Keamanan domain dan intelijen ancaman

marketsoption[.]com

Pemeriksaan phishing dan keamanan marketsoption.com

“Market Options | CFD Trading — Trading on Stocks, Gold, Oil, Indices”

Putusan ancaman Kritis 96/100 skor bukti

Ketersediaan Konten tidak tersedia Konten tidak tersedia dalam observasi terbaru

Sinyal risiko

VirusTotal detections: 12 (vendor total unavailable) Jenis penipuan: Crypto Drainer

12 detections VT 19/05/2026 Tidak tersedia sejak 20/05/2026 Crypto Drainer 1 Report Sent 9h to unavailable

Skor risiko: 96 dari 100. Tingkat risiko: Kritis.

Ringkasan laporan

marketsoption.com — Konten tidak tersedia (HTTP 502). Jenis penipuan: Crypto Drainer. Ringkasan bukti: VirusTotal 12 detections (engine total unavailable) (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); PhishDestroy score 96/100. Registrar: Ultahost.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Ringkasan bukti

Ref E0E8AD87 96/100 KRITIS

PhishDestroy first observed marketsoption.com on May 19, 2026. The captured page title is “Market Options | CFD Trading — Trading on Stocks, Gold, Oil, Indices”. Stored page analysis classifies the content as crypto drainer. Evidence score: 96/100 (critical).

Positive finding: VirusTotal. VirusTotal stored 12 positive engine results: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, Forcepoint ThreatSeeker, G-Data, Kaspersky; the total engine count is unavailable or inconsistent on Jun 17, 2026 at 22:30 UTC.

HTTP 502 was recorded on Aug 9, 2026 at 01:20 UTC; content was unavailable. Registration records for the domain list Ultahost, Inc. as the registrar and May 19, 2026 as the creation date. At collection time, the hostname resolved to 159.100.6.19 on AS214036 (Ultahost, Inc.). The evidence archive retains 2 visual captures from PhishDestroy and URLScan. Stored content provides classification context, but only one source contains a positive finding.

VirusTotal

12 det.

URLScan

Laporan ↗

Gridinsoft

1/100

Scamadviser

1/100

Sertifikat TLS

Let's Encrypt

Usia

3 mo New

Status terpantau

Konten tidak tersedia 502

Daftar Hapus

Terdaftar

Reports Sent

Cakupan data14 recorded checks

VirusTotal 12 detections · vendor total unavailable URLQuery source data unavailable PhishStats checked — no match recorded OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict putusan tidak tersedia Pemblokiran DNS 14 diperiksa — tidak ada blokir TLS valid certificate, 43d WHOIS 3 mo old Tangkapan layar 2 captures · 2 sources Rantai pengalihan tidak diselidiki Gridinsoft 1/100 Scamadviser 1/100

Sinyal Keamanan

Gridinsoft Analysis 1 / 100

5 1 2 14 102

Alur Tanggapan Ancaman Pipeline

Penemuan

Checks

Reports

Ketersediaan

11/11

Sent Report Recorded

Stored sent-report record for registrar Ultahost, Inc., hosting provider, 4 abuse contacts

abuse@ultahost.comu-abuse@ultahost.comabuse@first-colo.netwebproxy@whoisprotection.domains

19/05/2026

Status Daftar Blokir Publik

Tangkapan tersimpan

Screenshot of marketsoption.com — **Primary capture**2026-05-19 15:53 UTC 1 / 2

Lihat Ukuran Penuh Wayback Unduh

Judul Halaman

Market Options | CFD Trading — Trading on Stocks, Gold, Oil, Indices

Sertifikat TLS

Valid transport encryption · Diterbitkan oleh Let's Encrypt · valid for 43 days

Intelijen Domain

Domain

Server / ASN LiteSpeed · AS214036 Ultahost, Inc.

Reputasi IP abuse score 7/100 2 reports checked 13/07/2026

Registrar Ultahost

(NG)

Kontak penyalahgunaanabuse@ultahost.com, u-abuse@ultahost.com, abuse@first-colo.net, webproxy@whoisprotection.domains

Pendaftar ICANNPenyedia layanan pendaftaran resmi yang terakreditasi ICANN →

Pencarian WHOISICANN RDAP untuk marketsoption.com →

Alamat IP 159.100.6.19

Lokasi

Frankfurt am Main, DE

JaringanAS214036 · UltaHost Inc

IP terbalikviewdns.info → rapiddns.io →

PendaftaranDibuat 19/05/2026 (81d · New)

Status HTTP502 Error

Waktu hingga pertama kali tidak tersedia 9h

Yang kami hitung Waktu yang berlalu sejak laporan penyalahgunaan pertama kali disimpan hingga pengamatan pertama bahwa konten tersebut tidak tersedia. Hal ini tidak dapat menentukan penyebabnya.

Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.

Rincian teknisDNS, SAN SSL, cap waktu

Pertama Kali Terdeteksi19/05/2026

IoC Extractionscanned 01/08/20260 wallet · 0 Telegram IoCs

Submitted URLhttps://marketsoption.com/

Server namans4.ultahost.com

TLS Fingerprint

TLS Observationvalid from 02/04/2026scanned 19/05/2026

TLS SAN Domainsautodiscover.marketsoption.comcpanel.marketsoption.comcpcalendars.marketsoption.comcpcontacts.marketsoption.commail.marketsoption.comwebdisk.marketsoption.comwebmail.marketsoption.comwww.marketsoption.com

Case ID

ICANN OVERSIGHT

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Akreditasi adalah kontrak, bukan cap jaminan keamanan. Verifikasi biaya ICANN Baca RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight

Accountability draft Tidak ada yang dikirim secara otomatis.

Teknologi · 8 identified

YouTube

Video players

YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.

www.youtube.com Keyakinan 100%

Tailwind CSS

UI frameworks

Tailwind is a utility-first CSS framework.

tailwindcss.com Keyakinan 100%

LiteSpeed

Web servers

LiteSpeed is a high-scalability web server.

litespeedtech.com Keyakinan 100%

Alpine.js

JavaScript frameworks

JavaScript / web framework used to build the site.

github.com 75% confidence

Unpkg

CDN

Unpkg is a content delivery network for everything on npm.

unpkg.com Keyakinan 100%

jQuery CDN

CDN

jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.

code.jquery.com Keyakinan 100%

jQuery

JavaScript libraries

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jquery.com Keyakinan 100%

HTTP/3

Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org Keyakinan 100%

Detected via Cloudflare Radar · Wappalyzer engine

Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

12 detections recorded · vendor total unavailable

View on VT

Last analyzed 2026-06-18 00:30:50 UTC

ADMINUSLabs

alphaMountain.ai

BitDefender

Chong Lua Dao

CRDF

Forcepoint ThreatSeeker

G-Data

Kaspersky

Lionic

Netcraft

Sophos

VIPRE

Bukti & Laporan EksternalIndependent lookups and source reports

Analisis Keamanan

URLScan Stored capture VirusTotal 12 det. ChainPatrol URLQuery Data unavailable Gridinsoft 1 trust Scamadviser 1 trust SSL Laboratorium Stored TLS valid CF Radar Open report WOT Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN

Submitted Evidence Snapshot

Sent: 2026-05-19 14:55:26 UTC Ledger records: 1 Case ID: PD-20260519-B011C8 Recipient: abuse@ultahost.com

URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 118.7 KB

OSINT & Intelijen

Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Batu Hudson Sign-in search IntelX crt.sh Sertifikat WHOIS Wayback

DNS & Jaringan

nslookup.io DNS bgp.tools ASN /Rute

SEO & Domain

SpyFu Moz DA/PA Ahrefs Tautan balik Analisis Mendalam

Victim safety and official reportingImmediate actions and verified reporting channels

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

FBI IC3

Laporkan kejahatan yang dimungkinkan oleh internet di Amerika Serikat

Federal tips line1-800-CALL-FBI

Europol

Temukan saluran pelaporan resmi untuk negara UE Anda

National police directory

Action Fraud

Laporkan penipuan dan kejahatan dunia maya di Inggris, Wales, dan Irlandia Utara

Contact centre0300 123 2040

PhishDestroy listing review Bukan laporan penegakan hukum

Banding atas Nama Domain

Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah

Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara

Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri

Sematkan Laporan IniRead-only HTML widget

HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html

<iframe
  src="https://phishdestroy.io/id/embed/domain/marketsoption.com"
  title="PhishDestroy threat report for marketsoption.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>