# PhishDestroy domain threat record: australfondania.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/australfondania.net/
Machine-readable companion: https://phishdestroy.io/domain/australfondania.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-22 05:17:10 UTC
- Stored record updated: 2026-10-22 09:32:50 UTC
- VirusTotal detections in the stored snapshot: 19/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-29 13:21:51 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a03779-f4c9-75b3-a42b-6e4d19621653/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/australfondania.net
- Certificate Transparency search: https://crt.sh/?q=%25.australfondania.net
- Web Archive lookup: https://web.archive.org/web/*/https://australfondania.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed australfondania.net on 2026-10-22 after its intake flagged the domain because VirusTotal reported 14 malicious and 5 suspicious detections. The recorded page title is “180+ Mercados Activos, Liderazgo Global — Austral Fondanía”. An HTTP 200 response was observed on the same check date, while a urlscan capture on 2026-08-25 showed a 404 status for the root URL.

How the scam works
The vendor labels applied to this domain (phishing, malicious, spam) typically correspond to deceptive pages that aim to harvest credentials or lure users into unsafe actions. Because the captured page only displayed a generic trading‑related title and no malicious forms or scripts were observed, the precise technique employed by this site cannot be confirmed.

Evidence
VirusTotal analysis on 2026-10-19 recorded 19 detections from 92 engines, with 14 classified as malicious and 5 as suspicious, including vendors such as BitDefender, ESET and Kaspersky. Google Safe Browsing checked on 2026-10-22 did not flag the domain. urlscan.io captured the site on 2026-08-25, reporting a 404 response, a malicious engine score of 89, but an overall non‑malicious verdict. OTX listed three pulses referencing the domain as of 2026-10-22. PhishDestroy’s internal blocklist marks the domain as blocked, while external blocklists showed zero hits on the same date.

Infrastructure
The domain was registered with Dynadot Inc on 2026-07-29 and carries a clientTransferProhibited status. The recorded DNS A record pointed to 158.94.210.119, an address associated with Omegatech LTD in the Netherlands. The site used a Let’s Encrypt certificate valid until 2026-11-25 and responded on ports 22, 80 and 443. DNS records include an A record for the recorded IP and NS records pointing to ns1.dyna-ns.net and ns2.dyna-ns.net. Cloudflare Radar observed a redirect from the domain to finsy8-ipsa93.sbs, but that target is a separate hostname.

What to do
Visitors should avoid entering any credentials, personal data or financial information on the site and, if they have already done so, change affected passwords and monitor accounts for unauthorized activity. Defenders should block australfondania.net at the network perimeter, add the recorded IP to threat‑intel feeds, and review logs for any connections to 158.94.210.119. No wallet‑related remediation is required because wallet recommendations are disabled for this listing.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a03779-f4c9-75b3-a42b-6e4d19621653/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8dd715fd-7a7b-45be-94da-0fc13131fd51
Stored capture screenshot: https://urlscan.io/screenshots/01a03779-f4c9-75b3-a42b-6e4d19621653.png
Cloudflare Radar screenshot (2026-10-22T05:22:05Z): https://screenshots.phishdestroy.io/cf/8dd715fd-7a7b-45be-94da-0fc13131fd51.png
VirusTotal report: https://www.virustotal.com/gui/domain/australfondania.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=australfondania.net
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 06:23:39 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a03779-f4c9-75b3-a42b-6e4d19621653.png
  Captured: 2026-10-22 05:17:10 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a03779-f4c9-75b3-a42b-6e4d19621653.png
  Source report: https://urlscan.io/result/01a03779-f4c9-75b3-a42b-6e4d19621653/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8dd715fd-7a7b-45be-94da-0fc13131fd51.png
  Captured: 2026-10-22 05:22:05 UTC
  Source report: https://radar.cloudflare.com/scan/8dd715fd-7a7b-45be-94da-0fc13131fd51
  SHA-256: dc65778409a3a26b6cfd888de0fa9c5a8d5c507ec495e44d841c799fedf224be

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T05:26:07Z",
        "uuid": "01a03779-f4c9-75b3-a42b-6e4d19621653",
        "scanned_at": "2026-08-25T05:52:23Z",
        "final_url": "http://australfondania.net/",
        "status": 404,
        "redirects": [
            {
                "to": "https://australfondania.net/",
                "from": "http://australfondania.net/",
                "status": 307
            },
            {
                "to": "http://australfondania.net/",
                "from": "https://australfondania.net/",
                "status": 307
            }
        ],
        "ip": "147.45.210.26",
        "ptr": "vm272632.it-garage.network",
        "domains": [
            "www.google.com"
        ],
        "ips": [
            "142.251.153.119",
            "147.45.210.26"
        ],
        "asns": [
            "15169",
            "206134"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "link_domains": [
            "www.google.com"
        ],
        "doc_hash": "23926e9185d8d43c02807a838ffb373cc1977726094a4e46807c66ada9dd7660",
        "domain_age_days": 26,
        "apex_age_days": 26,
        "requests": 4,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 89,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=UTF-8",
            "referrer-policy": "no-referrer"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T05:26:09Z",
        "uuid": "8dd715fd-7a7b-45be-94da-0fc13131fd51",
        "scanned_at": "2026-10-22T05:22:05Z",
        "final_url": "https://finsy8-ipsa93.sbs/",
        "status": 200,
        "history": [
            {
                "url": "https://australfondania.net/",
                "status": 200
            },
            {
                "url": "https://finsy8-ipsa93.sbs/",
                "status": 200
            }
        ],
        "dom_hash": "e65857970302c9dfaa62685806288df5c2c16deb6922006af407c3a224a5a8ae",
        "doc_hash": "f59ddd5a203afdae5280186dd7ef481fe2a8520c720e837016dc7ead579cfc15",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "finsy8-ipsa93.sbs",
                "type": "A",
                "value": "172.67.165.115"
            },
            {
                "name": "finsy8-ipsa93.sbs",
                "type": "A",
                "value": "104.21.57.184"
            },
            {
                "name": "finsy8-ipsa93.sbs",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:39b8"
            },
            {
                "name": "finsy8-ipsa93.sbs",
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:a573"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.165.115",
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-10-22T04:01:20Z",
            "updated": "2026-10-22T04:01:25Z",
            "expires": "2027-10-22T23:59:59Z",
            "nameservers": [
                "lilyana.ns.cloudflare.com",
                "rocky.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T06:21:53Z",
        "analysis_at": "2026-10-19T11:57:06Z",
        "stats": {
            "timeout": 0,
            "harmless": 42,
            "malicious": 14,
            "suspicious": 5,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "spam",
            "Netcraft": "malicious",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-07-29T15:21:51Z",
        "expires": "2027-07-29T15:21:51Z",
        "updated": "2026-08-13T12:30:51Z",
        "first_seen": "2026-07-29T15:52:10Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.australfondania.net",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-19T12:02:52Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "australfondania.net"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5e868b936a64b73f6ceda201820f3ee997f",
            "sha256": "5665bdb1053bde76b899a117e976a6e152abb544b3b536e781644b24869efa77",
            "subject": "australfondania.net",
            "valid_to": "2026-11-25T19:00:58Z",
            "valid_from": "2026-08-27T19:00:59Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-07-29T15:21:51Z",
            "updated": "2026-08-13T12:30:51Z",
            "expires": "2027-07-29T15:21:51Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-29T15:21:51Z",
                "last changed": "2026-08-27T19:53:11Z",
                "registration": "2026-07-29T15:21:51Z",
                "registrar expiration": "2027-07-29T15:21:51Z",
                "last update of RDAP database": "2026-10-14T00:26:24Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T05:26:21Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "australfondania.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://australfondania.net/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "180+ Mercados Activos, Liderazgo Global — Austral Fondanía",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Austral Fondanía es una plataforma de trading algorítmico que orquesta ecosistemas de alto impacto y escala operaciones en mercados globales para inversores visionarios.",
            "canonicalUrl": "https://australfondania.net/"
        },
        "trackers": {
            "requests": 5
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 448,
                "tls": 85,
                "wait": 110,
                "connect": 66,
                "download": 135
            },
            "response_ms": 844
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 92753,
            "co2_grams": 0.0034,
            "cleaner_than": 24
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "australfondania.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "connect.sid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "australfondania.net"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.australfondania.net\", \"serial\": 2026082701, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://australfondania.net"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Tailwind CSS",
                "jQuery",
                "Priority Hints",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 25
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-29T15:21:51Z",
            "updated": "2026-08-13T12:30:51Z",
            "expires": "2027-07-29T15:21:51Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```