-7256-98f9-58908e36e21f/ SHA-256: e2f7d5b482a50150517957a4b692db020182e1b46fb9af1a269956f5ac3feb6c - URLScan · 2026-11-07: https://screenshots.phishdestroy.io/us/01a1b852-f8c6-7146-a02d-1f083d0210bd.png Captured: 2026-11-07 23:23:41 UTC Source report: https://urlscan.io/result/01a1b852-f8c6-7146-a02d-1f083d0210bd/ SHA-256: 2ebd892c00a3c49bf26a122cd1c8085ecf70ee5d72d0fa1d336a1d4bd4cbe85d - URLScan · 2026-11-08: https://screenshots.phishdestroy.io/us/01a1b9d9-cb6a-719f-93f2-429d7e27c404.png Captured: 2026-11-08 06:30:37 UTC Source report: https://urlscan.io/result/01a1b9d9-cb6a-719f-93f2-429d7e27c404/ SHA-256: 11929c26654788fb296e7252d2d6906fe3da944ebb8a4e8b1ab433d3fa79a098 - URLScan · 2026-11-08: https://screenshots.phishdestroy.io/us/01a1bc2b-3ab2-733f-9eeb-3caad198a150.png Captured: 2026-11-08 17:18:41 UTC Source report: https://urlscan.io/result/01a1bc2b-3ab2-733f-9eeb-3caad198a150/ SHA-256: fdde0550964125720c2d5af17ebcf3c26a9e83b5a33b48da56d83adf4693de44 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a3b86d7f-9964-4585-8953-ecffe99ecfa0.png Captured: 2026-11-08 17:21:13 UTC Source report: https://radar.cloudflare.com/scan/a3b86d7f-9964-4585-8953-ecffe99ecfa0 SHA-256: 6b510bb05b466a4d68c4da794ea6d9c8a987dbce565a72027a9c0d1b79023d05 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-08T17:20:36Z", "uuid": "01a1bb9f-365b-7358-91ca-3f0fd3a51fb2", "scanned_at": "2026-11-08T14:46:03Z", "final_url": "https://unitedgoldcapitallimited.ltd/", "status": 200, "ip": "198.251.89.30", "ptr": "c6.my-control-panel.com", "domains": [ "www.tradingview-widget.com", "widget-v3.smartsuppcdn.com", "translate.googleapis.com", "www.gstatic.com", "res.cloudinary.com", "fonts.gstatic.com", "websocket-visitors.smartsupp.com", "widgetdata.tradingview.com", "widget-sheriff.tradingview-widget.com", "translate-pa.googleapis.com", "bootstrap.smartsuppchat.com", "fonts.googleapis.com", "www.smartsuppchat.com", "translate.google.com" ], "ips": [ "109.61.91.195", "18.165.83.61", "172.217.112.4", "37.19.207.37", "52.28.227.48", "173.194.45.95", "142.251.156.120", "172.253.139.94", "64.233.180.95", "109.61.91.198", "172.253.63.100", "104.16.79.6", "198.251.89.30" ], "asns": [ "60068", "16509", "15169", "13335", "53667" ], "countries": [ "US", "DE", "LU" ], "link_domains": [ "translate.google.com", "www.tradingview.com" ], "doc_hash": "2a1c515cfb91a108a82a5f161788bc803cc4d427d5059212d080619ec19c45cd", "script_hashes": [ "3b780d3f8dc4dd6d5418d69662ae5c36a077422af1975d56d7f4dead482c5720", "ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127", "75407612846faa50c7a083ba0e59923f6f2a12e8804ad144c4dd4cd95004a187", "ae3da7195afaea03bf53cde1b812f4659fac2aaaa3ae062995143d2453563860", "96a583fb4d587dea03a803e3f188a3c3bdfed77eb44e7e5141ee63741a5d44c8", "b9b3e34e0e6520221a0b7b2ebd007993f56cec0aeea1bdc1b642d17575ecd52e", "df2871754062124a32cf8f3097f52c2e8147879ea2c770aa8a2fe1b9d27dfb32" ], "globals": [ "_smartsupp", "smartsupp", "SMARTSUPP_LOADED", "$smartsupp", "$", "jQuery", "uidEvent", "bootstrap", "html5", "Modernizr", "yepnope", "EvEmitter", "imagesLoaded", "eventie", "EventEmitter", "getStyleProperty", "getSize", "docReady", "matchesSelector", "fizzyUIUtils", "Outlayer", "Isotope", "Masonry", "jQueryBridget", "JQClass", "WOW", "Swiper", "Odometer", "googleTranslateElementInit", "_DumpException", "google", "default_tr", "_F_toggles_default_tr", "closure_lm_21487" ], "storage_keys": [ "ssupp_28f00aeaa9406d212116a42ae659e31783a090cf" ], "tls": { "san": [ "*.ltd.marketinggroupscompany.com", "*.unitedgoldcapitallimited.ltd", "unitedgoldcapitallimited.ltd", "www.scalablecapitalimited.ltd.marketinggroupscompany.com", "www.unitedgoldcapitallimited.ltd.marketinggroupscompany.com" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "*.ltd.marketinggroupscompany.com", "protocol": "TLS 1.3", "valid_to": "2027-02-05T16:28:42Z", "valid_from": "2026-11-07T16:28:43Z" }, "domain_age_days": 0, "apex_age_days": 0, "tls_age_days": 0, "tls_valid_days": 89, "requests": 98, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 100, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-11-08T17:22:21Z", "uuid": "a3b86d7f-9964-4585-8953-ecffe99ecfa0", "scanned_at": "2026-11-08T17:21:13Z", "final_url": "https://unitedgoldcapitallimited.ltd/", "status": 200, "history": [ { "url": "https://unitedgoldcapitallimited.ltd/", "status": 200 } ], "dom_hash": "6ac3f52bd79ca72f8845844331ad43f09c89e2b7814cb43488187680c75e09e5", "doc_hash": "2176d025c399a316ec07d484c60a94817ca95fc204a48491d30021fd792f50f6", "domain_risks": [ "New Domains", "Security Risks", "Newly Seen Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "unitedgoldcapitallimited.ltd", "type": "A", "value": "198.251.89.30" } ], "dnssec_valid": false, "ip": "127.0.1.14", "whois": { "registrar": "TuringSign Inc. d/b/a Cosmotown", "created": "2026-11-07T08:12:57Z", "updated": "2026-11-07T08:18:32Z", "expires": "2027-11-07T08:12:57Z", "nameservers": [ "ns23.asurahosting.com", "ns24.asurahosting.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-08T17:24:01Z", "analysis_at": "2026-11-08T07:08:48Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 6, "suspicious": 0, "undetected": 33 }, "detections": { "DNS8": "phishing", "VIPRE": "phishing", "Netcraft": "malicious", "SOCRadar": "phishing", "LevelBlue": "phishing", "Gridinsoft": "phishing" }, "reputation": 0, "first_seen": "2026-11-07T18:32:28Z", "dns": [ { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:192.168.168.2 ~all" }, { "ttl": 14400, "type": "A", "value": "198.251.89.30" }, { "ttl": 14400, "type": "MX", "value": "unitedgoldcapitallimited.ltd", "priority": 0 }, { "ttl": 21600, "type": "SOA", "rname": "root.c6.my-control-panel.com", "value": "ns23.my-control-panel.com" }, { "ttl": 21600, "type": "NS", "value": "ns24.my-control-panel.com" }, { "ttl": 21600, "type": "NS", "value": "ns23.my-control-panel.com" } ], "dns_at": "2026-11-08T07:11:12Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "*.ltd.marketinggroupscompany.com", "*.unitedgoldcapitallimited.ltd", "unitedgoldcapitallimited.ltd", "www.scalablecapitalimited.ltd.marketinggroupscompany.com", "www.unitedgoldcapitallimited.ltd.marketinggroupscompany.com" ], "issuer": "Let's Encrypt / YR2", "serial": "6a40431b3470ae7d3b83c9de135c43df257", "sha256": "f6179756903034ac4a376974ebbd0825328b842f26726b3a4c2689fc8717200a", "subject": "*.ltd.marketinggroupscompany.com", "valid_to": "2027-02-05T16:28:42Z", "valid_from": "2026-11-07T16:28:43Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-08T17:22:46Z", "mail_config": { "mx": [ "unitedgoldcapitallimited.ltd" ], "spf": "v=spf1 +a +mx +ip4:192.168.168.2 ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-11-08T17:19:17Z", "first": "2026-11-08T17:19:17Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 11923 }, "social_tags": { "title": "Referrer=None | Unitedgold Capital Limited | Home", "author": "wpOceans" }, "trackers": { "requests": 0 }, "mixed_content": { "no_sri": [ "https://translate.google.com/translate_a/element.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 608, "tls": 313, "wait": 694, "connect": 62, "download": 224 }, "response_ms": 1901 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 52484, "co2_grams": 0.0019, "cleaner_than": 36 }, "dns_server": { "ns": [ { "ip": "107.189.31.99", "host": "ns23.my-control-panel.com" }, { "ip": "198.251.89.30", "host": "ns24.my-control-panel.com" } ], "zone": "unitedgoldcapitallimited.ltd" }, "location": { "ip": "198.251.89.30", "asn": "53667", "org": "FranTech Solutions", "city": "Luxembourg", "country": "LU" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "*.ltd.marketinggroupscompany.com" }, "dns": { "A": [ "198.251.89.30" ], "MX": [ "{\"exchange\": \"unitedgoldcapitallimited.ltd\", \"priority\": 0}" ], "NS": [ "ns23.my-control-panel.com", "ns24.my-control-panel.com" ], "SOA": "{\"nsname\": \"ns23.my-control-panel.com\", \"hostmaster\": \"root.c6.my-control-panel.com\", \"serial\": 2026110708, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:192.168.168.2 ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "198.251.89.30", "family": 4 }, "redirects": { "chain": [ "https://unitedgoldcapitallimited.ltd" ] }, "linked_pages": { "internal_count": 8 }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } } } } ``` ## Complete dated records Availability observations: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/unitedgoldcapitallimited.ltd/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1861896, "scope": "checked_url", "observed_at": "2026-11-08T17:19:24Z", "http_status": 200, "http_observed_at": "2026-11-08T17:19:24Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-08T17:19:24Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```