# PhishDestroy domain threat record: aureviatradextrade.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/aureviatradextrade.com/ Machine-readable companion: https://phishdestroy.io/domain/aureviatradextrade.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:22:25 UTC - Last availability or vendor check: 2026-10-22 05:22:25 UTC - Stored record updated: 2026-10-22 08:27:03 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-24 13:56:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1620d-a686-71dc-a1b4-c489f65b21a1/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/aureviatradextrade.com - Certificate Transparency search: https://crt.sh/?q=%25.aureviatradextrade.com - Web Archive lookup: https://web.archive.org/web/*/https://aureviatradextrade.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added aureviatradextrade.com to its internal blocklist on 2026-10-22, classifying it as a suspicious domain. The recorded page title was “Aurevia TradeX | Plateforme Officielle de Trading IA” and the HTTP response recorded on that date was 200. Google Safe Browsing checked on 2026-10-22 reported no warning. Spamhaus DBL listed the domain as spam on the same day. How the scam works The detections align with typical fraudulent‑trading or phishing schemes where attackers present a fake investment platform to lure users into disclosing credentials, personal data, or funds. No specific malicious functionality was observed on the page itself; the risk is inferred from the aggregate vendor flags and blocklist listings. Evidence VirusTotal analysis on 2026-10-21 reported 11 malicious and 4 suspicious detections from 92 engines, totaling 15 detections. Cloudflare Radar capture on 2026-10-22 labeled the URL as phishing and malware. urlscan.io recorded a malicious engine score of 97 on 2026-10-22. Spamhaus DBL listed the domain as spam on 2026-10-22. OTX showed the domain mentioned in 5 pulses as of 2026-10-22. PhishDestroy internal blocklist entry was created on 2026-10-22. Google Safe Browsing checked on 2026-10-22 returned no flag. Infrastructure The domain registration was recorded on 2026-03-24 through Dynadot Inc. The recorded A record pointed to IP 158.94.210.119, which the RDAP data associated with Omegatech LTD in the Netherlands. TLS was issued by Let’s Encrypt, valid from 2026-09-08 to 2026-12-07, and the site used modern TLS 1.3 cipher suites. What to do Visitors should avoid entering any credentials, personal data, or financial information on this site; if such data was submitted, change affected passwords and monitor accounts for unauthorized activity. Defenders should block the exact domain aureviatradextrade.com in network filters and review logs for any connections to that hostname. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1620d-a686-71dc-a1b4-c489f65b21a1/ Cloudflare Radar report: https://radar.cloudflare.com/scan/e9a6fe5c-29fc-419f-b009-d6030c4e0cec URLQuery report: https://urlquery.net/report/93c1b93f-73c1-4e50-9ee8-2e815c1b4aa5 Stored capture screenshot: https://urlscan.io/screenshots/01a1620d-a686-71dc-a1b4-c489f65b21a1.png Cloudflare Radar screenshot (2026-10-22T05:56:03Z): https://screenshots.phishdestroy.io/cf/e9a6fe5c-29fc-419f-b009-d6030c4e0cec.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/93c1b93f-73c1-4e50-9ee8-2e815c1b4aa5.png URLScan screenshot (2026-08-21T15:15:38Z): https://screenshots.phishdestroy.io/us/01a024e4-36aa-7089-85b9-fd0a56399f78.png URLScan capture report: https://urlscan.io/result/01a024e4-36aa-7089-85b9-fd0a56399f78/ URLScan screenshot (2026-08-22T05:45:46Z): https://screenshots.phishdestroy.io/us/01a02800-da3f-7354-a0a2-93f8a8c973ea.png URLScan capture report: https://urlscan.io/result/01a02800-da3f-7354-a0a2-93f8a8c973ea/ URLScan screenshot (2026-10-22T05:20:20Z): https://screenshots.phishdestroy.io/us/01a1620d-7ce0-7669-98df-fb198308d437.png URLScan capture report: https://urlscan.io/result/01a1620d-7ce0-7669-98df-fb198308d437/ VirusTotal report: https://www.virustotal.com/gui/domain/aureviatradextrade.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aureviatradextrade.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 08:26:47 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1620d-a686-71dc-a1b4-c489f65b21a1.png Captured: 2026-10-22 05:22:25 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1620d-a686-71dc-a1b4-c489f65b21a1.png Captured: 2026-10-22 05:22:25 UTC Source report: https://urlscan.io/result/01a1620d-a686-71dc-a1b4-c489f65b21a1/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e9a6fe5c-29fc-419f-b009-d6030c4e0cec.png Captured: 2026-10-22 05:56:03 UTC Source report: https://radar.cloudflare.com/scan/e9a6fe5c-29fc-419f-b009-d6030c4e0cec SHA-256: 78f600e3885fe78bdb69080032266fc79ffa010bbbfde84b685b36663d429a32 - URLQuery: https://screenshots.phishdestroy.io/uq/93c1b93f-73c1-4e50-9ee8-2e815c1b4aa5.png Source report: https://urlquery.net/report/93c1b93f-73c1-4e50-9ee8-2e815c1b4aa5 SHA-256: ebd072a9faf215a375a0f06e414b78e98704e184691e6f0232ed3884a3461779 - URLScan · 2026-08-21: https://screenshots.phishdestroy.io/us/01a024e4-36aa-7089-85b9-fd0a56399f78.png Captured: 2026-08-21 15:15:38 UTC Source report: https://urlscan.io/result/01a024e4-36aa-7089-85b9-fd0a56399f78/ SHA-256: 0cc9fd864ed26bd8f1d6a1df9e6108d47a271e48a7fe6c64b013c120557f045f - URLScan · 2026-08-22: https://screenshots.phishdestroy.io/us/01a02800-da3f-7354-a0a2-93f8a8c973ea.png Captured: 2026-08-22 05:45:46 UTC Source report: https://urlscan.io/result/01a02800-da3f-7354-a0a2-93f8a8c973ea/ SHA-256: 0cc9fd864ed26bd8f1d6a1df9e6108d47a271e48a7fe6c64b013c120557f045f - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1620d-7ce0-7669-98df-fb198308d437.png Captured: 2026-10-22 05:20:20 UTC Source report: https://urlscan.io/result/01a1620d-7ce0-7669-98df-fb198308d437/ SHA-256: 4fec45f9b26e5d6040ff4fe7c5a988ba0bd9842ab00ffdf8b71ae5fe90e1fc74 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:55:11Z", "uuid": "01a1620d-a686-71dc-a1b4-c489f65b21a1", "scanned_at": "2026-10-22T05:20:30Z", "final_url": "https://aureviatradextrade.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://aureviatradextrade.com/", "from": "http://aureviatradextrade.com/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "d2e6767d657370716cd049e5316e49025101fb4056019c5e06371df62d4eae20", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput", "navToggle", "navWrapper", "langBtn", "langDropdown" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "*.aureviatradextrade.com", "aureviatradextrade.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "aureviatradextrade.com", "protocol": "TLS 1.3", "valid_to": "2026-12-07T16:53:49Z", "valid_from": "2026-09-08T16:53:50Z" }, "domain_age_days": 211, "apex_age_days": 211, "tls_age_days": 43, "tls_valid_days": 89, "requests": 5, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T05:57:03Z", "uuid": "e9a6fe5c-29fc-419f-b009-d6030c4e0cec", "scanned_at": "2026-10-22T05:56:03Z", "final_url": "https://aureviatradextrade.com/", "status": 200, "history": [ { "url": "https://aureviatradextrade.com/", "status": 200 } ], "dom_hash": "d2d28e725cdb7eb1aa41d8adee0c5bf51470fdb4fbcc4e8e7454ea5f6e0be981", "doc_hash": "5c6bdfdf6e964d5b5d6d784a73a90b0b72e5b8bb41ab650d9004511c20b8f7a2", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "Scam", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "aureviatradextrade.com", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-03-24T14:56:34Z", "updated": "2026-08-13T12:44:26Z", "expires": "2027-03-24T14:56:34Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T08:26:15Z", "analysis_at": "2026-10-21T07:58:12Z", "stats": { "timeout": 0, "harmless": 47, "malicious": 11, "suspicious": 4, "undetected": 30 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "spam", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-03-24T00:00:00Z", "updated": "2026-04-20T00:00:00Z", "first_seen": "2026-03-24T15:55:39Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.aureviatradextrade.com", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-21T08:03:35Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "*.aureviatradextrade.com", "aureviatradextrade.com" ], "issuer": "Let's Encrypt / YE2", "serial": "53ec18950b68b9cb1a27979f85f77f09854", "sha256": "ab0ab759b2ee9ad677803f4f373538e8db308f7a8d30f5b9e5fa9b73caf66c0f", "subject": "aureviatradextrade.com", "valid_to": "2026-12-07T16:53:49Z", "valid_from": "2026-09-08T16:53:50Z" }, "whois": [], "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-03-24T14:56:34Z", "last changed": "2026-09-08T17:52:34Z", "registration": "2026-03-24T14:56:34Z", "registrar expiration": "2027-03-24T14:56:34Z", "last update of RDAP database": "2026-10-15T07:44:28Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T05:57:16Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "aureviatradextrade.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T05:25:05Z", "first": "2026-10-22T05:25:05Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 23209 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://aureviatradextrade.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Aurevia TradeX | Plateforme Officielle de Trading IA", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Aurevia TradeX : votre allié de confiance pour investir en crypto. Outils IA avancés, courtiers connectés, actifs numériques sécurisés et formation trading pratique. ⭐⭐⭐⭐⭐", "canonicalUrl": "https://aureviatradextrade.com/" }, "trackers": { "requests": 5 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 304, "tls": 80, "wait": 101, "connect": 68, "download": 135 }, "response_ms": 688 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 89482, "co2_grams": 0.0033, "cleaner_than": 24 }, "dns_server": { "ns": [ { "ip": "162.159.24.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.26.92", "host": "ns1.dyna-ns.net" } ], "zone": "aureviatradextrade.com" }, "cookies": { "cookies": [ { "name": "connect.sid", "secure": true, "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "aureviatradextrade.com" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.aureviatradextrade.com\", \"serial\": 2026090803, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://aureviatradextrade.com" ] }, "tech_stack": { "technologies": [ "Tailwind CSS", "jQuery", "Priority Hints", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 29 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-03-24T14:56:34Z", "updated": "2026-08-13T12:44:26Z", "expires": "2027-03-24T14:56:34Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```