# PhishDestroy domain threat record: vuramarketglobal.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/vuramarketglobal.com/ Machine-readable companion: https://phishdestroy.io/domain/vuramarketglobal.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-28 09:33:27 UTC - Last availability or vendor check: 2026-10-28 12:31:18 UTC - Stored record updated: 2026-10-28 14:17:37 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: ethereum ## Stored infrastructure - Observed IP address: 163.61.237.11 - Registrar in stored WHOIS data: NameSilo, LLC - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-25 15:35:46 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a181dc-11fc-7739-9414-525d7951ccf7/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/vuramarketglobal.com - Certificate Transparency search: https://crt.sh/?q=%25.vuramarketglobal.com - Web Archive lookup: https://web.archive.org/web/*/https://vuramarketglobal.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI classified the site as malicious because it advertises CFD trading with high‑yield promises and provides no regulatory information. The domain was first seen by PhishDestroy on 2026-10-28, three days after registration, and returned HTTP 200 at that time. How the scam works Fake investment sites present a professional‑looking trading interface, lure victims with promises of rapid profits and low spreads, and then require deposits or personal financial details. After funds are transferred the operators typically block withdrawals or disappear, leaving victims without recourse. Evidence VirusTotal scanned the domain on 2026-10-28 and reported three detections across 92 engines, labeling it malicious by Netcraft and suspicious by Fortinet and alphaMountain.ai. Google Safe Browsing checked the same day and did not flag the URL; external blocklists contained no entries and OTX showed zero pulses. PhishDestroy’s internal blocklist marked the domain as malicious and a urlscan capture (uuid 01a181d9-db42-77fe-a37f-f5c130ee8a24) recorded the page title on 2026-10-28, while Cloudflare Radar flagged it as phishing and scam. Infrastructure The domain was registered with NameSilo, LLC on 2026-10-25 and resolves to IP 163.61.237.11, which belongs to Extent Technologies Limited in Bangladesh. DNS records include an A record to that IP, MX pointing to the domain itself, and NS records at dns1.globaldnsnetwork.com and dns2.globaldnsnetwork.com; the site uses a Let's Encrypt certificate for *.vuramarketglobal.com valid until 2027-01-24 and has no DNSSEC. What to do Users should avoid submitting any personal, financial, or login information to the site and should not make any deposits; if credentials were entered, change the associated passwords immediately. Organizations should add vuramarketglobal.com to their blocklists, monitor access logs for connections to the recorded IP, and follow standard incident‑response procedures for any credential exposure. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a181dc-11fc-7739-9414-525d7951ccf7/ Cloudflare Radar report: https://radar.cloudflare.com/scan/e99e2863-3a71-462f-b46f-353025356055 Stored capture screenshot: https://i.ibb.co/XfhnpH2k/26ea8014039b.png VirusTotal report: https://www.virustotal.com/gui/domain/vuramarketglobal.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=vuramarketglobal.com Archived copy: https://web.archive.org/web/20261028093346/https://vuramarketglobal.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-28 09:36:25 UTC ## Stored page captures - Primary capture: https://i.ibb.co/XfhnpH2k/26ea8014039b.png Captured: 2026-10-28 09:35:17 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a181dc-11fc-7739-9414-525d7951ccf7.png Captured: 2026-10-28 09:35:17 UTC Source report: https://urlscan.io/result/01a181dc-11fc-7739-9414-525d7951ccf7/ - URLScan · 2026-10-28: https://screenshots.phishdestroy.io/us/01a181d9-db42-77fe-a37f-f5c130ee8a24.png Captured: 2026-10-28 09:32:11 UTC Source report: https://urlscan.io/result/01a181d9-db42-77fe-a37f-f5c130ee8a24/ SHA-256: 1eb5462fb579831a81e2f18a70e7f4001574cbf551010fb6ec93d25ca8326296 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a174f7-e8e1-755a-83a9-3fc605801926.png Captured: 2026-10-25 21:29:32 UTC Source report: https://urlscan.io/result/01a174f7-e8e1-755a-83a9-3fc605801926/ SHA-256: c429426a9dc72d0a3de38fb289380c3bffa7337c19b3679eaa6292a6740fcceb - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a178d5-90f3-720d-96dc-fb67a2c94bb9.png Captured: 2026-10-26 15:30:36 UTC Source report: https://urlscan.io/result/01a178d5-90f3-720d-96dc-fb67a2c94bb9/ SHA-256: 3e8161c1dce0a8ac4c0f39dc189e3c750f65a94ae80b881672667ac8ac337067 - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17ad2-5827-756f-baf7-e16102c27897.png Captured: 2026-10-27 00:46:19 UTC Source report: https://urlscan.io/result/01a17ad2-5827-756f-baf7-e16102c27897/ SHA-256: 6271c26c508192a9cb8f6e2444e55d79d7cfaac12199563a4c9e2eade59fcb8e - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17ad2-5535-7358-bacc-4cfff3d56b33.png Captured: 2026-10-27 00:46:26 UTC Source report: https://urlscan.io/result/01a17ad2-5535-7358-bacc-4cfff3d56b33/ SHA-256: 75fdb6b3cdea063beb9156c8b13d0cb61d6c4042c744a61ce5318b09f369682c - URLScan · 2026-10-28: https://screenshots.phishdestroy.io/us/01a181dc-a9e5-7314-85f5-f79ddeca8fea.png Captured: 2026-10-28 09:34:58 UTC Source report: https://urlscan.io/result/01a181dc-a9e5-7314-85f5-f79ddeca8fea/ SHA-256: ffa0df12518da079a5e24fc65991e462c41596b6b5292d2158dfca244919f3ff - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e99e2863-3a71-462f-b46f-353025356055.png Captured: 2026-10-28 09:34:05 UTC Source report: https://radar.cloudflare.com/scan/e99e2863-3a71-462f-b46f-353025356055 SHA-256: 19f0e02a08c84ad7ae52503d59059c6c22fb181258aabfa3cfd39663ea4ed68d - URLQuery: https://screenshots.phishdestroy.io/uq/0eb243da-a955-4091-afa9-fd1707eb04ac.png Source report: https://urlquery.net/report/0eb243da-a955-4091-afa9-fd1707eb04ac SHA-256: d2be4cc1246d08d457cd1a72fc749ef943bdcac72cfa09ffddf343faefbd1b99 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-28T09:48:45Z", "uuid": "01a181dc-11fc-7739-9414-525d7951ccf7", "scanned_at": "2026-10-28T09:34:16Z", "final_url": "https://vuramarketglobal.com/", "status": 200, "ip": "163.61.237.11", "ptr": "starlord.globaldnsnetwork.com", "domains": [ "www.tradingview-widget.com", "s3-symbol-logo.tradingview.com", "widget.coinlib.io", "www.youtube.com", "widgetdata.tradingview.com", "s3.tradingview.com", "widget-sheriff.tradingview-widget.com", "widget-v3.smartsuppcdn.com", "cdnjs.cloudflare.com", "jnn-pa.googleapis.com", "www.tradingview.com", "googleads.g.doubleclick.net", "s.tradingview.com", "fonts.gstatic.com", "unpkg.com", "cdn.tailwindcss.com", "websocket-visitors.smartsupp.com", "pushstream.tradingview.com", "www.googletagmanager.com", "i.ytimg.com", "s2.coinmarketcap.com", "www.google.com", "static.doubleclick.net", "bootstrap.smartsuppchat.com", "scanner-backend.tradingview.com", "api.coingecko.com", "www.smartsuppchat.com", "code.jquery.com", "fonts.googleapis.com", "www.clarity.ms" ], "ips": [ "2a00:1450:4001:c1f::61", "2001:4860:4840:400::", "212.102.56.178", "2001:4860:4824:600::", "18.64.211.75", "2600:9000:2490:e800:d:696d:d240:93a1", "2400:52e0:1e00:2::1331:1", "108.138.26.88", "142.251.152.119", "142.251.156.4", "2a00:1450:4001:c25::95", "142.251.20.155", "2a02:6ea0:c700::21", "18.184.200.240", "192.108.254.126" ], "asns": [ "15169", "60068", "16509", "199524", "13335", "54113", "153377" ], "countries": [ "DE", "US", "BD" ], "link_domains": [ "coinlib.io", "www.tradingview.com" ], "doc_hash": "f44caa56da75dc7f0cb801e2c0b8a23b5cf9f437d2dd326f948c08f30b206235", "globals": [ "tailwind", "$", "jQuery", "/template.html", "TradingView", "openDonationModal", "closeDonationModal", "host", "openLiveChat", "bindGAEvents", "_smartsupp", "smartsupp", "Alpine", "SMARTSUPP_LOADED", "$smartsupp", "modal", "modalContent" ], "cookies": [ "XSRF-TOKEN", "vuramarketglobal_session", "__Secure-YNID", "YSC", "__Secure-ROLLOUT_TOKEN", "VISITOR_INFO1_LIVE", "VISITOR_PRIVACY_METADATA" ], "tls": { "san": [ "*.vuramarketglobal.com", "vuramarketglobal.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "*.vuramarketglobal.com", "protocol": "TLS 1.3", "valid_to": "2027-01-24T14:10:45Z", "valid_from": "2026-10-26T14:10:46Z" }, "domain_age_days": 2, "apex_age_days": 2, "tls_age_days": 1, "tls_valid_days": 89, "requests": 538, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 90, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericscam" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Scam" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-28T09:34:49Z", "uuid": "e99e2863-3a71-462f-b46f-353025356055", "scanned_at": "2026-10-28T09:34:05Z", "final_url": "https://vuramarketglobal.com/", "status": 200, "history": [ { "url": "https://vuramarketglobal.com/", "status": 200 } ], "dom_hash": "19cbdb34c94446a240e195b6c0f57dec82132f491bee0f95ead27544f592a7f7", "doc_hash": "f44caa56da75dc7f0cb801e2c0b8a23b5cf9f437d2dd326f948c08f30b206235", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains", "Scam", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "vuramarketglobal.com", "type": "A", "value": "163.61.237.11" } ], "dnssec_valid": false, "ip": "127.0.1.17", "whois": { "registrar": "NameSilo, LLC", "created": "2026-10-25T16:35:46Z", "updated": "2026-10-25T16:36:05Z", "expires": "2027-10-25T16:35:46Z", "nameservers": [ "dns1.lytehosting.com", "dns2.lytehosting.com", "dns3.lytehosting.com", "dns4.lytehosting.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-28T09:33:59Z", "analysis_at": "2026-10-28T09:31:50Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 1, "suspicious": 2, "undetected": 36 }, "detections": { "Fortinet": "spam", "Netcraft": "malicious", "alphaMountain.ai": "spam" }, "reputation": 0, "categories": { "alphaMountain.ai": "Spam (alphaMountain.ai)", "Forcepoint ThreatSeeker": "newly registered websites" }, "registrar": "NameSilo, LLC", "created": "2026-10-25T16:35:46Z", "expires": "2027-10-25T16:35:46Z", "updated": "2026-10-25T16:36:05Z", "first_seen": "2026-10-25T16:47:13Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "dns1.globaldnsnetwork.com" }, { "ttl": 14400, "type": "A", "value": "163.61.237.11" }, { "ttl": 21600, "type": "SOA", "rname": "root.starlord.globaldnsnetwork.com", "value": "dns1.globaldnsnetwork.com" }, { "ttl": 21600, "type": "NS", "value": "dns2.globaldnsnetwork.com" }, { "ttl": 14400, "type": "MX", "value": "vuramarketglobal.com", "priority": 0 }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:163.61.237.11 ~all" } ], "dns_at": "2026-10-28T09:32:21Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "*.vuramarketglobal.com", "vuramarketglobal.com" ], "issuer": "Let's Encrypt / YR1", "serial": "5ac03f5828acb9fe921dea1c3b87eb3accb", "sha256": "e0c918142819121c1c8033bc041ad61b13ed7af82fa7ce26da23e9bf509e814f", "subject": "*.vuramarketglobal.com", "valid_to": "2027-01-24T14:10:45Z", "valid_from": "2026-10-26T14:10:46Z" }, "whois": { "registrar": "NameSilo, LLC", "registrar_iana_id": "1479", "registrar_url": "http://www.namesilo.com", "created": "2026-10-25T16:35:46Z", "updated": "2026-10-25T16:36:05Z", "expires": "2027-10-25T16:35:46Z", "status": [ "ok" ], "nameservers": [ "dns1.lytehosting.com", "dns2.lytehosting.com", "dns3.lytehosting.com", "dns4.lytehosting.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "expiration": "2027-10-25T16:35:46Z", "last changed": "2026-10-25T16:36:05Z", "registration": "2026-10-25T16:35:46Z", "last update of RDAP database": "2026-10-25T16:46:43Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-28T09:35:12Z", "mail_config": { "mx": [ "vuramarketglobal.com" ], "spf": "v=spf1 +a +mx +ip4:163.61.237.11 ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "caa_records": { "domain": "vuramarketglobal.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-28T09:33:46Z", "first": "2026-10-28T09:33:46Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 39757 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "Vura Market Global | CFD Trading — Trading on Stocks, Gold, Oil, Indices", "ogType": "website", "ogImage": "img/share.jpg", "ogTitle": "CFD Trading — Trading on Stocks, Gold, Oil, Indices | Vura Market Global", "keywords": "forex, CFDs, CFD, Bitcoin trading, crypto trading, online trading, Forex trading, Oil trading, Gold trading, trading indexes, shares trading, commodities trading, trading platform, Cryptocurrencies day trading", "ogSiteName": "Vura Market Global", "themeColor": "#111827", "description": "CFD Trading with Vura Market Global. Trading on Stocks, Gold, Oil, Indices with ultra-fast execution & spreads from 0.0 pips. News, articles and training materials for experienced and novice traders.", "ogDescription": "CFD Trading with Vura Market Global. Trading on Stocks, Gold, Oil, Indices with ultra-fast execution & spreads from 0.0 pips. News, articles and training materials for experienced and novice traders." }, "mixed_content": { "no_sri": [ "https://cdn.tailwindcss.com/", "https://unpkg.com/alpinejs@3.x.x/dist/cdn.min.js", "https://s3.tradingview.com/tv.js", "https://s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js", "https://s3.tradingview.com/external-embedding/embed-widget-market-overview.js", "https://s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js", "https://s3.tradingview.com/external-embedding/embed-widget-forex-heat-map.js", "https://code.jquery.com/jquery-3.6.0.min.js" ], "third_party_scripts": 8 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 140, "wait": 987, "connect": 137, "download": 589 }, "response_ms": 1855 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 242171, "co2_grams": 0.0089, "cleaner_than": 3 }, "dns_server": { "ns": [ { "ip": "163.61.188.106", "host": "dns1.globaldnsnetwork.com" }, { "ip": "163.61.188.106", "host": "dns2.globaldnsnetwork.com" } ], "zone": "vuramarketglobal.com" }, "location": { "ip": "163.61.237.11", "asn": "153377", "org": "Extent Technologies Limited", "city": "Pābna", "country": "BD" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "*.vuramarketglobal.com" }, "dns": { "A": [ "163.61.237.11" ], "MX": [ "{\"exchange\": \"vuramarketglobal.com\", \"priority\": 0}" ], "NS": [ "dns2.globaldnsnetwork.com", "dns1.globaldnsnetwork.com" ], "SOA": "{\"nsname\": \"dns1.globaldnsnetwork.com\", \"hostmaster\": \"root.starlord.globaldnsnetwork.com\", \"serial\": 2026102612, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:163.61.237.11 ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "163.61.237.11", "family": 4 }, "redirects": { "chain": [ "https://vuramarketglobal.com" ] }, "linked_pages": { "external": [ "https://coinlib.io/", "https://www.tradingview.com/markets/currencies/forex-heat-map/" ], "external_count": 2, "internal_count": 66 }, "whois": { "registrar": "NameSilo, LLC", "created": "2026-10-25T16:35:46Z", "updated": "2026-10-26T15:01:10Z", "expires": "2027-10-25T16:35:46Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "dns1.globaldnsnetwork.com", "dns2.globaldnsnetwork.com" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8" } } } } ```