VirusTotal
6 / 92 engine detections
レポートを開く“STAR-MIND AI Trader | SpaceX, Tesla, Grok”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@regtons.com.
The latest stored availability evidence still shows the domain reachable; 4 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Acrossなりすまし: starmindopenaitrading.com — 最後に確認されたアクティブな状態 (HTTP 200). 証拠の概要: VirusTotal 6/92 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft…
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
6 / 92 engine detections
レポートを開くSuspicious
レポートを開くScan report
レポートを開くno community references
レポートを開くNo threat flag
レポートを開くNo malicious flag
レポートを開くResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
starmindopenaitrading.com is an impersonation phishing page that presents itself as "STAR-MIND AI Trader" and borrows the names SpaceX, Tesla and Grok. The domain name also invokes OpenAI. It targets retail investors and crypto users drawn to promises of automated AI-driven profits. PhishDestroy first flagged it on 2026-10-16, the same day the domain was registered. As of 2026-10-19 the site was still online and serving its content.
Schemes like this use celebrity and tech brands to make a fake trading bot look official. The page title "STAR-MIND AI Trader | SpaceX, Tesla, Grok" signals that pitch. Visitors are usually asked to register with personal details and then fund an account, often in cryptocurrency. A dashboard may show rising balances, but those numbers are typically fictitious. When victims try to withdraw, they are commonly blocked or told to pay extra fees, so the deposited money and the personal data handed over are what they lose.
The classification rests on PhishDestroy's own analysis, and PhishDestroy is currently the only blocklist listing this domain. VirusTotal showed 0 detections out of 92 engines when checked on 2026-10-16. That clean result reflects how new the domain is, not that it is safe. The combination of an AI trading pitch with unaffiliated SpaceX, Tesla and Grok branding on a same-day domain is a well-known investment-fraud pattern.
The domain was registered on 2026-10-16 through Gransy, s.r.o. It is hosted in the United States on Amazon's network, AS16509 Amazon.com, Inc., at IP address 166.117.205.170. The site uses a TLS certificate issued by Let's Encrypt (YE1). That certificate only encrypts the connection and says nothing about whether the operator is legitimate.
Do not register, deposit or send cryptocurrency through this site. If you already transferred funds, stop all further payments, including any requested "withdrawal fees," and report the transaction to your exchange or bank and to local police. If you created an account, change that password everywhere you reused it and watch for follow-up contact from fake "account managers" or recovery services. Defenders should block the domain and its IP at DNS and proxy layers and submit reports to the hosting provider and registrar for takedown.
readdy.earth.orderbox-dns.comreaddy.mars.orderbox-dns.comreaddy.mercury.orderbox-dns.comreaddy.venus.orderbox-dns.comLocation describes the IP network.
7b66639cfe48e09830a25d0093b1a807ef0e415aa6c69ad8e8d53a373ea7aa8fSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
www.starmindopenaitrading.comDomain recordThe original observation time is not recorded for these hostnames.
Google PageSpeed Insights — mobile performance audit of starmindopenaitrading.com · checked Oct 16, 2026
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
http://starmindopenaitrading.com/https://starmindopenaitrading.com/Cache-Control: public, max-age=0, must-revalidateContent-Encoding: gzipContent-Type: text/html; charset=utf-8summarypublic, max-age=0, must-revalidategzip1317text/html; charset=utf-8Fri, 16 Oct 2026 09:37:16 GMT"e6f97c6ef5842789f1665a2212a7f38b"Accept-EncodingValues retained by the collector; long values may be shortened during collection.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
alive_content: raw=ok; http=200; via=https_proxy
starmindopenaitrading.com
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
不明→live_content
content_served
不明→live_content
content_served
不明→live_content
content_served
不明→live_content
content_served
到達可能
6/92 engine detections
View sourceNo threat flag
View sourcePD-20261016-AA7EC3
starmindopenaitrading.com
View sourcePage captured
View sourcePD-20261016-AA7EC3 Recipient: abuse@regtons.com アカウント資格情報、個人情報、支払い情報を入力した場合、またはこのドメインからファイルをダウンロードした場合は、すぐに対処してください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
starmindopenaitrading.com)たとえすべての詳細がわかっていなくても―― とにかく報告を提出する. 不完全な情報であっても、捜査には役立つ。
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャン不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポート最近のフィッシングレポートと観察された可用性の変化
監視リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.