# PhishDestroy domain threat record: amplioprovechaje.net Content language: English Canonical HTML report: https://phishdestroy.io/domain/amplioprovechaje.net/ Machine-readable companion: https://phishdestroy.io/domain/amplioprovechaje.net/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 02:17:33 UTC - Last availability or vendor check: 2026-10-21 10:43:29 UTC - Stored record updated: 2026-10-21 18:20:34 UTC - VirusTotal detections in the stored snapshot: 14/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.133.172 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-09-27 14:32:57 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15c49-3491-730f-ac9b-541c3ba1c687/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/amplioprovechaje.net - Certificate Transparency search: https://crt.sh/?q=%25.amplioprovechaje.net - Web Archive lookup: https://web.archive.org/web/*/https://amplioprovechaje.net/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed amplioprovechaje.net on 2026-10-21 after its intake flagged the domain due to ten malicious VirusTotal detections. The recorded page title reads “Amplio Provechaje — Plataforma de IA para invertir con criterio”. An HTTP 200 response was observed on 2026-10-21. How the scam works The available detections indicate a potential phishing, malware, or scam risk, but no specific mechanism was observed on the page. Listings such as these often point to sites that attempt to lure users into providing credentials, installing unwanted software, or exposing themselves to fraudulent investment offers. Without concrete behavior on the page, the exact tactic cannot be confirmed. Evidence VirusTotal reported 10 malicious and 4 suspicious detections out of 92 engines (analysis date 2026-10-15, retrieved 2026-10-21). Google Safe Browsing checked on 2026-10-21 did not flag the URL. urlscan captured the site on 2026-10-06 and returned a clean verdict (retrieved 2026-10-21). Spamhaus DBL listed the domain as spam on 2026-10-21. OTX showed four pulses referencing the domain on 2026-10-21. PhishDestroy’s internal blocklist marked the domain as malicious on 2026-10-21, while external blocklists returned zero matches. Infrastructure The domain was registered with Dynadot Inc on 2026-09-27. Hosting is provided through Cloudflare, recorded at IP 172.67.133.172 and identified as belonging to Cloudflare, Inc. in Canada. The site uses a Cloudflare web‑application firewall and technologies including Tailwind CSS, jQuery, and HTTP/3. What to do Visitors should avoid entering any credentials, personal data, or financial information on this site. If credentials were submitted, change passwords immediately and monitor associated accounts for suspicious activity. Defenders should block amplioprovechaje.net at the network perimeter and review logs for any connections to the recorded IP address. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15c49-3491-730f-ac9b-541c3ba1c687/ VirusTotal report: https://www.virustotal.com/gui/domain/amplioprovechaje.net Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=amplioprovechaje.net Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 02:57:05 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a15c49-3491-730f-ac9b-541c3ba1c687.png Captured: 2026-10-21 02:29:45 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a15c49-3491-730f-ac9b-541c3ba1c687.png Captured: 2026-10-21 02:29:45 UTC Source report: https://urlscan.io/result/01a15c49-3491-730f-ac9b-541c3ba1c687/ - URLScan capture 2: https://urlscan.io/screenshots/01a1111b-1ec9-733f-b024-8dbcecbe47d8.png Captured: 2026-10-21 02:17:33 UTC Source report: https://urlscan.io/result/01a15c49-3491-730f-ac9b-541c3ba1c687/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a3f59a14-af15-4e66-bea5-79254e604e69.png Captured: 2026-10-21 02:24:20 UTC Source report: https://radar.cloudflare.com/scan/a3f59a14-af15-4e66-bea5-79254e604e69 SHA-256: 3d8ecbb2546c9d59db68fbac23ea675d54d058d69440714e3358efd7beae063b - URLQuery: https://screenshots.phishdestroy.io/uq/5c0fe1d5-a6cc-4a54-bec1-d70119f55701.png Source report: https://urlquery.net/report/5c0fe1d5-a6cc-4a54-bec1-d70119f55701 SHA-256: 9ba5a7bfd0f8619413bc0adc180a2617b616fbef9a46cc79d9552c8b939e609f - URLScan · 2026-09-29: https://screenshots.phishdestroy.io/us/01a0ee50-0890-716d-b4ca-2d53868e9fac.png Captured: 2026-09-29 17:57:04 UTC Source report: https://urlscan.io/result/01a0ee50-0890-716d-b4ca-2d53868e9fac/ SHA-256: 80b949183f4a4bf379b606302950ce76f2b4cc688d755503c818ceedbdaf3641 - URLScan · 2026-09-30: https://screenshots.phishdestroy.io/us/01a0f1be-7681-72eb-a63f-19f846103447.png Captured: 2026-09-30 09:56:34 UTC Source report: https://urlscan.io/result/01a0f1be-7681-72eb-a63f-19f846103447/ SHA-256: 243cc65a61905fbcc7dea4fd18b18a9c7138d0cf1b34c7426cfa831e1b5642b6 - URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10af8-8714-7309-813b-e569242760b0.png Captured: 2026-10-05 07:30:29 UTC Source report: https://urlscan.io/result/01a10af8-8714-7309-813b-e569242760b0/ SHA-256: 7ce00fa38af48f4a51aef0f5f7fc2e2fa7bde0dbde925760987f6a3268dc3aab - URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10c3e-6ead-715a-96f3-c42b074d1540.png Captured: 2026-10-05 13:26:28 UTC Source report: https://urlscan.io/result/01a10c3e-6ead-715a-96f3-c42b074d1540/ SHA-256: ac8c721131efb73f07529e83ba3211577768b971d6b4baea8336e4839acd74ab - URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a1111b-1ec9-733f-b024-8dbcecbe47d8.png Captured: 2026-10-06 12:06:03 UTC Source report: https://urlscan.io/result/01a1111b-1ec9-733f-b024-8dbcecbe47d8/ SHA-256: b51f62e5f19df7d0e7a90160a71be6ca04ad40deb72266fd940b4afc3bd1b61c - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c53-d821-720e-a8c1-a4cfa26dbf10.png Captured: 2026-10-21 02:39:31 UTC Source report: https://urlscan.io/result/01a15c53-d821-720e-a8c1-a4cfa26dbf10/ SHA-256: 0ec5d3b240b2aa288ecbaee05b700ae685c54c72eb3bf1df879d639704137b53 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T03:47:06Z", "uuid": "01a15c49-3491-730f-ac9b-541c3ba1c687", "scanned_at": "2026-10-21T02:27:49Z", "final_url": "https://amplioprovechaje.net/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://amplioprovechaje.net/", "from": "http://amplioprovechaje.net/", "status": 307 } ], "ip": "172.67.133.172", "ips": [ "172.67.133.172" ], "asns": [ "13335" ], "doc_hash": "fc98360b05e6954500f66bbc0aa8c1049a222c9e10cf3b8df66503196e220738", "script_hashes": [ "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8", "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "*.amplioprovechaje.net", "amplioprovechaje.net" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "amplioprovechaje.net", "protocol": "QUIC", "valid_to": "2026-12-26T15:37:56Z", "valid_from": "2026-09-27T15:37:57Z" }, "domain_age_days": 23, "apex_age_days": 23, "tls_age_days": 23, "tls_valid_days": 89, "requests": 8, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 89, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T02:29:06Z", "uuid": "a3f59a14-af15-4e66-bea5-79254e604e69", "scanned_at": "2026-10-21T02:24:20Z", "final_url": "https://amplioprovechaje.net/", "status": 200, "history": [ { "url": "https://amplioprovechaje.net/", "status": 200 } ], "dom_hash": "190ff1d3a3c070032160d6f69d48cb90927703e9b1fdd97e0d2808a0f70ec9f0", "doc_hash": "8c56446a0299063df7d032867fb5a4bb61a089d9d031670ebd0e1080db8dcd65", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains", "Scam", "Security threats", "Malware", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "amplioprovechaje.net", "type": "A", "value": "172.67.133.172" }, { "name": "amplioprovechaje.net", "type": "A", "value": "104.21.14.9" }, { "name": "amplioprovechaje.net", "type": "AAAA", "value": "2606:4700:3032::6815:e09" }, { "name": "amplioprovechaje.net", "type": "AAAA", "value": "2606:4700:3033::ac43:85ac" } ], "dnssec_valid": false, "ip": "172.67.133.172", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-09-27T16:32:57Z", "updated": "2026-09-27T16:34:59Z", "expires": "2027-09-27T16:32:57Z", "nameservers": [ "aisha.ns.cloudflare.com", "rustam.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T02:54:02Z", "analysis_at": "2026-10-15T08:20:38Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 10, "suspicious": 4, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Fortinet": "spam", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "Dynadot Inc", "created": "2026-09-27T16:32:57Z", "expires": "2027-09-27T16:32:57Z", "updated": "2026-09-27T16:34:59Z", "first_seen": "2026-09-27T20:19:31Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::6815:e09" }, { "ttl": 3600, "type": "TXT", "value": "google-site-verification=bY2_7XZdv9gKkpUr_-Ip0ZRx8dW-xvqGOue0PpQtlT4" }, { "ttl": 300, "type": "A", "value": "172.67.133.172" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "aisha.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.14.9" }, { "ttl": 21600, "type": "NS", "value": "rustam.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "aisha.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::ac43:85ac" } ], "dns_at": "2026-10-15T08:25:53Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.amplioprovechaje.net", "amplioprovechaje.net" ], "issuer": "Let's Encrypt / YE1", "serial": "6c5f6a3343557ea368ef387611237b6f612", "sha256": "bd38c31c936a08cb88ab125c9a540a6033309c10542e81c6c3208192cbb04c27", "subject": "amplioprovechaje.net", "valid_to": "2026-12-26T15:37:56Z", "valid_from": "2026-09-27T15:37:57Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-09-27T16:32:57Z", "updated": "2026-09-27T16:34:59Z", "expires": "2027-09-27T16:32:57Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "aisha.ns.cloudflare.com", "rustam.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-09-27T16:32:57Z", "last changed": "2026-09-27T16:35:00Z", "registration": "2026-09-27T16:32:57Z", "registrar expiration": "2027-09-27T16:32:57Z", "last update of RDAP database": "2026-10-14T21:42:03Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T02:29:19Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "amplioprovechaje.net" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T02:20:36Z", "first": "2026-09-27T17:49:25Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.04, "avg_page_bytes": 11083 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://amplioprovechaje.net/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Amplio Provechaje — Plataforma de IA para invertir con criterio", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Descubre con Amplio Provechaje una plataforma de IA que combina DCA con análisis de mercado en tiempo real. Define tu estrategia y deja que el sistema ejecute cada aportación con criterios claros y auditables.", "canonicalUrl": "https://amplioprovechaje.net/" }, "trackers": { "requests": 29 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 1, "tls": 24, "wait": 136, "connect": 12, "download": 50 }, "response_ms": 223 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 73033, "co2_grams": 0.0027, "cleaner_than": 29 }, "dns_server": { "ns": [ { "ip": "172.64.34.186", "host": "aisha.ns.cloudflare.com" }, { "ip": "162.159.44.148", "host": "rustam.ns.cloudflare.com" } ], "zone": "amplioprovechaje.net" }, "cookies": { "cookies": [ { "name": "connect.sid", "secure": true, "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3032::6815:e09", "asn": "13335", "org": "Cloudflare, Inc.", "city": "San Francisco", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "amplioprovechaje.net" }, "dns": { "A": [ "104.21.14.9", "172.67.133.172" ], "NS": [ "rustam.ns.cloudflare.com", "aisha.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"aisha.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416401409, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "google-site-verification=bY2_7XZdv9gKkpUr_-Ip0ZRx8dW-xvqGOue0PpQtlT4" ], "AAAA": [ "2606:4700:3032::6815:e09", "2606:4700:3033::ac43:85ac" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3033::ac43:85ac", "family": 6 }, "redirects": { "chain": [ "https://amplioprovechaje.net" ] }, "tech_stack": { "technologies": [ "Tailwind CSS", "jQuery", "Priority Hints", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-09-27T16:32:57Z", "updated": "2026-09-27T16:34:59Z", "expires": "2027-09-27T16:32:57Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "aisha.ns.cloudflare.com", "rustam.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```