# PhishDestroy domain threat record: agalarovfund.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/agalarovfund.digital/
Machine-readable companion: https://phishdestroy.io/domain/agalarovfund.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-20 13:46:27 UTC
- Last availability or vendor check: 2026-10-21 10:00:19 UTC
- Stored record updated: 2026-10-21 16:07:58 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date (registry RDAP, agalarovfund.digital): 2026-08-02 07:47:55 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1599d-0774-73eb-9e23-1f0b3636ec0a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/agalarovfund.digital
- Certificate Transparency search: https://crt.sh/?q=%25.agalarovfund.digital
- Web Archive lookup: https://web.archive.org/web/*/https://agalarovfund.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has added agalarovfund.digital to its internal blocklist as a suspicious domain. The recorded page title reads “Agalarov Fund | AI Trading Platform | Authorized Entry Point”. The domain was first seen by PhishDestroy on 2026-10-20.

How the scam works
The current evidence does not identify a specific malicious mechanism for this site. A suspicious classification means the domain could be used for typical fraud such as impersonating financial services, but no concrete behavior was observed on the recorded page.

Evidence
VirusTotal reported 18 detections out of 92 engines on 2026-10-20, with vendors including alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, DNS8, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked the site on 2026-10-20 and did not flag it. No external blocklists listed the domain as of 2026-10-20, while PhishDestroy’s internal list marked it true on the same date. OTX recorded one pulse mentioning the domain on 2026-10-20.

Infrastructure
The domain was registered on 2026-08-02 through Dynadot Inc. The recorded IP address associated with the site is 188.114.96.3. Registration date does not imply launch date, and the IP address reflects the observed host at the time of checking.

What to do
Visitors should not submit credentials or financial information to the site; if any credentials were entered, change them immediately. Monitor accounts for unexpected activity. Network defenders should add agalarovfund.digital to blocklists and review logs for connections to 188.114.96.3.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1599d-0774-73eb-9e23-1f0b3636ec0a/
VirusTotal report: https://www.virustotal.com/gui/domain/agalarovfund.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=agalarovfund.digital
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-20 14:09:31 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1599d-0774-73eb-9e23-1f0b3636ec0a.png
  Captured: 2026-10-20 14:02:26 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a1599d-0774-73eb-9e23-1f0b3636ec0a.png
  Captured: 2026-10-20 14:02:26 UTC
  Source report: https://urlscan.io/result/01a1599d-0774-73eb-9e23-1f0b3636ec0a/
- URLScan capture 2: https://urlscan.io/screenshots/019fef6e-47ad-745f-836d-8bb407d14296.png
  Captured: 2026-10-20 13:46:27 UTC
  Source report: https://urlscan.io/result/01a1599d-0774-73eb-9e23-1f0b3636ec0a/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/cdbcf443-99a7-4dd9-9825-ce2a13af1727.png
  Captured: 2026-10-20 14:03:41 UTC
  Source report: https://radar.cloudflare.com/scan/cdbcf443-99a7-4dd9-9825-ce2a13af1727
  SHA-256: deb458d4a7c1b7c5659caf2fbe1131b04fb8622105699bfc234260f16b4efffa
- URLQuery: https://screenshots.phishdestroy.io/uq/98ed297e-6ec7-49dd-9b24-4ad7bde802b6.png
  Source report: https://urlquery.net/report/98ed297e-6ec7-49dd-9b24-4ad7bde802b6
  SHA-256: 9b195df1a0995e31aa8b3fe417d935e81029e265e1c355a247dd471721c4dca1
- URLScan · 2026-08-11: https://screenshots.phishdestroy.io/us/019fef6e-47ad-745f-836d-8bb407d14296.png
  Captured: 2026-08-11 06:06:56 UTC
  Source report: https://urlscan.io/result/019fef6e-47ad-745f-836d-8bb407d14296/
  SHA-256: b009ec86f255f86e69fcd9960f62531745155f8c2e21eb483fc20c9cad5d6eaf
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a159bf-77d6-716e-ad70-12a313584f3a.png
  Captured: 2026-10-20 14:38:14 UTC
  Source report: https://urlscan.io/result/01a159bf-77d6-716e-ad70-12a313584f3a/
  SHA-256: 9869db5215e79543c2b9142a67242f2e26939ec3e1f90b746f805e893ab98cc9

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T16:41:41Z",
        "uuid": "01a1599d-0774-73eb-9e23-1f0b3636ec0a",
        "scanned_at": "2026-10-20T14:00:38Z",
        "final_url": "https://agalarovfund.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://agalarovfund.digital/",
                "from": "http://agalarovfund.digital/",
                "status": 307
            }
        ],
        "ip": "172.67.158.211",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.95.41",
            "104.17.208.5",
            "172.253.122.95",
            "104.17.25.14",
            "172.67.158.211"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "8ad0059140f6a701872934c18f431b43f3566d8b7879006ea193037ba6e5be37",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_edgdk",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "agalarovfund.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "agalarovfund.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-29T15:18:32Z",
            "valid_from": "2026-09-30T14:18:36Z"
        },
        "domain_age_days": 79,
        "apex_age_days": 79,
        "tls_age_days": 19,
        "tls_valid_days": 90,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; connect-src 'self' https://clou",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T17:54:50Z",
        "uuid": "cdbcf443-99a7-4dd9-9825-ce2a13af1727",
        "scanned_at": "2026-10-20T14:03:41Z",
        "final_url": "https://agalarovfund.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://agalarovfund.digital/",
                "status": 200
            }
        ],
        "dom_hash": "675758526790e555b0e12a06c65e5a70429ebffe2a524debc4fb0c1cb35637db",
        "doc_hash": "4912e4fe8c97ebcf305a93ee9bbf421e808bd1fa4ac6ad8be66cc8638a08e334",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "agalarovfund.digital",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "agalarovfund.digital",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "agalarovfund.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            },
            {
                "name": "agalarovfund.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.97.0",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-02T07:47:55Z",
            "updated": "2026-08-12T04:03:54Z",
            "expires": "2027-08-02T07:47:55Z",
            "nameservers": [
                "emily.ns.cloudflare.com",
                "piers.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-20T18:04:38Z",
        "analysis_at": "2026-10-20T09:52:30Z",
        "stats": {
            "timeout": 0,
            "harmless": 42,
            "malicious": 14,
            "suspicious": 4,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "first_seen": "2026-08-02T10:13:55Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:9ed3"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.49.47"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "emily.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "emily.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:312f"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "piers.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.158.211"
            }
        ],
        "dns_at": "2026-10-20T09:57:45Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "agalarovfund.digital"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "19b553bfcbd2ecb10e83de58cc0dabbe",
            "sha256": "a0af7221d19ecbd6fc13077fb6f377dc26629f22f7584071b91e15d3e5876f50",
            "subject": "agalarovfund.digital",
            "valid_to": "2026-12-29T15:18:32Z",
            "valid_from": "2026-09-30T14:18:36Z"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-02T07:47:55Z",
                "last changed": "2026-08-02T09:45:53Z",
                "registration": "2026-08-02T07:47:55Z",
                "registrar expiration": "2027-08-02T07:47:55Z",
                "last update of RDAP database": "2026-10-16T07:28:54Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T01:56:18Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "agalarovfund.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-20T13:48:44Z",
            "first": "2026-10-20T13:48:44Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 41695
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://agalarovfund.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://agalarovfund.digital/",
            "title": "Agalarov Fund | AI Trading Platform | Authorized Entry Point",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Agalarov Fund | AI-Powered Trading Intelligence",
            "ogSiteName": "Agalarov Fund",
            "themeColor": "#131313",
            "description": "Agalarov Fund delivers AI-powered trading intelligence, automated strategies, real-time market insights, and structured risk controls for active digital asset participants.",
            "twitterCard": "summary",
            "canonicalUrl": "https://agalarovfund.digital/",
            "ogDescription": "Agalarov Fund delivers AI-powered trading intelligence, automated strategies, real-time market insights, and structured risk controls for active digital asset participants."
        },
        "trackers": {
            "requests": 20,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 10
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 30,
                "tls": 22,
                "wait": 168,
                "connect": 7,
                "download": 21
            },
            "response_ms": 248
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 137246,
            "co2_grams": 0.005,
            "cleaner_than": 15
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.58.155",
                    "host": "emily.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.16",
                    "host": "piers.ns.cloudflare.com"
                }
            ],
            "zone": "agalarovfund.digital"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3121::9",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "agalarovfund.digital"
        },
        "dns": {
            "A": [
                "188.114.97.9",
                "188.114.96.9"
            ],
            "NS": [
                "piers.ns.cloudflare.com",
                "emily.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"emily.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417975563, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::9",
                "2a06:98c1:3120::9"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src https://ch",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::9",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://agalarovfund.digital"
            ]
        },
        "tech_stack": {
            "technologies": [
                "jsDelivr",
                "Cloudflare Turnstile",
                "Cloudflare Rocket Loader",
                "ClientJS",
                "Priority Hints",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "content-security-policy": "img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; default-src 'self'; script-src 'self' 'unsafe-",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```