# PhishDestroy domain threat record: aureliusai.digital Content language: English Canonical HTML report: https://phishdestroy.io/domain/aureliusai.digital/ Machine-readable companion: https://phishdestroy.io/domain/aureliusai.digital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:15:30 UTC - Last availability or vendor check: 2026-10-22 11:01:53 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.50.108 - Registrar in stored WHOIS data: NameCheap, Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, aureliusai.digital): 2026-03-11 11:41:27 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16225-7570-73cd-8c2e-a55b82512274/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/aureliusai.digital - Certificate Transparency search: https://crt.sh/?q=%25.aureliusai.digital - Web Archive lookup: https://web.archive.org/web/*/https://aureliusai.digital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy classifies aureliusai.digital as suspicious based on multiple security‑vendor detections. The domain was first seen by PhishDestroy on 2026-10-22, presented a page titled "Aurelius AI | Premium Trading Platform | Official Website" and returned HTTP 200 on that date. How the scam works The listing relies on vendor labels that mark the site as phishing or malware; no specific malicious behavior was captured on the page. Sites with such signals are often used to lure visitors into disclosing credentials, personal data or financial information, but the current evidence does not confirm any particular technique. Evidence VirusTotal reported 14 malicious and 4 suspicious detections from 92 engines on 2026-10-21, with vendors such as BitDefender, Kaspersky and Forcepoint flagging the domain as phishing or malicious. Cloudflare Radar flagged the domain as malware on 2026-10-22, while urlscan.io gave a clean overall verdict on its 2026-08-01 capture. Google Safe Browsing showed no flag on 2026-10-22, OTX listed one pulse referencing the domain on the same day, PhishDestroy’s internal blocklist marks it as malicious, and external blocklists returned zero matches as of 2026-10-22. Infrastructure The domain was registered on 2026-03-11 through NameCheap, Inc. DNS records resolve to Cloudflare IPs 172.67.204.242 and 104.21.50.108, and the TLS certificate issued by Google Trust Services is valid until 2026-12-04; DNSSEC was not observed. What to do Avoid entering login credentials, payment details or personal information on this site. If any data was submitted, change associated passwords and monitor accounts for unauthorized activity. Defenders should block the domain at the network perimeter and log any DNS queries or connections to it. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019fbc43-e3f0-76fd-9e4b-63c17ae46a20/ Cloudflare Radar report: https://radar.cloudflare.com/scan/6fdee73d-a437-48a1-9673-ab67859f13ed Stored capture screenshot: https://urlscan.io/screenshots/019fbc43-e3f0-76fd-9e4b-63c17ae46a20.png Cloudflare Radar screenshot (2026-10-22T05:30:44Z): https://screenshots.phishdestroy.io/cf/6fdee73d-a437-48a1-9673-ab67859f13ed.png URLScan screenshot (2026-07-31T15:01:06Z): https://screenshots.phishdestroy.io/us/019fb8b1-61dd-73e9-9d2d-f129d1a20037.png URLScan capture report: https://urlscan.io/result/019fb8b1-61dd-73e9-9d2d-f129d1a20037/ URLScan screenshot (2026-10-22T05:16:59Z): https://screenshots.phishdestroy.io/us/01a1620a-5c8e-76fa-a523-fb40b21fab03.png URLScan capture report: https://urlscan.io/result/01a1620a-5c8e-76fa-a523-fb40b21fab03/ VirusTotal report: https://www.virustotal.com/gui/domain/aureliusai.digital Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aureliusai.digital Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 05:38:07 UTC ## Stored page captures - Primary capture: https://i.ibb.co/8H7ncVb/ef860eb04b95.png Captured: 2026-10-22 05:47:40 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a16225-7570-73cd-8c2e-a55b82512274.png Captured: 2026-10-22 05:47:40 UTC Source report: https://urlscan.io/result/01a16225-7570-73cd-8c2e-a55b82512274/ - URLScan capture 2: https://screenshots.phishdestroy.io/019fbc43-e3f0-76fd-9e4b-63c17ae46a20.png Captured: 2026-10-22 05:15:30 UTC Source report: https://urlscan.io/result/01a16225-7570-73cd-8c2e-a55b82512274/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/6fdee73d-a437-48a1-9673-ab67859f13ed.png Captured: 2026-10-22 05:30:44 UTC Source report: https://radar.cloudflare.com/scan/6fdee73d-a437-48a1-9673-ab67859f13ed SHA-256: 52e1fe216f36d2071101a39495e103fb21411f7ddfe4a51c2617f50a17c947e3 - URLQuery: https://screenshots.phishdestroy.io/uq/b33a63e6-c815-4e96-9ac4-5368cbdafb49.png Source report: https://urlquery.net/report/b33a63e6-c815-4e96-9ac4-5368cbdafb49 SHA-256: 0f37a0384cb977d42f31a4e3acc8cefd58406979cc4a7dabfa45ef8d64c043bd - URLScan · 2026-07-31: https://screenshots.phishdestroy.io/us/019fb8b1-61dd-73e9-9d2d-f129d1a20037.png Captured: 2026-07-31 15:01:06 UTC Source report: https://urlscan.io/result/019fb8b1-61dd-73e9-9d2d-f129d1a20037/ SHA-256: 82ea8e3b4147e112287734d35a0d657bcc67525b690dd63e8d39ae36d3cd7899 - URLScan · 2026-08-01: https://screenshots.phishdestroy.io/us/019fbc43-e3f0-76fd-9e4b-63c17ae46a20.png Captured: 2026-08-01 07:40:00 UTC Source report: https://urlscan.io/result/019fbc43-e3f0-76fd-9e4b-63c17ae46a20/ SHA-256: 8dfbf5f9231352a9aec168d6df548f7de785fd5391c467a9fc2f6dc15e2d3ae0 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1620a-5c8e-76fa-a523-fb40b21fab03.png Captured: 2026-10-22 05:16:59 UTC Source report: https://urlscan.io/result/01a1620a-5c8e-76fa-a523-fb40b21fab03/ SHA-256: 315a466909a2ddbe120744a0ce3b08fbdea959bda749580e10820b88a2affd3d - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16210-1426-730c-bfe7-57a37ab94bd2.png Captured: 2026-10-22 05:23:17 UTC Source report: https://urlscan.io/result/01a16210-1426-730c-bfe7-57a37ab94bd2/ SHA-256: 315a466909a2ddbe120744a0ce3b08fbdea959bda749580e10820b88a2affd3d - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1621e-e937-71eb-9035-91ddae7acde4.png Captured: 2026-10-22 05:39:27 UTC Source report: https://urlscan.io/result/01a1621e-e937-71eb-9035-91ddae7acde4/ SHA-256: acb0b58abb3c302dfcb6239c67d451885d577194410ffd1f809491a62c6b5e29 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:55:14Z", "uuid": "01a16225-7570-73cd-8c2e-a55b82512274", "scanned_at": "2026-10-22T05:46:35Z", "final_url": "https://aureliusai.digital/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://aureliusai.digital/", "from": "http://aureliusai.digital/", "status": 307 } ], "ip": "104.21.50.108", "domains": [ "cdnjs.cloudflare.com", "challenges.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflare.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.17.207.5", "142.251.20.95", "104.17.25.14", "104.21.50.108" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "a8196fb58af1fae540e4e2a35bec1a5b6dbb1fb0b3bd554e5110df6e22546cd8", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_ms0qy4r", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "aureliusai.digital" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "aureliusai.digital", "protocol": "QUIC", "valid_to": "2026-12-04T12:44:42Z", "valid_from": "2026-09-05T11:44:44Z" }, "domain_age_days": 224, "apex_age_days": 224, "tls_age_days": 46, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-ancestors 'self'; frame-src https://challenges.cloudflare.com; img-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T05:34:41Z", "uuid": "6fdee73d-a437-48a1-9673-ab67859f13ed", "scanned_at": "2026-10-22T05:30:44Z", "final_url": "https://aureliusai.digital/", "status": 200, "history": [ { "url": "https://aureliusai.digital/", "status": 200 } ], "dom_hash": "3da0809bc2c96034632806859069671ffa2416311c3dc49de398c03a492ebee9", "doc_hash": "d782e0f97b5725f350da3cf54c34861914bb7a647b4f10f50e64e6af6d9a74d3", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "aureliusai.digital", "type": "A", "value": "172.67.204.242" }, { "name": "aureliusai.digital", "type": "A", "value": "104.21.50.108" }, { "name": "aureliusai.digital", "type": "AAAA", "value": "2606:4700:3032::ac43:ccf2" }, { "name": "aureliusai.digital", "type": "AAAA", "value": "2606:4700:3032::6815:326c" } ], "dnssec_valid": false, "ip": "172.67.204.242", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T05:30:04Z", "analysis_at": "2026-10-21T13:57:02Z", "stats": { "timeout": 0, "harmless": 41, "malicious": 14, "suspicious": 4, "undetected": 33 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "spam", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-03-11T00:00:00Z", "updated": "2026-03-11T00:00:00Z", "first_seen": "2026-03-11T13:12:04Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::ac43:ccf2" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "maisie.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.204.242" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::6815:326c" }, { "ttl": 300, "type": "TXT", "value": "google-site-verification=8SoJQibbflvXxewWL8FWpxa6ewiDfqhqBQLdEkitsc0" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 ip4:46.166.131.92 ~all" }, { "ttl": 300, "type": "MX", "value": "mail.aureliusai.digital", "priority": 10 }, { "ttl": 21600, "type": "NS", "value": "maisie.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "ram.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.50.108" } ], "dns_at": "2026-10-21T14:02:39Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "aureliusai.digital" ], "issuer": "Google Trust Services / WE1", "serial": "5c77739bce3616730ef016152741799c", "sha256": "6f87654f47d7eb10721f4e896a13c16baaebb2e602d22079f9466d8e036b0749", "subject": "aureliusai.digital", "valid_to": "2026-12-04T12:44:42Z", "valid_from": "2026-09-05T11:44:44Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited" ], "events": { "registration": "2026-03-11T11:41:27Z", "registrar expiration": "2027-03-11T11:41:27Z", "last update of RDAP database": "2026-10-21T14:02:39Z" }, "registrar": "NAMECHEAP INC", "registrar_iana_id": "1068" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T05:34:58Z", "mail_config": { "mx": [ "mail.aureliusai.digital" ], "spf": "v=spf1 ip4:46.166.131.92 ~all", "spf_lookups": 0 }, "caa_records": { "domain": "aureliusai.digital" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T05:16:10Z", "first": "2026-10-12T11:14:29Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.1, "avg_page_bytes": 42031 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://aureliusai.digital/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "ogUrl": "https://aureliusai.digital/", "title": "Aurelius AI | Premium Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Aurelius AI | Premium AI Trading Assistant & Automation Tools", "ogSiteName": "Aurelius AI", "themeColor": "#0f1114", "description": "Aurelius AI delivers AI-powered trading assistance and automated bot tooling for CFD and forex workflows, featuring guided setup, intuitive controls, and actionable insights.", "twitterCard": "summary", "canonicalUrl": "https://aureliusai.digital/", "ogDescription": "Aurelius AI delivers AI-powered trading assistance and automated bot tooling for CFD and forex workflows, emphasizing guided setup, robust controls, and actionable insights." }, "trackers": { "requests": 17, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 24, "wait": 135, "connect": 7, "download": 33 }, "response_ms": 201 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 145308, "co2_grams": 0.0053, "cleaner_than": 14 }, "dns_server": { "ns": [ { "ip": "162.159.38.89", "host": "maisie.ns.cloudflare.com" }, { "ip": "108.162.193.225", "host": "ram.ns.cloudflare.com" } ], "zone": "aureliusai.digital" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3032::6815:326c", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "aureliusai.digital" }, "dns": { "A": [ "104.21.50.108", "172.67.204.242" ], "MX": [ "{\"exchange\": \"mail.aureliusai.digital\", \"priority\": 10}" ], "NS": [ "maisie.ns.cloudflare.com", "ram.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"maisie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418083792, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 ip4:46.166.131.92 ~all", "google-site-verification=8SoJQibbflvXxewWL8FWpxa6ewiDfqhqBQLdEkitsc0" ], "AAAA": [ "2606:4700:3032::ac43:ccf2", "2606:4700:3032::6815:326c" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "frame-ancestors 'self'; frame-src https://challenges.cloudflare.com; img-src 'self' data: blob:; script-src 'self' 'unsa", "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3032::6815:326c", "family": 6 }, "redirects": { "chain": [ "https://aureliusai.digital" ] }, "tech_stack": { "technologies": [ "jsDelivr", "Cloudflare Turnstile", "Cloudflare Rocket Loader", "ClientJS", "Priority Hints", "Google Font API", "Font Awesome", "cdnjs", "HSTS", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 46 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-ancestors 'self'; frame-src https://challenges.cloudflare.com; img-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com htt", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```