# westerncentury.xyz — Western Century crypto trading homepage | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/westerncentury.xyz/ Machine-readable companion: https://phishdestroy.io/domain/westerncentury.xyz/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-10-31 22:28:48 UTC - Selected availability observation: 2026-11-02T11:32:36Z - Stored record updated: 2026-11-02 16:21:46 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): ethereum ## Stored infrastructure - Observed IP address: 51.68.132.244 - Registrar in stored WHOIS data: HOSTINGER operations, UAB - Last stored HTTP status: 200 (observed: 2026-11-02T11:32:36Z) - Registration date in stored WHOIS data: 2026-08-31 18:53:15 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19412-9093-731e-9c7b-9a8596636ef2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/westerncentury.xyz - Certificate Transparency search: https://crt.sh/?q=%25.westerncentury.xyz - Web Archive lookup: https://web.archive.org/web/*/https://westerncentury.xyz/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records westerncentury.xyz as a crypto trading homepage offering real-time market data and a Start Trading call to action. The captured westerncentury.xyz homepage presents itself as a cryptocurrency trading platform under the Western Century branding, with the headline "Trade Smarter, Not Harder" and a subheading promising advanced tools and real-time market data. The main interaction is a prominent Start Trading button beside a Learn More option, while a BTC/USDT chart panel with Buy BTC and Sell BTC controls sits alongside headline figures for trading volume, active traders and trading pairs. The stored VirusTotal domain result reports 1 detection out of 92 engines. CRDF reported "malicious". Package revision: e56b1a50db2ebfe5895b58fd88cfbbca29381c8ecfa786a691df00da259891ef Text generated (not scan time): 2026-11-01 00:04:11 Reviewed evidence snapshot: {"domain":"westerncentury.xyz","screenshot_available":true,"page_title":"Western Century | Home","initial_ai_description":"The website presents itself as a cryptocurrency trading platform, offering advanced trading tools, real-time market data, and high trading volumes. This aligns with the characteristics of a fraudulent investment scheme, where victims are enticed to deposit funds for trading that never actually occurs or is manipulated.","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-10-31","analysis_date":"2026-10-31","flagging_vendors":["CRDF"],"vendor_labels":{"CRDF":"malicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-31T23:01:01Z","final_host":"westerncentury.xyz","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detection out of 92 engines. CRDF reported \"malicious\".","page_paragraph_target_characters":547} Source facts (timestamps as stored): {"record_id":1724267,"first_recorded_at":"2026-10-31 23:28:48","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"CRDF":"malicious"},"observed_at":"2026-10-31T03:11:16Z","checked_at":null,"fetched_at":"2026-10-31T22:59:57Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["CRDF"],"observed_at":"2026-10-31 03:11:16","checked_at":"2026-11-01 00:00:00","fetched_at":"2026-10-31 23:00:01","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious"},"vendor_names":["CRDF"],"stats":{"timeout":0,"harmless":54,"malicious":1,"suspicious":0,"undetected":37}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 06:00:46"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-01 00:30:26"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1724267,"scope":"checked_url","observed_at":"2026-11-02T11:32:36Z","http_status":200,"http_observed_at":"2026-11-02T11:32:36Z","stored_http_code":200,"stored_http_observed_at":"2026-11-02T11:32:36Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-02T11:32:36Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-10-31: https://screenshots.phishdestroy.io/01a19412-9093-731e-9c7b-9a8596636ef2.png Captured: 2026-10-31 22:26:54 UTC Source report: https://urlscan.io/result/01a19412-9093-731e-9c7b-9a8596636ef2/ - URLScan · 2026-10-30: https://screenshots.phishdestroy.io/us/01a18abd-b698-71af-9a5c-dd54a1b7a699.png Captured: 2026-10-30 02:57:40 UTC Source report: https://urlscan.io/result/01a18abd-b698-71af-9a5c-dd54a1b7a699/ SHA-256: d6de46ad643324271710f96e8b1bad9a0e4e8969a0f570af0587cf034037b449 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9d859a70-903f-4637-a9e3-710fa84c63ab.png Captured: 2026-10-31 23:01:01 UTC Source report: https://radar.cloudflare.com/scan/9d859a70-903f-4637-a9e3-710fa84c63ab SHA-256: 210b8ba25df045d62c9baa5690134a808335845553e1e78a50fe52c09faf2e9a ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-31T23:03:03Z", "uuid": "01a19412-9093-731e-9c7b-9a8596636ef2", "scanned_at": "2026-10-31T22:26:54Z", "final_url": "https://westerncentury.xyz/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://westerncentury.xyz/", "from": "http://westerncentury.xyz/", "status": 307 } ], "ip": "51.68.132.244", "ptr": "route-a1.hosting.markets", "domains": [ "www.tradingview-widget.com", "assets.coingecko.com", "s3.tradingview.com", "cdnjs.cloudflare.com", "js.stripe.com", "m.stripe.network", "www.tradingview.com", "s.tradingview.com", "unpkg.com", "cdn.jsdelivr.net", "cdn.tailwindcss.com", "pushstream.tradingview.com", "widgetdata.tradingview.com", "m.stripe.com", "widget-sheriff.tradingview-widget.com", "bootstrap.smartsuppchat.com", "scanner-backend.tradingview.com", "www.smartsuppchat.com", "api.coingecko.com" ], "ips": [ "34.210.161.26", "2600:9000:2096:a800:19:7d10:bd80:93a1", "18.173.205.2", "108.138.26.43", "63.180.149.57", "76.164.232.95", "2400:52e0:1e00:2::1328:1", "2a02:6ea0:c77a::47", "18.64.211.29", "172.66.172.219", "104.18.5.118", "2400:52e0:1e00:2::1329:1", "104.17.25.14", "104.18.0.22", "2606:4700::6810:b470" ], "asns": [ "16509", "400416", "60068", "13335", "54113", "16276" ], "countries": [ "US", "DE", "FR" ], "doc_hash": "114807e726ae3bf4b0fd2e1910880bb3c8f550928369ab03b2ff967a779610d0", "script_hashes": [ "f62d6590dc747d26dc93b93b275325e7394ffd350bdc49704d35c1d0d0504256", "ffc5fac213462696e8433af0715bb40255ea0a98ed1c90525959838898d7ca30", "e2fc72cd4daacac923054d82a47bf6a446932cdda31466ed4dd1ea94a3440910" ], "globals": [ "webpackChunkStripeJSouter", "noop", "Stripe", "tailwind", "Chart", "lucide", "TradingView", "/template.html", "formatVolume", "_smartsupp", "smartsupp", "SMARTSUPP_LOADED", "$smartsupp", "Livewire", "Alpine", "locale", "translations", "coingeckoAPI", "navToggle", "mobileMenu" ], "cookies": [ "XSRF-TOKEN", "century_session", "m", "__stripe_mid", "__stripe_sid" ], "tls": { "san": [ "*.westerncentury.xyz", "westerncentury.xyz", "westerncentury.xyz.blueaxis.xyz", "www.westerncentury.xyz.blueaxis.xyz" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "www.westerncentury.xyz.blueaxis.xyz", "protocol": "TLS 1.3", "valid_to": "2026-12-01T14:07:49Z", "valid_from": "2026-09-02T14:07:50Z" }, "domain_age_days": 60, "apex_age_days": 60, "tls_age_days": 59, "tls_valid_days": 89, "requests": 195, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "geolocation=(), microphone=(), camera=()", "content-language": "en" } }, "cf": { "v": 1, "fetched_at": "2026-10-31T23:03:05Z", "uuid": "9d859a70-903f-4637-a9e3-710fa84c63ab", "scanned_at": "2026-10-31T23:01:01Z", "final_url": "https://westerncentury.xyz/", "status": 200, "history": [ { "url": "https://westerncentury.xyz/", "status": 200 } ], "dom_hash": "504d9d059386ee779f91cbdcabaeb1d7cfd33e361dbd4506dd319830c5f214cf", "doc_hash": "3474593966bd6b20c8cff83a4ff918323bd479cfa33c3ec12ca68b9d16cd570e", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "westerncentury.xyz", "type": "A", "value": "51.68.132.244" } ], "dnssec_valid": false, "ip": "127.0.1.1", "whois": { "registrar": "HOSTINGER operations, UAB", "created": "2026-08-31T20:53:15Z", "updated": "2026-09-05T20:57:12Z", "expires": "2027-08-31T23:59:59Z", "nameservers": [ "ns1.destinedhost.com.ng", "ns2.destinedhost.com.ng" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-31T22:59:57Z", "analysis_at": "2026-10-31T03:11:16Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 1, "suspicious": 0, "undetected": 37 }, "detections": { "CRDF": "malicious" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "elevated exposure" }, "registrar": "HOSTINGER operations, UAB", "created": "2026-08-31T20:53:15Z", "expires": "2027-08-31T23:59:59Z", "updated": "2026-09-05T20:57:12Z", "first_seen": "2026-09-02T15:51:44Z", "dns": [ { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:79.137.68.87 ~all" }, { "ttl": 21600, "type": "NS", "value": "ns2.destinedhost.com.ng" }, { "ttl": 21600, "type": "NS", "value": "ns1.destinedhost.com.ng" } ], "dns_at": "2026-10-31T02:12:33Z", "jarm": "00029d00029d29d00042d43d00041dbf61bda0e22d11e30f357084f83975be", "cert": { "san": [ "*.westerncentury.xyz", "westerncentury.xyz", "westerncentury.xyz.blueaxis.xyz", "www.westerncentury.xyz.blueaxis.xyz" ], "issuer": "Let's Encrypt / YR2", "serial": "66323a208ae1a7567cbe73ed626949c90b4", "sha256": "5a43264b6e7a59b696205991771be0178602999dd7f6819a53baa46e22ff734a", "subject": "www.westerncentury.xyz.blueaxis.xyz", "valid_to": "2026-12-01T14:07:49Z", "valid_from": "2026-09-02T14:07:50Z" }, "whois": { "registrar": "HOSTINGER operations, UAB", "registrar_iana_id": "1636", "registrar_url": "https://www.hostinger.com/", "created": "2026-08-31T20:53:15Z", "updated": "2026-09-05T20:57:12Z", "expires": "2027-08-31T23:59:59Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.destinedhost.com.ng", "ns2.destinedhost.com.ng" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-31T23:03:40Z", "mail_config": { "mx": [ "westerncentury.xyz" ], "spf": "v=spf1 +a +mx +ip4:79.137.68.87 ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "caa_records": { "domain": "westerncentury.xyz" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "agents": [ "*" ], "present": true }, "trackers": { "requests": 27, "trackers": [ { "name": "Smartsupp Chat", "company": "Smartsuppp", "country": "CZ", "category": "Customer Interaction", "requests": 2 }, { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 5 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 2 }, { "name": "unpkg", "company": "unpkg", "category": "Hosting", "requests": 2 }, { "name": "Stripe", "company": "Stripe", "country": "US", "category": "Utilities", "requests": 3 } ] }, "status": { "up": true, "code": 200, "timings": { "dns": 15326, "tls": 28, "wait": 313, "connect": 24, "download": 1 }, "response_ms": 15692 }, "carbon": { "bytes": 30541, "co2_grams": 0.0011, "cleaner_than": 48 }, "dns_server": { "ns": [ { "ip": "51.68.132.245", "host": "ns1.destinedhost.com.ng" }, { "ip": "23.95.132.200", "host": "ns2.destinedhost.com.ng" } ], "zone": "westerncentury.xyz" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "www.westerncentury.xyz.blueaxis.xyz" }, "dns": { "A": [ "51.68.132.244" ], "NS": [ "ns2.destinedhost.com.ng", "ns1.destinedhost.com.ng" ], "SOA": "{\"nsname\": \"ns1.destinedhost.com.ng\", \"hostmaster\": \"noc-admin.server.gb.net\", \"serial\": 2026090207, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:79.137.68.87 ~all" ] }, "get_ip": { "ip": "51.68.132.244", "family": 4 }, "redirects": { "chain": [ "https://westerncentury.xyz" ] }, "linked_pages": { "internal_count": 9 } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/9d859a70-903f-4637-a9e3-710fa84c63ab.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/9d859a70-903f-4637-a9e3-710fa84c63ab","captured_at":"2026-10-31T23:01:01Z","sha256":"210b8ba25df045d62c9baa5690134a808335845553e1e78a50fe52c09faf2e9a","model_image_sha256":"347fc37f18b9a818224f39c97183af99070164054404b9ffe8523055e3af7a82","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/westerncentury.xyz/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1724267, "scope": "checked_url", "observed_at": "2026-11-02T11:32:36Z", "http_status": 200, "http_observed_at": "2026-11-02T11:32:36Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-02T11:32:36Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-02T11:32:36Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```