# PhishDestroy domain threat record: alvarix.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/alvarix.net/
Machine-readable companion: https://phishdestroy.io/domain/alvarix.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 02:15:47 UTC
- Last availability or vendor check: 2026-10-21 10:44:44 UTC
- Stored record updated: 2026-10-21 16:07:58 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-05-07 15:23:26 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15c4b-e3fe-7221-90a8-ee1fcbdddd72/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/alvarix.net
- Certificate Transparency search: https://crt.sh/?q=%25.alvarix.net
- Web Archive lookup: https://web.archive.org/web/*/https://alvarix.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed alvarix.net as a suspicious domain based on an intake reason citing fourteen malicious detections on VirusTotal. The site was first observed by PhishDestroy on 2026-10-21. At that time the HTTP response returned status code 200 and the recorded page title advertised an AI‑powered trading platform. The assessment does not rely on any observed malicious behavior beyond the vendor flags.

How the scam works
The classification reflects a generic risk associated with domains that receive numerous malicious or phishing labels from security vendors, which are often used to host deceptive services, lure victims, or distribute malware. No specific mechanism such as credential harvesting or wallet draining was observed on the page itself.

Evidence
VirusTotal reported fourteen malicious and four suspicious detections across ninety‑two engines, with a total of eighteen detections, retrieved on 2026-10-21 (analysis performed on 2026-10-17). Google Safe Browsing checked the domain on 2026-10-21 and did not flag it. urlscan captured the site twice: on 2026-07-27 the verdict was clean, while on 2026-10-21 machine‑learning engines gave a malicious score of 92 but the overall verdict was not malicious. OTX listed four pulses mentioning the domain, with one pulse noted during intake. External blocklists showed no entries, PhishDestroy’s internal blocklist marked it true, and Spamhaus DBL listed it as false on 2026-10-21.

Infrastructure
The domain was registered with Dynadot Inc on 2026-05-07. Hosting records show the IP address 158.94.210.119 belonging to Omegatech LTD in the Netherlands. No further infrastructure details are available.

What to do
Visitors should avoid entering any credentials, financial information, or downloading files from alvarix.net; if any data was submitted, change related passwords and monitor accounts for unusual activity. Security teams should block the domain at network perimeters, log any DNS or HTTP requests to it, and treat it as a potential phishing or malware source. Continue to monitor threat‑intel feeds for any new indicators linked to this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15c4b-e3fe-7221-90a8-ee1fcbdddd72/
VirusTotal report: https://www.virustotal.com/gui/domain/alvarix.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=alvarix.net
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-21 02:50:53 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/rLVtCf9/211790f670c0.png
  Captured: 2026-10-21 02:31:00 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a15c4b-e3fe-7221-90a8-ee1fcbdddd72.png
  Captured: 2026-10-21 02:31:00 UTC
  Source report: https://urlscan.io/result/01a15c4b-e3fe-7221-90a8-ee1fcbdddd72/
- URLScan capture 2: https://screenshots.phishdestroy.io/019fa320-dd50-75a8-bdf1-9404e76c45d4.png
  Captured: 2026-10-21 02:15:47 UTC
  Source report: https://urlscan.io/result/01a15c4b-e3fe-7221-90a8-ee1fcbdddd72/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2d5f85b0-0322-4d76-a017-ff4ae723ea60.png
  Captured: 2026-10-21 02:18:14 UTC
  Source report: https://radar.cloudflare.com/scan/2d5f85b0-0322-4d76-a017-ff4ae723ea60
  SHA-256: 717d9922e68fa35cdb68e907ba18453ea475696029c6471a7b696b80a0893619
- URLQuery: https://screenshots.phishdestroy.io/uq/1d6ad66a-a83f-4d42-ab35-558606b85d2e.png
  Source report: https://urlquery.net/report/1d6ad66a-a83f-4d42-ab35-558606b85d2e
  SHA-256: 5eaa143e33da50101b86f6438faf7296c3e27dc6bb32257a20861787cb839642
- URLScan · 2026-07-27: https://screenshots.phishdestroy.io/us/019fa320-dd50-75a8-bdf1-9404e76c45d4.png
  Captured: 2026-07-27 10:31:16 UTC
  Source report: https://urlscan.io/result/019fa320-dd50-75a8-bdf1-9404e76c45d4/
  SHA-256: 065812f54cc1a143daa83f51505a92060826a63a90b456b95eda33baf15130b3
- URLScan · 2026-07-28: https://screenshots.phishdestroy.io/us/019fa7b3-b8ce-7288-9895-4341658b2161.png
  Captured: 2026-07-28 07:50:07 UTC
  Source report: https://urlscan.io/result/019fa7b3-b8ce-7288-9895-4341658b2161/
  SHA-256: 8e243960e862b0a32244ef6510d9fa15a96f956531af89aed4df7b59a8a29f92
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c42-02e1-7155-b2de-d6ab51aad9e4.png
  Captured: 2026-10-21 02:19:59 UTC
  Source report: https://urlscan.io/result/01a15c42-02e1-7155-b2de-d6ab51aad9e4/
  SHA-256: 53e2b9fca6fc8bfa7747ba658429d94a512b1cd3aab4463442e7af3dfd64e5f0
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c44-b2e2-769d-820b-9683811c4ed7.png
  Captured: 2026-10-21 02:22:54 UTC
  Source report: https://urlscan.io/result/01a15c44-b2e2-769d-820b-9683811c4ed7/
  SHA-256: 267503c6a4ebc0b45ca86589f42fdcb374a9e73efb4b3d954ca36b638060fe60

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T02:50:40Z",
        "uuid": "01a15c4b-e3fe-7221-90a8-ee1fcbdddd72",
        "scanned_at": "2026-10-21T02:30:46Z",
        "final_url": "https://alvarix.net/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://alvarix.net/",
                "from": "http://alvarix.net/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "26650487c12eb3310f6ec0057a2f876379dee2b8c2b9479cc7d245cecae35519",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "navToggle",
            "mainNav",
            "langBtn",
            "langDropdown"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "alvarix.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "alvarix.net",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-29T18:19:07Z",
            "valid_from": "2026-08-31T18:19:08Z"
        },
        "domain_age_days": 166,
        "apex_age_days": 166,
        "tls_age_days": 50,
        "tls_valid_days": 89,
        "requests": 5,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 92,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T02:20:15Z",
        "uuid": "2d5f85b0-0322-4d76-a017-ff4ae723ea60",
        "scanned_at": "2026-10-21T02:18:14Z",
        "final_url": "https://alvarix.net/",
        "status": 200,
        "history": [
            {
                "url": "https://alvarix.net/",
                "status": 200
            }
        ],
        "dom_hash": "538ff54755b084fc3ce2d692c66016f55f967f68d9fdf08158d2b3601a3bbb55",
        "doc_hash": "f1f9a1af7428b429dedd1e7496f04b53a008a80f4c02266cb2d381652581114f",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "alvarix.net",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-05-07T17:23:26Z",
            "updated": "2026-08-13T12:41:28Z",
            "expires": "2027-05-07T17:23:26Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T02:49:55Z",
        "analysis_at": "2026-10-17T11:43:46Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 14,
            "suspicious": 4,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-05-07T17:23:26Z",
        "expires": "2027-05-07T17:23:26Z",
        "updated": "2026-08-13T12:41:28Z",
        "first_seen": "2026-05-07T13:45:12Z",
        "dns": [
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.alvarix.net",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dns_at": "2026-10-17T11:49:03Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "alvarix.net"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6e653a89c8223fad0735b3de8eacb0d3b3a",
            "sha256": "7b625245c36344edb4877abdb7b71cce2a74b9d64b6fd56ba73aab6a7adb01ba",
            "subject": "alvarix.net",
            "valid_to": "2026-11-29T18:19:07Z",
            "valid_from": "2026-08-31T18:19:08Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-05-07T17:23:26Z",
            "updated": "2026-08-13T12:41:28Z",
            "expires": "2027-05-07T17:23:26Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-05-07T17:23:26Z",
                "last changed": "2026-08-31T17:37:38Z",
                "registration": "2026-05-07T17:23:26Z",
                "registrar expiration": "2027-05-07T17:23:26Z",
                "last update of RDAP database": "2026-10-16T07:04:40Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T02:20:27Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "alvarix.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-21T02:17:19Z",
            "first": "2026-10-21T02:17:19Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 22890
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://alvarix.net/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Reliable AI-Powered Trading Platform. ALVARIX.",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "180+ global markets & institutional-grade governance — ALVARIX helps enterprise investors scale strategic operations with precision across every major global corridor.",
            "canonicalUrl": "https://alvarix.net/"
        },
        "trackers": {
            "requests": 5
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 277,
                "tls": 87,
                "wait": 92,
                "connect": 68,
                "download": 154
            },
            "response_ms": 678
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 87795,
            "co2_grams": 0.0032,
            "cleaner_than": 25
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "alvarix.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "connect.sid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "alvarix.net"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.alvarix.net\", \"serial\": 2026083101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://alvarix.net"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Tailwind CSS",
                "jQuery",
                "Priority Hints",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 30
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-05-07T17:23:26Z",
            "updated": "2026-08-13T12:41:28Z",
            "expires": "2027-05-07T17:23:26Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```