# PhishDestroy domain threat record: aunveldr0k-denmark.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/aunveldr0k-denmark.com/ Machine-readable companion: https://phishdestroy.io/domain/aunveldr0k-denmark.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:15:11 UTC - Last availability or vendor check: 2026-10-22 11:01:49 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: ethereum ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date (registry RDAP, aunveldr0k-denmark.com): 2026-07-22 05:40:08 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16209-70fe-7139-ac8a-150c8bb04237/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/aunveldr0k-denmark.com - Certificate Transparency search: https://crt.sh/?q=%25.aunveldr0k-denmark.com - Web Archive lookup: https://web.archive.org/web/*/https://aunveldr0k-denmark.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added aunveldr0k-denmark.com to its internal blocklist based on a VirusTotal assessment that flagged it as malicious by 13 vendors. The recorded page title is “Aunveldr0k: avanceret digital platform til smarte løsninger”. The domain was first seen by PhishDestroy on 2026-10-22 and an HTTP 200 response was recorded on that date. How the scam works The detections suggest the site may be used for phishing or malware distribution, a common pattern where attackers host pages that lure users into revealing credentials or downloading malicious payloads. No specific credential‑stealing form, wallet request, or malware download was observed on the captured page, so the exact abuse technique remains uncertain. Evidence VirusTotal (analysis date 2026-10-19, retrieved 2026-10-22) reported 13 malicious and 4 suspicious detections out of 92 engines, with vendors such as BitDefender, Fortinet and Kaspersky labeling it phishing or malware. Google Safe Browsing checked on 2026-10-22 returned no warning. urlscan.io captured the site on 2026-10-22; its overall verdict was clean, but its engine scoring marked it malicious with a 99‑point confidence. Cloudflare Radar (2026-10-22) classified the domain as malicious malware. OTX listed five pulses mentioning the domain. External blocklists showed zero hits, while PhishDestroy’s internal list flagged it. Spamhaus DBL did not list the domain. Infrastructure The domain was registered with Dynadot Inc on 2026-07-22 and is 91 days old. DNS records observed point to Cloudflare‑served IPv4 addresses 188.114.96.0, 188.114.96.9, 188.114.97.0 and 188.114.97.9, and IPv6 addresses 2a06:98c1:3120:: and 2a06:98c1:3121::. The TLS certificate, issued by Google Trust Services, is valid until 2026-12-18 and includes the SAN aunveldr0k-denmark.com and *.aunveldr0k-denmark.com. DNSSEC is not enabled. Cloudflare’s Web Application Firewall was observed as active. What to do Visitors should avoid entering any credentials, downloading files, or interacting with unknown forms on this site; if credentials were entered, change them immediately. Organizations should block the exact domain aunveldr0k-denmark.com at DNS or proxy level, monitor outbound connections to the recorded IPs, and review web‑proxy or firewall logs for recent accesses. Adding the domain to threat‑intel feeds can help detect future attempts. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16209-70fe-7139-ac8a-150c8bb04237/ Cloudflare Radar report: https://radar.cloudflare.com/scan/64ab8a1f-d544-4d5a-91fd-b00b8a488907 URLQuery report: https://urlquery.net/report/f99abff4-fb0b-4a22-af1e-515126937ea5 Stored capture screenshot: https://i.ibb.co/60Lyp7b4/994fb9831b6c.png Cloudflare Radar screenshot (2026-10-22T05:15:53Z): https://screenshots.phishdestroy.io/cf/64ab8a1f-d544-4d5a-91fd-b00b8a488907.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/f99abff4-fb0b-4a22-af1e-515126937ea5.png URLScan screenshot (2026-09-19T11:00:23Z): https://screenshots.phishdestroy.io/us/01a0b952-f69d-7545-b125-e95e846507c4.png URLScan capture report: https://urlscan.io/result/01a0b952-f69d-7545-b125-e95e846507c4/ URLScan screenshot (2026-09-20T09:52:21Z): https://screenshots.phishdestroy.io/us/01a0be3b-001e-7196-a48f-b8182e0e62c0.png URLScan capture report: https://urlscan.io/result/01a0be3b-001e-7196-a48f-b8182e0e62c0/ URLScan screenshot (2026-10-22T05:21:39Z): https://screenshots.phishdestroy.io/us/01a1620e-a7c3-75a0-9bd6-d16bcb4e5cfc.png URLScan capture report: https://urlscan.io/result/01a1620e-a7c3-75a0-9bd6-d16bcb4e5cfc/ VirusTotal report: https://www.virustotal.com/gui/domain/aunveldr0k-denmark.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aunveldr0k-denmark.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 07:47:46 UTC ## Stored page captures - Primary capture: https://i.ibb.co/60Lyp7b4/994fb9831b6c.png Captured: 2026-10-22 05:16:50 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a16209-70fe-7139-ac8a-150c8bb04237.png Captured: 2026-10-22 05:16:50 UTC Source report: https://urlscan.io/result/01a16209-70fe-7139-ac8a-150c8bb04237/ - URLScan capture 2: https://urlscan.io/screenshots/01a0be3b-001e-7196-a48f-b8182e0e62c0.png Captured: 2026-10-22 05:15:11 UTC Source report: https://urlscan.io/result/01a16209-70fe-7139-ac8a-150c8bb04237/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/64ab8a1f-d544-4d5a-91fd-b00b8a488907.png Captured: 2026-10-22 05:15:53 UTC Source report: https://radar.cloudflare.com/scan/64ab8a1f-d544-4d5a-91fd-b00b8a488907 SHA-256: d24689997f22602a6c50a69f5919abac6eb698254d89b94a5be357f6c11c7901 - URLQuery: https://screenshots.phishdestroy.io/uq/f99abff4-fb0b-4a22-af1e-515126937ea5.png Source report: https://urlquery.net/report/f99abff4-fb0b-4a22-af1e-515126937ea5 SHA-256: 66dbf7d7e0fe7cd066fede97b3ca4c7af5131cab0129c5bb3f6adef9084fba98 - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0b952-f69d-7545-b125-e95e846507c4.png Captured: 2026-09-19 11:00:23 UTC Source report: https://urlscan.io/result/01a0b952-f69d-7545-b125-e95e846507c4/ SHA-256: 61a6aaf8097a98b5e1f509f48adc7b35e8578e0251cb4856f58dfcbe30e5b589 - URLScan · 2026-09-20: https://screenshots.phishdestroy.io/us/01a0be3b-001e-7196-a48f-b8182e0e62c0.png Captured: 2026-09-20 09:52:21 UTC Source report: https://urlscan.io/result/01a0be3b-001e-7196-a48f-b8182e0e62c0/ SHA-256: 351a4a8267fd7efc173171371817ed652655b4ce2f0de61a7be6bdf0f6ffa353 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1620e-a7c3-75a0-9bd6-d16bcb4e5cfc.png Captured: 2026-10-22 05:21:39 UTC Source report: https://urlscan.io/result/01a1620e-a7c3-75a0-9bd6-d16bcb4e5cfc/ SHA-256: a6203dabd5d06e9abdf60e98818653e2281db12a1db204b70a857380e83b5528 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:16:56Z", "uuid": "01a16209-70fe-7139-ac8a-150c8bb04237", "scanned_at": "2026-10-22T05:16:02Z", "final_url": "https://aunveldr0k-denmark.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://aunveldr0k-denmark.com/", "from": "http://aunveldr0k-denmark.com/", "status": 307 }, { "to": "http://aunveldr0k-denmark.com/", "from": "https://aunveldr0k-denmark.com/", "status": 307 }, { "to": "https://aunveldr0k-denmark.com/", "from": "http://aunveldr0k-denmark.com/", "status": 307 } ], "ip": "104.21.5.145", "domains": [ "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "modernroomdesigns.com", "static.cloudflareinsights.com", "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "104.21.38.110", "104.16.80.73", "142.250.183.35", "104.17.25.14", "104.17.207.5", "142.250.195.138", "104.21.5.145" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "2c717d730eebcc2561ea300ab2708ecece1fa0e8a0fba8f2c7b862784458d4fc", "script_hashes": [ "4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885" ], "globals": [ "polylang", "_language", "_loader", "GEO_API_URL", "_phone_error", "_form_unknown_error", "__offerChatWidgetMounted", "intlTelInput", "__cfBeacon" ], "cookies": [ "_subid", "csrftoken" ], "tls": { "san": [ "aunveldr0k-denmark.com", "*.aunveldr0k-denmark.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "aunveldr0k-denmark.com", "protocol": "QUIC", "valid_to": "2026-12-18T06:04:51Z", "valid_from": "2026-09-19T05:06:22Z" }, "domain_age_days": 91, "apex_age_days": 91, "tls_age_days": 33, "tls_valid_days": 90, "requests": 15, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T05:16:57Z", "uuid": "64ab8a1f-d544-4d5a-91fd-b00b8a488907", "scanned_at": "2026-10-22T05:15:53Z", "final_url": "https://aunveldr0k-denmark.com/", "status": 200, "history": [ { "url": "https://aunveldr0k-denmark.com/", "status": 200 } ], "dom_hash": "86a03739eb04f006ac97debe0d6fc32d004b2d39f9eab809e6e3db37dba97e6f", "doc_hash": "8188a63f8e54cf2c3d33d39675d315166f6f8b35a97ae9fbfbfa6f8e92b11ac9", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "aunveldr0k-denmark.com", "type": "A", "value": "188.114.97.0" }, { "name": "aunveldr0k-denmark.com", "type": "A", "value": "188.114.96.0" }, { "name": "aunveldr0k-denmark.com", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "aunveldr0k-denmark.com", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "188.114.97.0", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-22T05:40:08Z", "updated": "2026-07-22T05:40:46Z", "expires": "2027-07-22T05:40:08Z", "nameservers": [ "apollo.ns.cloudflare.com", "jen.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T07:46:38Z", "analysis_at": "2026-10-19T17:50:48Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 13, "suspicious": 4, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "malware", "Lionic": "phishing", "Sophos": "phishing", "Fortinet": "malware", "PREBYTES": "suspicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Bfore.Ai PreCrime": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "Dynadot Inc", "created": "2026-07-22T05:40:08Z", "expires": "2027-07-22T05:40:08Z", "updated": "2026-07-22T05:40:46Z", "first_seen": "2026-07-22T06:14:10Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::ac43:9ab4" }, { "ttl": 21600, "type": "NS", "value": "jen.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:591" }, { "ttl": 300, "type": "A", "value": "104.21.5.145" }, { "ttl": 21600, "type": "NS", "value": "apollo.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.154.180" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "apollo.ns.cloudflare.com" } ], "dns_at": "2026-10-19T17:56:04Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "aunveldr0k-denmark.com", "*.aunveldr0k-denmark.com" ], "issuer": "Google Trust Services / WE1", "serial": "f40d2a5eefb7fe9513d150570f416214", "sha256": "79b4e5f23ead125bca6cc23475b0747a695652a40690b94ccbb93a816d957869", "subject": "aunveldr0k-denmark.com", "valid_to": "2026-12-18T06:04:51Z", "valid_from": "2026-09-19T05:06:22Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-07-22T05:40:08Z", "updated": "2026-07-22T05:40:46Z", "expires": "2027-07-22T05:40:08Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "apollo.ns.cloudflare.com", "jen.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-07-22T05:40:08Z", "last changed": "2026-07-22T05:40:46Z", "registration": "2026-07-22T05:40:08Z", "registrar expiration": "2027-07-22T05:40:08Z", "last update of RDAP database": "2026-10-16T07:25:52Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T05:17:15Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "aunveldr0k-denmark.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://aunveldr0k-denmark.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 10 }, "social_tags": { "ogUrl": "https://aunveldr0k-denmark.com/", "title": "Aunveldr0k: avanceret digital platform til smarte løsninger", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://aunveldr0k-denmark.com/static/template_18/zeongrow/image.png", "ogTitle": "Aunveldr0k: avanceret digital platform til smarte løsninger", "ogSiteName": "Aunveldr0k", "themeColor": "#f4f6fb", "description": "Udforsk Aunveldr0k, en innovativ digital platform med moderne værktøjer og en brugervenlig oplevelse. Få adgang til avanceret teknologi, intelligente funktioner og en intuitiv grænseflade, der gør digitale muligheder nemme og tilgængelige.", "twitterCard": "summary_large_image", "canonicalUrl": "https://aunveldr0k-denmark.com/", "ogDescription": "Udforsk Aunveldr0k, en innovativ digital platform med moderne værktøjer og en brugervenlig oplevelse. Få adgang til avanceret teknologi, intelligente funktioner og en intuitiv grænseflade, der gør digitale muligheder nemme og tilgængelige." }, "trackers": { "requests": 11, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 1, "tls": 18, "wait": 591, "connect": 16, "download": 6 }, "response_ms": 632 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 75665, "co2_grams": 0.0028, "cleaner_than": 28 }, "dns_server": { "ns": [ { "ip": "162.159.38.185", "host": "jen.ns.cloudflare.com" }, { "ip": "173.245.59.66", "host": "apollo.ns.cloudflare.com" } ], "zone": "aunveldr0k-denmark.com" }, "cookies": { "cookies": [ { "name": "_subid", "session": true }, { "name": "csrftoken", "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "aunveldr0k-denmark.com" }, "dns": { "A": [ "188.114.97.9", "188.114.96.9" ], "NS": [ "jen.ns.cloudflare.com", "apollo.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"apollo.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415445612, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::9", "2a06:98c1:3120::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::9", "family": 6 }, "redirects": { "chain": [ "https://aunveldr0k-denmark.com" ] }, "tech_stack": { "technologies": [ "Python", "Django", "jsDelivr", "Google Font API", "cdnjs", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-22T05:40:08Z", "updated": "2026-07-22T05:40:46Z", "expires": "2027-07-22T05:40:08Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "apollo.ns.cloudflare.com", "jen.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } } } } ```