# PhishDestroy domain threat record: aureviatradex-platform.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/aureviatradex-platform.com/ Machine-readable companion: https://phishdestroy.io/domain/aureviatradex-platform.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:22:10 UTC - Last availability or vendor check: 2026-10-22 05:22:10 UTC - Stored record updated: 2026-10-22 06:30:30 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: venus ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-20 14:57:30 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1620d-a689-7160-89f4-a502554e2f0e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/aureviatradex-platform.com - Certificate Transparency search: https://crt.sh/?q=%25.aureviatradex-platform.com - Web Archive lookup: https://web.archive.org/web/*/https://aureviatradex-platform.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed aureviatradex-platform.com as a suspicious domain based on its internal assessment. The recorded page title was "Aurevia TradeX™ | Le site officiel et mis à jour【2026】". PhishDestroy first observed the domain on 2026-10-22 and recorded an HTTP 200 response on that date. How the scam works The detections suggest the domain could be used for typical phishing or malicious‑content delivery, such as presenting a fake trading service to lure credentials or payments. No specific credential‑harvesting form or wallet‑draining behavior was observed on the page, so the exact mechanism remains uncertain. Evidence VirusTotal (analysis 2026-10-17, retrieved 2026-10-22) reported 12 malicious and 3 suspicious detections out of 92 engines, with vendors including BitDefender, Fortinet, G-Data and others labeling it phishing or malicious. Google Safe Browsing checked on 2026-10-22 reported no flag. URLScan captured two scans: a 2026-09-17 scan returned a clean verdict, while a 2026-10-22 scan flagged the page as malicious by its engine scoring (90) though the overall verdict was not malicious. OTX listed five pulses referencing the domain, with one pulse recorded on 2026-10-22. No external blocklists listed the domain, but PhishDestroy’s internal blocklist includes it. Infrastructure The domain was registered with Dynadot Inc on 2026-05-20 and expires on 2027-05-20, with a clientTransferProhibited status. DNS records at the time showed Cloudflare IPs 188.114.96.3 and 188.114.97.0, which were associated with GB. The site uses a Let's Encrypt TLS certificate valid from 2026-09-15 to 2026-12-14 and is served behind Cloudflare’s WAF. DNSSEC is not enabled. What to do Visitors should avoid entering any credentials, personal data or payments on the site and, if they have already done so, change affected passwords and monitor accounts for unauthorized activity. Defenders should block aureviatradex-platform.com at the network perimeter, add it to threat‑intel feeds, and review logs for any connections to the recorded IPs or Cloudflare network. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1620d-a689-7160-89f4-a502554e2f0e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/3e7f5e2c-9cb4-4e26-81e0-32974c980cf4 URLQuery report: https://urlquery.net/report/999ffffa-bcbf-44a1-9be9-296b582672be Stored capture screenshot: https://i.ibb.co/gbK4r2qg/f5763c7107a9.png Cloudflare Radar screenshot (2026-10-22T05:56:14Z): https://screenshots.phishdestroy.io/cf/3e7f5e2c-9cb4-4e26-81e0-32974c980cf4.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/999ffffa-bcbf-44a1-9be9-296b582672be.png URLScan screenshot (2026-09-16T03:30:25Z): https://screenshots.phishdestroy.io/us/01a0a843-f087-77b8-9cf0-7b91fa57ba66.png URLScan capture report: https://urlscan.io/result/01a0a843-f087-77b8-9cf0-7b91fa57ba66/ URLScan screenshot (2026-09-16T10:02:52Z): https://screenshots.phishdestroy.io/us/01a0a9ab-37f1-7464-b987-d2d084874571.png URLScan capture report: https://urlscan.io/result/01a0a9ab-37f1-7464-b987-d2d084874571/ URLScan screenshot (2026-09-17T10:05:37Z): https://screenshots.phishdestroy.io/us/01a0aed4-1b8a-75df-bfab-1a14700f891a.png URLScan capture report: https://urlscan.io/result/01a0aed4-1b8a-75df-bfab-1a14700f891a/ URLScan screenshot (2026-10-22T05:20:27Z): https://screenshots.phishdestroy.io/us/01a1620d-9b20-77b8-9039-6f896a44f0ae.png URLScan capture report: https://urlscan.io/result/01a1620d-9b20-77b8-9039-6f896a44f0ae/ VirusTotal report: https://www.virustotal.com/gui/domain/aureviatradex-platform.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aureviatradex-platform.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 06:27:18 UTC ## Stored page captures - Primary capture: https://i.ibb.co/gbK4r2qg/f5763c7107a9.png Captured: 2026-10-22 05:22:10 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1620d-a689-7160-89f4-a502554e2f0e.png Captured: 2026-10-22 05:22:10 UTC Source report: https://urlscan.io/result/01a1620d-a689-7160-89f4-a502554e2f0e/ - URLScan capture 2: https://urlscan.io/screenshots/01a0aed4-1b8a-75df-bfab-1a14700f891a.png Captured: 2026-10-22 05:15:43 UTC Source report: https://urlscan.io/result/01a1620d-a689-7160-89f4-a502554e2f0e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3e7f5e2c-9cb4-4e26-81e0-32974c980cf4.png Captured: 2026-10-22 05:56:14 UTC Source report: https://radar.cloudflare.com/scan/3e7f5e2c-9cb4-4e26-81e0-32974c980cf4 SHA-256: 44b9ee63a7256de742d2b86fb5eaa1c084e767bc7f70905bbbf5ba196b897ceb - URLQuery: https://screenshots.phishdestroy.io/uq/999ffffa-bcbf-44a1-9be9-296b582672be.png Source report: https://urlquery.net/report/999ffffa-bcbf-44a1-9be9-296b582672be SHA-256: e07867ce9c9ac8252c9d0b475f392ab3c4bf4a321b78e915b9d21ea432de5ff5 - URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0a843-f087-77b8-9cf0-7b91fa57ba66.png Captured: 2026-09-16 03:30:25 UTC Source report: https://urlscan.io/result/01a0a843-f087-77b8-9cf0-7b91fa57ba66/ SHA-256: 2419a6e62a19ca4bb4321d37eb5e826e2fbf712a431595d365f723d40cecfacd - URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0a9ab-37f1-7464-b987-d2d084874571.png Captured: 2026-09-16 10:02:52 UTC Source report: https://urlscan.io/result/01a0a9ab-37f1-7464-b987-d2d084874571/ SHA-256: ebe2f4ea960a3dc563b0ae443ab4a818e0de524ad3190f5684c52545c50bdd41 - URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0aed4-1b8a-75df-bfab-1a14700f891a.png Captured: 2026-09-17 10:05:37 UTC Source report: https://urlscan.io/result/01a0aed4-1b8a-75df-bfab-1a14700f891a/ SHA-256: 1e2ad487354751c402cf4d15a94849ef0ccc9415a8101546cd4e27c518ffbb45 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1620d-9b20-77b8-9039-6f896a44f0ae.png Captured: 2026-10-22 05:20:27 UTC Source report: https://urlscan.io/result/01a1620d-9b20-77b8-9039-6f896a44f0ae/ SHA-256: 66251cac690e20fdf8946c62e7f4113d4a88b7ef58e6593419689430ef4124dc ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:55:13Z", "uuid": "01a1620d-a689-7160-89f4-a502554e2f0e", "scanned_at": "2026-10-22T05:20:38Z", "final_url": "https://aureviatradex-platform.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://aureviatradex-platform.com/", "from": "http://aureviatradex-platform.com/", "status": 307 } ], "ip": "104.21.20.162", "domains": [ "cdnjs.cloudflare.com", "cdn.jsdelivr.net", "fonts.gstatic.com", "modernroomdesigns.com", "static.cloudflareinsights.com", "fonts.googleapis.com" ], "ips": [ "172.67.222.66", "142.250.31.94", "104.16.80.73", "104.17.24.14", "104.17.207.5", "172.253.122.95", "104.21.20.162" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "9512b75da59cb1b24c9a5a19a4d4f589369846b62254f6021c783e26f34616f8", "script_hashes": [ "4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885", "e6dceff02b748c5e65495e6fce3bb60a3ce75b53f9ee0c57cd7c42f083846989", "e0d474a967169b7d786344ed8e8223714d42007e0447facc8880749bf1f949b6" ], "globals": [ "polylang", "_language", "_loader", "GEO_API_URL", "_phone_error", "_form_unknown_error", "_leadContactFocusInit", "_tp_intl_locale", "_tp_day_label_1", "_tp_day_label_n", "__offerChatWidgetMounted", "intlTelInput", "gsapVersions", "Linear", "Power0", "Quad", "Power1", "Cubic", "Power2", "Quart", "Power3", "Quint", "Power4", "Strong", "Elastic", "Bounce", "Expo", "Circ", "Sine", "Back", "SteppedEase", "TweenLite", "TweenMax", "TimelineMax", "TimelineLite", "AttrPlugin", "EndArrayPlugin", "RoundPropsPlugin", "ModifiersPlugin", "SnapPlugin" ], "cookies": [ "_subid", "csrftoken" ], "tls": { "san": [ "*.aureviatradex-platform.com", "aureviatradex-platform.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "aureviatradex-platform.com", "protocol": "QUIC", "valid_to": "2026-12-14T20:33:46Z", "valid_from": "2026-09-15T20:33:47Z" }, "domain_age_days": 154, "apex_age_days": 154, "tls_age_days": 36, "tls_valid_days": 89, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 90, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T05:58:05Z", "uuid": "3e7f5e2c-9cb4-4e26-81e0-32974c980cf4", "scanned_at": "2026-10-22T05:56:14Z", "final_url": "https://aureviatradex-platform.com/", "status": 200, "history": [ { "url": "https://aureviatradex-platform.com/", "status": 200 } ], "dom_hash": "559eca5e87953ec2dc9e8cd0239263f839688e2f8f0ba16b362dbebdc4653443", "doc_hash": "99d4202235ba4c1f0f2d4196cd127cc2621509a49605ee58d65e08c3d1eae0b5", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "aureviatradex-platform.com", "type": "A", "value": "188.114.96.0" }, { "name": "aureviatradex-platform.com", "type": "A", "value": "188.114.97.0" }, { "name": "aureviatradex-platform.com", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "aureviatradex-platform.com", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "188.114.96.0", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-05-20T16:57:30Z", "updated": "2026-05-20T17:24:33Z", "expires": "2027-05-20T16:57:30Z", "nameservers": [ "moura.ns.cloudflare.com", "romina.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T06:25:54Z", "analysis_at": "2026-10-17T11:45:34Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 12, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "DYNADOT LLC", "created": "2026-05-20T16:57:30Z", "expires": "2027-05-20T16:57:30Z", "updated": "2026-05-20T17:24:33Z", "first_seen": "2026-05-20T17:26:44Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:14a2" }, { "ttl": 300, "type": "A", "value": "104.21.20.162" }, { "ttl": 21600, "type": "NS", "value": "moura.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "romina.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "moura.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:c132" }, { "ttl": 300, "type": "A", "value": "172.67.193.50" } ], "dns_at": "2026-10-17T11:50:49Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.aureviatradex-platform.com", "aureviatradex-platform.com" ], "issuer": "Let's Encrypt / YE1", "serial": "6b7bed5590a1f85ce6a1e85ff94aabe88b6", "sha256": "d440f72e08c34ae6a64b6a8fe99a5e873bf04c2b16dd444672031522cd9f0dab", "subject": "aureviatradex-platform.com", "valid_to": "2026-12-14T20:33:46Z", "valid_from": "2026-09-15T20:33:47Z" }, "whois": { "registrar": "DYNADOT LLC", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-05-20T16:57:30Z", "updated": "2026-05-20T17:24:33Z", "expires": "2027-05-20T16:57:30Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "moura.ns.cloudflare.com", "romina.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-05-20T16:57:30Z", "last changed": "2026-05-20T17:24:33Z", "registration": "2026-05-20T16:57:30Z", "registrar expiration": "2027-05-20T16:57:30Z", "last update of RDAP database": "2026-10-16T07:08:26Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T05:58:19Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "aureviatradex-platform.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T05:18:15Z", "first": "2026-10-22T05:18:15Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 16711 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://aureviatradex-platform.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 10 }, "social_tags": { "ogUrl": "https://aureviatradex-platform.com/", "title": "Aurevia TradeX™ | Le site officiel et mis à jour【2026】", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://aureviatradex-platform.com/static/template_25/media/brand.svg", "ogTitle": "Aurevia TradeX™ | Le site officiel et mis à jour【2026】", "ogSiteName": "Aurevia TradeX", "themeColor": "#f8fbf7", "description": "Aurevia TradeX est une solution innovante de trading automatisé pour 2026. ✓ Algorithmes prédictifs IA ✓ Exécution", "twitterCard": "summary_large_image", "canonicalUrl": "https://aureviatradex-platform.com/", "ogDescription": "Aurevia TradeX est une solution innovante de trading automatisé pour 2026. ✓ Algorithmes prédictifs IA ✓ Exécution" }, "trackers": { "requests": 16, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js", "https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js", "https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/ScrollTrigger.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 27, "tls": 53, "wait": 502, "connect": 7, "download": 1 }, "response_ms": 590 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 59857, "co2_grams": 0.0022, "cleaner_than": 33 }, "dns_server": { "ns": [ { "ip": "108.162.195.217", "host": "moura.ns.cloudflare.com" }, { "ip": "162.159.38.159", "host": "romina.ns.cloudflare.com" } ], "zone": "aureviatradex-platform.com" }, "cookies": { "cookies": [ { "name": "_subid", "session": true }, { "name": "csrftoken", "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "aureviatradex-platform.com" }, "dns": { "A": [ "188.114.97.9", "188.114.96.9" ], "NS": [ "romina.ns.cloudflare.com", "moura.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"moura.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415939230, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::9", "2a06:98c1:3121::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::9", "family": 6 }, "redirects": { "chain": [ "https://aureviatradex-platform.com" ] }, "tech_stack": { "technologies": [ "Python", "Django", "GSAP", "jsDelivr", "Google Font API", "cdnjs", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-05-20T16:57:30Z", "updated": "2026-05-20T17:24:33Z", "expires": "2027-05-20T16:57:30Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "moura.ns.cloudflare.com", "romina.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } } } } ```