# PhishDestroy domain threat record: aunveldr0k-platform.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/aunveldr0k-platform.com/ Machine-readable companion: https://phishdestroy.io/domain/aunveldr0k-platform.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:15:12 UTC - Last availability or vendor check: 2026-10-22 05:21:08 UTC - Stored record updated: 2026-10-22 09:32:50 UTC - VirusTotal detections in the stored snapshot: 19/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: flagged ## Stored infrastructure - Observed IP address: 172.67.150.7 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-21 23:00:59 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1620d-a5fe-7250-9785-ed015eb53a45/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/aunveldr0k-platform.com - Certificate Transparency search: https://crt.sh/?q=%25.aunveldr0k-platform.com - Web Archive lookup: https://web.archive.org/web/*/https://aunveldr0k-platform.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed aunveldr0k-platform.com as a suspicious domain based on Google Safe Browsing social‑engineering flag and a high number of VirusTotal detections. The recorded page title reads “Aunveldr0k | Intelligent AI Platform for Smarter Trading”. The domain was first seen by PhishDestroy on 2026-10-22. An HTTP 200 response was observed on that date. How the scam works The detections suggest the site may be used for social‑engineering attacks that lure visitors into providing credentials or personal data. Such phishing pages typically mimic legitimate services to gain trust, then harvest login information or direct users to malicious downloads. No specific malicious payload or credential‑harvesting form was observed on the captured page, so the exact mechanism remains unconfirmed. Evidence Google Safe Browsing flagged the domain for social engineering on 2026-10-22. VirusTotal recorded 19 detections from 92 engines on 2026-10-22, with 16 classified as malicious and 3 as suspicious; vendors including BitDefender, ESET, and Forcepoint ThreatSeeker marked it malicious. URLScan performed two scans: an 2026-08-01 scan returned a clean verdict, while a 2026-10-22 scan showed a malicious engine score of 99 but an overall non‑malicious verdict. OTX listed five pulses referencing the domain as of 2026-10-22. No external blocklists reported the domain, but PhishDestroy’s internal list includes it. Infrastructure The domain was registered with Dynadot Inc on 2026-07-22, giving it an age of 92 days at first sight. Hosting is provided through Cloudflare, with recorded A records 172.67.150.7 (Canada) and 104.21.11.187 (United States). The TLS certificate, issued by Google Trust Services, is valid until 2026-12-18 and covers the domain and a wildcard sub‑domain. DNSSEC is not enabled and open ports include 80, 443, and 8080. What to do Visitors should avoid entering any credentials, personal data, or downloading files from this site and should change passwords if they suspect they have been entered. Organizations should block the domain at the firewall or proxy and monitor logs for any outbound connections. Security teams can use the registrar and hosting details to enrich threat intel but should not assume the operator’s identity from these attributes alone. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1620d-a5fe-7250-9785-ed015eb53a45/ Cloudflare Radar report: https://radar.cloudflare.com/scan/af7f521a-028b-4ca0-8e08-bfb3b51eba2c URLQuery report: https://urlquery.net/report/9348a7da-a777-4e2a-828e-52751e4f94ad Stored capture screenshot: https://i.ibb.co/4gnQNdMP/fcaf64430c22.png Cloudflare Radar screenshot (2026-10-22T05:15:52Z): https://screenshots.phishdestroy.io/cf/af7f521a-028b-4ca0-8e08-bfb3b51eba2c.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/9348a7da-a777-4e2a-828e-52751e4f94ad.png URLScan screenshot (2026-07-31T15:45:18Z): https://screenshots.phishdestroy.io/us/019fb8d9-d821-7116-a4e4-228e3d6748b2.png URLScan capture report: https://urlscan.io/result/019fb8d9-d821-7116-a4e4-228e3d6748b2/ URLScan screenshot (2026-08-01T07:39:58Z): https://screenshots.phishdestroy.io/us/019fbc43-e010-735a-9584-a577c955fc60.png URLScan capture report: https://urlscan.io/result/019fbc43-e010-735a-9584-a577c955fc60/ URLScan screenshot (2026-10-22T05:16:04Z): https://screenshots.phishdestroy.io/us/01a16209-7131-7419-b46a-b4fb9b4f3184.png URLScan capture report: https://urlscan.io/result/01a16209-7131-7419-b46a-b4fb9b4f3184/ VirusTotal report: https://www.virustotal.com/gui/domain/aunveldr0k-platform.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aunveldr0k-platform.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 06:16:30 UTC ## Stored page captures - Primary capture: https://i.ibb.co/4gnQNdMP/fcaf64430c22.png Captured: 2026-10-22 05:21:08 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a1620d-a5fe-7250-9785-ed015eb53a45.png Captured: 2026-10-22 05:21:08 UTC Source report: https://urlscan.io/result/01a1620d-a5fe-7250-9785-ed015eb53a45/ - URLScan capture 2: https://screenshots.phishdestroy.io/019fbc43-e010-735a-9584-a577c955fc60.png Captured: 2026-10-22 05:15:12 UTC Source report: https://urlscan.io/result/01a1620d-a5fe-7250-9785-ed015eb53a45/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/af7f521a-028b-4ca0-8e08-bfb3b51eba2c.png Captured: 2026-10-22 05:15:52 UTC Source report: https://radar.cloudflare.com/scan/af7f521a-028b-4ca0-8e08-bfb3b51eba2c SHA-256: fe4ccfcf6acc0c6c34c4a7b12b5c08ffac9ff099f36f638968857c7e88760e85 - URLQuery: https://screenshots.phishdestroy.io/uq/9348a7da-a777-4e2a-828e-52751e4f94ad.png Source report: https://urlquery.net/report/9348a7da-a777-4e2a-828e-52751e4f94ad SHA-256: 5d4093ea5402382dce54baef3a9398c8fd885798a8af8a4b545d0e60adcf007a - URLScan · 2026-07-31: https://screenshots.phishdestroy.io/us/019fb8d9-d821-7116-a4e4-228e3d6748b2.png Captured: 2026-07-31 15:45:18 UTC Source report: https://urlscan.io/result/019fb8d9-d821-7116-a4e4-228e3d6748b2/ SHA-256: 37589c9725fc1a8b3207c20b0351d9e651bb1c33b3a986494a8b6557c1d9911f - URLScan · 2026-08-01: https://screenshots.phishdestroy.io/us/019fbc43-e010-735a-9584-a577c955fc60.png Captured: 2026-08-01 07:39:58 UTC Source report: https://urlscan.io/result/019fbc43-e010-735a-9584-a577c955fc60/ SHA-256: fef35f5a07b54293bf1b434f6dce134af7f0f6e3070454b035ac42e628b8b540 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16209-7131-7419-b46a-b4fb9b4f3184.png Captured: 2026-10-22 05:16:04 UTC Source report: https://urlscan.io/result/01a16209-7131-7419-b46a-b4fb9b4f3184/ SHA-256: 6cb5dd34400c03234f8fd5505c0133fd0a83037ca3b898dd10988e96943aa958 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:46:19Z", "uuid": "01a1620d-a5fe-7250-9785-ed015eb53a45", "scanned_at": "2026-10-22T05:20:30Z", "final_url": "https://aunveldr0k-platform.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://aunveldr0k-platform.com/", "from": "http://aunveldr0k-platform.com/", "status": 307 } ], "ip": "104.21.11.187", "domains": [ "fonts.gstatic.com", "cdnjs.cloudflare.com", "cdn.jsdelivr.net", "modernroomdesigns.com", "fonts.googleapis.com" ], "ips": [ "142.250.154.94", "104.21.38.110", "104.17.24.14", "104.17.207.5", "192.178.183.95", "104.21.11.187" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "doc_hash": "d3e471e646246c918781e0f43fe1a17230e92dd5ec2fd3f4bfe582e4dcf6d034", "script_hashes": [ "4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885", "e6dceff02b748c5e65495e6fce3bb60a3ce75b53f9ee0c57cd7c42f083846989", "e0d474a967169b7d786344ed8e8223714d42007e0447facc8880749bf1f949b6" ], "globals": [ "polylang", "_language", "_loader", "GEO_API_URL", "_phone_error", "_form_unknown_error", "_leadContactFocusInit", "_tp_intl_locale", "_tp_day_label_1", "_tp_day_label_n", "__offerChatWidgetMounted", "intlTelInput", "gsapVersions", "Linear", "Power0", "Quad", "Power1", "Cubic", "Power2", "Quart", "Power3", "Quint", "Power4", "Strong", "Elastic", "Bounce", "Expo", "Circ", "Sine", "Back", "SteppedEase", "TweenLite", "TweenMax", "TimelineMax", "TimelineLite", "AttrPlugin", "EndArrayPlugin", "RoundPropsPlugin", "ModifiersPlugin", "SnapPlugin" ], "cookies": [ "_subid", "csrftoken" ], "tls": { "san": [ "aunveldr0k-platform.com", "*.aunveldr0k-platform.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "aunveldr0k-platform.com", "protocol": "QUIC", "valid_to": "2026-12-18T06:57:45Z", "valid_from": "2026-09-19T05:57:56Z" }, "domain_age_days": 92, "apex_age_days": 92, "tls_age_days": 32, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T05:16:33Z", "uuid": "af7f521a-028b-4ca0-8e08-bfb3b51eba2c", "scanned_at": "2026-10-22T05:15:52Z", "final_url": "https://aunveldr0k-platform.com/", "status": 200, "history": [ { "url": "https://aunveldr0k-platform.com/", "status": 200 } ], "dom_hash": "d3954b185658fb64825a2becad943065c5939d4865b04eea63b9455a070a3c35", "doc_hash": "a8764219840f514af94b2032168e584b39ff925fff403b320a3f28ef614e29b1", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "aunveldr0k-platform.com", "type": "A", "value": "104.21.11.187" }, { "name": "aunveldr0k-platform.com", "type": "A", "value": "172.67.150.7" }, { "name": "aunveldr0k-platform.com", "type": "AAAA", "value": "2606:4700:3036::ac43:9607" }, { "name": "aunveldr0k-platform.com", "type": "AAAA", "value": "2606:4700:3035::6815:bbb" } ], "dnssec_valid": false, "ip": "104.21.11.187", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-22T01:00:59Z", "updated": "2026-07-22T01:01:25Z", "expires": "2027-07-22T01:00:59Z", "nameservers": [ "kayden.ns.cloudflare.com", "monika.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T06:15:50Z", "analysis_at": "2026-10-21T16:00:01Z", "stats": { "timeout": 0, "harmless": 41, "malicious": 16, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Google Safe Browsing": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "registrar": "Dynadot Inc", "created": "2026-07-22T01:00:59Z", "expires": "2027-07-22T01:00:59Z", "updated": "2026-07-22T01:01:25Z", "first_seen": "2026-07-22T01:58:56Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "monika.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "kayden.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::ac43:9607" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:bbb" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "kayden.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.11.187" }, { "ttl": 300, "type": "A", "value": "172.67.150.7" } ], "dns_at": "2026-10-21T16:05:26Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "aunveldr0k-platform.com", "*.aunveldr0k-platform.com" ], "issuer": "Google Trust Services / WE1", "serial": "e02b24d7b3fd9ae40e543dea37d13815", "sha256": "8e532278ff2b9fd90bc319ee1864e99a3237eaaacad9f7e87202905dbb58e13e", "subject": "aunveldr0k-platform.com", "valid_to": "2026-12-18T06:57:45Z", "valid_from": "2026-09-19T05:57:56Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-07-22T01:00:59Z", "updated": "2026-07-22T01:01:25Z", "expires": "2027-07-22T01:00:59Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "kayden.ns.cloudflare.com", "monika.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-07-22T01:00:59Z", "last changed": "2026-07-22T01:01:25Z", "registration": "2026-07-22T01:00:59Z", "registrar expiration": "2027-07-22T01:00:59Z", "last update of RDAP database": "2026-10-16T07:25:51Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T05:16:52Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "aunveldr0k-platform.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T05:15:44Z", "first": "2026-10-16T23:35:16Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.19, "avg_page_bytes": 17722 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://aunveldr0k-platform.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 10 }, "social_tags": { "ogUrl": "https://aunveldr0k-platform.com/", "title": "Aunveldr0k | Intelligent AI Platform for Smarter Trading", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://aunveldr0k-platform.com/static/template_25/media/brand.svg", "ogTitle": "Aunveldr0k | Intelligent AI Platform for Smarter Trading", "ogSiteName": "Aunveldr0k", "themeColor": "#f8fbf7", "description": "Aunveldr0k combines advanced AI technology with market insights to help users evaluate trends, discover trading opportunities, and navigate financial markets with greater confidence.", "twitterCard": "summary_large_image", "canonicalUrl": "https://aunveldr0k-platform.com/", "ogDescription": "Aunveldr0k combines advanced AI technology with market insights to help users evaluate trends, discover trading opportunities, and navigate financial markets with greater confidence." }, "trackers": { "requests": 16, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js", "https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js", "https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/ScrollTrigger.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 127, "tls": 17, "wait": 1234, "connect": 7, "download": 5 }, "response_ms": 1390 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 61495, "co2_grams": 0.0022, "cleaner_than": 32 }, "dns_server": { "ns": [ { "ip": "108.162.194.56", "host": "monika.ns.cloudflare.com" }, { "ip": "172.64.35.74", "host": "kayden.ns.cloudflare.com" } ], "zone": "aunveldr0k-platform.com" }, "cookies": { "cookies": [ { "name": "_subid", "session": true }, { "name": "csrftoken", "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3036::ac43:9607", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "aunveldr0k-platform.com" }, "dns": { "A": [ "104.21.11.187", "172.67.150.7" ], "NS": [ "kayden.ns.cloudflare.com", "monika.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"kayden.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415401017, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3036::ac43:9607", "2606:4700:3035::6815:bbb" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3036::ac43:9607", "family": 6 }, "redirects": { "chain": [ "https://aunveldr0k-platform.com" ] }, "tech_stack": { "technologies": [ "Python", "Django", "GSAP", "jsDelivr", "Google Font API", "cdnjs", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-22T01:00:59Z", "updated": "2026-07-22T01:01:25Z", "expires": "2027-07-22T01:00:59Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "kayden.ns.cloudflare.com", "monika.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } } } } ```