# PhishDestroy domain threat record: aureviacapitalai.pro Content language: English Canonical HTML report: https://phishdestroy.io/domain/aureviacapitalai.pro/ Machine-readable companion: https://phishdestroy.io/domain/aureviacapitalai.pro/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:22:25 UTC - Last availability or vendor check: 2026-10-22 05:22:25 UTC - Stored record updated: 2026-10-22 06:30:30 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.57.10 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-06-07 04:57:37 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1620d-a614-7618-abb2-6dacfb2af4c0/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/aureviacapitalai.pro - Certificate Transparency search: https://crt.sh/?q=%25.aureviacapitalai.pro - Web Archive lookup: https://web.archive.org/web/*/https://aureviacapitalai.pro/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added aureviacapitalai.pro to its internal blocklist on 2026-10-22 after an intake rule triggered on a VirusTotal malicious flag. The recorded page title was “aurevia capital ai | AI Trading Platform | Official Website”, which displayed marketing information for an AI‑driven trading platform. An HTTP 200 response was recorded on 2026-10-22, and no external blocklists listed the domain at that time. How the scam works The current evidence does not demonstrate a concrete phishing, credential‑theft, or malware delivery mechanism; the listing is based on a single third‑party malicious flag and generic risk indicators. Domains that present financial or AI‑trading services can be used to lure users into providing personal data or funds, but no such behavior was observed on this page. Evidence VirusTotal scanned the domain on 2026-10-21 and marked it malicious in 1 of 92 engines (SOCRadar); the result was retrieved on 2026-10-22. Google Safe Browsing checked on 2026-10-22 and did not flag the domain. Cloudflare Radar on 2026-10-22 classified the site as malicious with malware and phishing tags. urlscan.io recorded the page on 2026-10-22, its engine score was 98 % malicious but the overall verdict was non‑malicious. OTX listed four pulses referencing the domain as of 2026-10-22. PhishDestroy’s internal blocklist contains the domain, while external blocklists reported zero entries. Infrastructure The domain was registered on 2026-06-07 through Dynadot Inc with a transfer‑prohibited status. The recorded IP address was 185.62.57.10, which was owned by Snel.com B.V. in the Netherlands. The site used Cloudflare DNS (mario.ns.cloudflare.com, sreeni.ns.cloudflare.com) and presented a ZeroSSL ECC DV certificate valid until 2026-12-18. What to do Visitors should avoid entering credentials, payment details, or cryptocurrency addresses on the site; if any data was submitted, change associated passwords and monitor accounts for unauthorized activity. Organizations should block the exact domain in network filters and review logs for connections to 185.62.57.10. Continue monitoring VirusTotal, OTX, Cloudflare Radar, and other threat feeds for updates, and treat the domain as suspicious until further investigation clarifies its intent. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1620d-a614-7618-abb2-6dacfb2af4c0/ Cloudflare Radar report: https://radar.cloudflare.com/scan/111843f7-813d-42e3-8f79-ff82184f51b8 URLQuery report: https://urlquery.net/report/8e992e83-6fd1-431f-b6d8-382a2f259cbb Stored capture screenshot: https://urlscan.io/screenshots/01a1620d-a614-7618-abb2-6dacfb2af4c0.png Cloudflare Radar screenshot (2026-10-22T05:56:02Z): https://screenshots.phishdestroy.io/cf/111843f7-813d-42e3-8f79-ff82184f51b8.png URLScan screenshot (2026-10-22T05:19:37Z): https://screenshots.phishdestroy.io/us/01a1620c-c717-76cf-8435-68658f9f6a12.png URLScan capture report: https://urlscan.io/result/01a1620c-c717-76cf-8435-68658f9f6a12/ VirusTotal report: https://www.virustotal.com/gui/domain/aureviacapitalai.pro Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aureviacapitalai.pro Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 05:58:03 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1620d-a614-7618-abb2-6dacfb2af4c0.png Captured: 2026-10-22 05:22:25 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1620d-a614-7618-abb2-6dacfb2af4c0.png Captured: 2026-10-22 05:22:25 UTC Source report: https://urlscan.io/result/01a1620d-a614-7618-abb2-6dacfb2af4c0/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/111843f7-813d-42e3-8f79-ff82184f51b8.png Captured: 2026-10-22 05:56:02 UTC Source report: https://radar.cloudflare.com/scan/111843f7-813d-42e3-8f79-ff82184f51b8 SHA-256: 52ddf9fe3d0b25e9931519bf3be64b714b76b475de8b11d807cce2a73bf340ec - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1620c-c717-76cf-8435-68658f9f6a12.png Captured: 2026-10-22 05:19:37 UTC Source report: https://urlscan.io/result/01a1620c-c717-76cf-8435-68658f9f6a12/ SHA-256: 6aae34bf7c2102502e19c825c5b7b1223964fb543c49a2be93695e77afa31aa5 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:55:08Z", "uuid": "01a1620d-a614-7618-abb2-6dacfb2af4c0", "scanned_at": "2026-10-22T05:20:34Z", "final_url": "https://aureviacapitalai.pro/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://aureviacapitalai.pro/", "from": "http://aureviacapitalai.pro/", "status": 307 } ], "ip": "185.62.57.10", "ptr": "s46026.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.18.95.41", "142.250.154.94", "104.18.94.41", "104.16.124.96", "104.17.208.5", "104.17.25.14", "192.178.183.95", "185.62.57.10" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "e1c3bb2474ede023be5b1df5503558655b66f8e493ec7ec6bbdd95ff64e70477", "script_hashes": [ "6c2912085628437525e563fe1dc512825765a41f73b3afce320a4912c0566961" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "__visitorCountry", "ClientJS", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "aureviacapitalai.pro" ], "cipher": "CHACHA20_POLY1305", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "aureviacapitalai.pro", "protocol": "TLS 1.3", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "domain_age_days": 136, "apex_age_days": 136, "tls_age_days": 33, "tls_valid_days": 90, "requests": 22, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T05:57:18Z", "uuid": "111843f7-813d-42e3-8f79-ff82184f51b8", "scanned_at": "2026-10-22T05:56:02Z", "final_url": "https://aureviacapitalai.pro/", "status": 200, "history": [ { "url": "https://aureviacapitalai.pro/", "status": 200 } ], "dom_hash": "f0a53487cd6f0c320e22ba4e861a60207afe22df187b0a469e9bdea875a8fd3a", "doc_hash": "e1c3bb2474ede023be5b1df5503558655b66f8e493ec7ec6bbdd95ff64e70477", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "aureviacapitalai.pro", "type": "A", "value": "185.62.57.10" } ], "dnssec_valid": false, "ip": "185.62.57.10", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T05:55:45Z", "analysis_at": "2026-10-21T12:58:38Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 1, "suspicious": 0, "undetected": 36 }, "detections": { "SOCRadar": "phishing" }, "reputation": 0, "first_seen": "2026-06-07T14:50:16Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "sreeni.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "mario.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.10" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "mario.ns.cloudflare.com" } ], "dns_at": "2026-10-21T13:04:12Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "aureviacapitalai.pro" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "2c1e2d0567f3a5ec26bf258c8d4176d", "sha256": "e5ea862af26a67f7faef47414b4b3f83f3096629afa1739e48c59316e9ed7c80", "subject": "aureviacapitalai.pro", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-07T06:57:37Z", "last changed": "2026-06-07T14:14:50Z", "registration": "2026-06-07T06:57:37Z", "registrar expiration": "2027-06-07T06:57:37Z", "last update of RDAP database": "2026-10-16T07:13:38Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T05:57:32Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "aureviacapitalai.pro" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T05:25:36Z", "first": "2026-10-12T11:14:47Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.1, "avg_page_bytes": 12217 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://aureviacapitalai.pro/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://aureviacapitalai.pro/", "title": "aurevia capital ai | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Aurevia Capital AI | Premium AI-driven trading automation", "ogSiteName": "Aurevia Capital AI", "themeColor": "#0a2040", "description": "Aurevia Capital AI delivers a premium view of automated trading agents and AI-driven trading support, outlining workflows, governance, security, and execution.", "twitterCard": "summary", "canonicalUrl": "https://aureviacapitalai.pro/", "ogDescription": "Aurevia Capital AI delivers a premium overview of automated trading bots and AI-powered trading assistance, detailing workflows, governance, security practices, and execution." }, "trackers": { "requests": 22, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 80, "tls": 28, "wait": 31, "connect": 24, "download": 51 }, "response_ms": 214 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 44640, "co2_grams": 0.0016, "cleaner_than": 39 }, "dns_server": { "ns": [ { "ip": "162.159.38.178", "host": "sreeni.ns.cloudflare.com" }, { "ip": "173.245.59.203", "host": "mario.ns.cloudflare.com" } ], "zone": "aureviacapitalai.pro" }, "location": { "ip": "185.62.57.10", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "aureviacapitalai.pro" }, "dns": { "A": [ "185.62.57.10" ], "NS": [ "sreeni.ns.cloudflare.com", "mario.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"mario.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416549710, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.10", "family": 4 }, "redirects": { "chain": [ "https://aureviacapitalai.pro" ] }, "tech_stack": { "technologies": [ "Cloudflare", "Cloudflare Turnstile", "ClientJS", "Priority Hints", "jsDelivr", "Google Font API", "Font Awesome", "cdnjs", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 38 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```