# PhishDestroy domain threat record: auvrikensolmireth.click

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/auvrikensolmireth.click/
Machine-readable companion: https://phishdestroy.io/domain/auvrikensolmireth.click/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 05:18:47 UTC
- Last availability or vendor check: 2026-10-22 05:50:59 UTC
- Stored record updated: 2026-10-22 06:30:31 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.35.167
- Registrar in stored WHOIS data: Dynadot, LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-19 11:35:59 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16227-c923-749e-ad33-6b92f0e6110a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/auvrikensolmireth.click
- Certificate Transparency search: https://crt.sh/?q=%25.auvrikensolmireth.click
- Web Archive lookup: https://web.archive.org/web/*/https://auvrikensolmireth.click/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed auvrikensolmireth.click as a suspicious domain based on multiple security‑vendor detections. The domain was first observed by PhishDestroy on 2026-10-22 when it was added to the internal blocklist and an HTTP 200 response was recorded. The recorded page title was “Auvriken Solmireth | AI Trading Platform | Official Website”.

How the scam works
The current evidence does not confirm a specific fraud mechanism; the domain is flagged because it matches patterns commonly used by phishing, malware distribution, or fraudulent trading platforms. Such pages typically claim AI‑driven trading services to entice visitors into providing credentials, personal data, or payments, but no concrete malicious behavior was observed on the captured page.

Evidence
VirusTotal (analysis on 2026-10-21) returned 13 malicious and 3 suspicious detections from 92 engines, including phishing labels from BitDefender, Fortinet and others. Google Safe Browsing (checked 2026-10-22) reported no flag. urlscan.io (capture on 2026-08-12) gave a clean overall verdict, though its engine flagged the site as malicious. Cloudflare Radar (checked 2026-10-22) classified the domain as malicious with a malware risk tag. OTX listed one pulse referencing the domain (checked 2026-10-22). PhishDestroy’s internal blocklist marks the domain as blocked, while external blocklists showed zero hits on the check date.

Infrastructure
The domain was registered with Dynadot on 2026-07-19 and was protected by Cloudflare’s CDN, resolving to IPv4 172.67.177.173 (and 104.21.35.167) and IPv6 2606:4700:3036::6815:23a7. TLS 1.3 was used with a certificate issued by Google Trust Services, valid until 2026-12-16. No DNSSEC was present.

What to do
Avoid entering any credentials, payment information or personal data on the site. If such data was submitted, change associated passwords and monitor accounts for suspicious activity. Network defenders should block the domain at the perimeter and review logs for any connections.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019ff4b7-a64c-727f-8125-fd59b4f6808e/
Cloudflare Radar report: https://radar.cloudflare.com/scan/d6d3803a-e59e-461e-b787-337c1491d303
Stored capture screenshot: https://urlscan.io/screenshots/019ff4b7-a64c-727f-8125-fd59b4f6808e.png
Cloudflare Radar screenshot (2026-10-22T05:21:39Z): https://screenshots.phishdestroy.io/cf/d6d3803a-e59e-461e-b787-337c1491d303.png
URLScan screenshot (2026-08-11T20:45:32Z): https://screenshots.phishdestroy.io/us/019ff292-acb0-76db-8baf-e6f85b16e67a.png
URLScan capture report: https://urlscan.io/result/019ff292-acb0-76db-8baf-e6f85b16e67a/
VirusTotal report: https://www.virustotal.com/gui/domain/auvrikensolmireth.click
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=auvrikensolmireth.click
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 05:24:25 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16227-c923-749e-ad33-6b92f0e6110a.png
  Captured: 2026-10-22 05:50:59 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019ff4b7-a64c-727f-8125-fd59b4f6808e.png
  Captured: 2026-10-22 05:18:47 UTC
  Source report: https://urlscan.io/result/01a16227-c923-749e-ad33-6b92f0e6110a/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d6d3803a-e59e-461e-b787-337c1491d303.png
  Captured: 2026-10-22 05:21:39 UTC
  Source report: https://radar.cloudflare.com/scan/d6d3803a-e59e-461e-b787-337c1491d303
  SHA-256: f8f51dce12f5e6a5b708e1e2ae01ab65046ba056853bb1719d868d4099aa7663
- URLQuery: https://screenshots.phishdestroy.io/uq/207e50f7-dab1-4c8d-8f1a-65b9ae3a1491.png
  Source report: https://urlquery.net/report/207e50f7-dab1-4c8d-8f1a-65b9ae3a1491
  SHA-256: f3448a5379b2cca9f47c38663c7f11df87c03ed6c4e03d40d5927d32229af4fc
- URLScan · 2026-08-11: https://screenshots.phishdestroy.io/us/019ff292-acb0-76db-8baf-e6f85b16e67a.png
  Captured: 2026-08-11 20:45:32 UTC
  Source report: https://urlscan.io/result/019ff292-acb0-76db-8baf-e6f85b16e67a/
  SHA-256: 0e0a4103af0c58f182e3dad5adb1e4932b2af4ca805463085851b970f67429dc
- URLScan · 2026-08-12: https://screenshots.phishdestroy.io/us/019ff4b7-a64c-727f-8125-fd59b4f6808e.png
  Captured: 2026-08-12 06:45:09 UTC
  Source report: https://urlscan.io/result/019ff4b7-a64c-727f-8125-fd59b4f6808e/
  SHA-256: 3ac2eb8ceb6baeb0c4eaae0308be08b463cb5f7cfdfc29df80a49049870121dc
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1621a-b6d2-757b-a692-81cce3ef2387.png
  Captured: 2026-10-22 05:34:50 UTC
  Source report: https://urlscan.io/result/01a1621a-b6d2-757b-a692-81cce3ef2387/
  SHA-256: 8e9cc9db8c0345a9300ef6194b76a3d0695720b3314b14516a6a225cf42e5a33
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16220-ca53-7563-bcae-346c5c7fc101.png
  Captured: 2026-10-22 05:41:29 UTC
  Source report: https://urlscan.io/result/01a16220-ca53-7563-bcae-346c5c7fc101/
  SHA-256: 1dd70a0c8754e8a4438cc53bb4cb38126d21e98f9aafad866733507bc847c57e
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16229-60c5-7329-99ae-b2534b990fd8.png
  Captured: 2026-10-22 05:50:52 UTC
  Source report: https://urlscan.io/result/01a16229-60c5-7329-99ae-b2534b990fd8/
  SHA-256: 7373114830faa9a70521c56d42d2b4758249c6f69770ad2ac8fd9dcc53b86b7f

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T05:55:12Z",
        "uuid": "01a16227-c923-749e-ad33-6b92f0e6110a",
        "scanned_at": "2026-10-22T05:49:09Z",
        "final_url": "https://auvrikensolmireth.click/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://auvrikensolmireth.click/",
                "from": "http://auvrikensolmireth.click/",
                "status": 307
            }
        ],
        "ip": "104.21.35.167",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "104.18.95.41",
            "104.17.208.5",
            "142.251.211.202",
            "104.17.24.14",
            "104.21.35.167"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "c42e05a168211e8aaa363d9c99a60e2e4fa3595bc341f9b876748c024f707b00",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_j0c9rmm",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "auvrikensolmireth.click"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "auvrikensolmireth.click",
            "protocol": "QUIC",
            "valid_to": "2026-12-16T06:33:57Z",
            "valid_from": "2026-09-17T05:34:02Z"
        },
        "domain_age_days": 94,
        "apex_age_days": 94,
        "tls_age_days": 35,
        "tls_valid_days": 90,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
            "content-security-policy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T05:23:48Z",
        "uuid": "d6d3803a-e59e-461e-b787-337c1491d303",
        "scanned_at": "2026-10-22T05:21:39Z",
        "final_url": "https://auvrikensolmireth.click/",
        "status": 200,
        "history": [
            {
                "url": "https://auvrikensolmireth.click/",
                "status": 200
            }
        ],
        "dom_hash": "dbf75d6a934c740328de4f3c83855cd0674b554d5b0ebbff062fc7d6904c15cd",
        "doc_hash": "359652416c7042204d1df62950198e766fd9d5124e0286f5a9dd8b2a48057609",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "auvrikensolmireth.click",
                "type": "A",
                "value": "104.21.35.167"
            },
            {
                "name": "auvrikensolmireth.click",
                "type": "A",
                "value": "172.67.177.173"
            },
            {
                "name": "auvrikensolmireth.click",
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:b1ad"
            },
            {
                "name": "auvrikensolmireth.click",
                "type": "AAAA",
                "value": "2606:4700:3036::6815:23a7"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.35.167",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot, LLC",
            "created": "2026-07-19T13:35:58Z",
            "updated": "2026-07-24T13:36:56Z",
            "expires": "2027-07-19T13:35:58Z",
            "nameservers": [
                "adrian.ns.cloudflare.com",
                "titan.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T05:20:48Z",
        "analysis_at": "2026-10-21T18:05:41Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot, LLC",
        "created": "2026-07-19T13:35:58Z",
        "expires": "2027-07-19T13:35:58Z",
        "updated": "2026-07-24T13:36:56Z",
        "first_seen": "2026-07-19T15:10:37Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.35.167"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:b1ad"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "adrian.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::6815:23a7"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "adrian.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "titan.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.177.173"
            }
        ],
        "dns_at": "2026-10-21T18:12:03Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "auvrikensolmireth.click"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "3db988412d409e1b0e69233b8f0fc2eb",
            "sha256": "6cedbe8796eb2059bfcbe32b074558f1031dc989cd720528a90e0b99d856291d",
            "subject": "auvrikensolmireth.click",
            "valid_to": "2026-12-16T06:33:57Z",
            "valid_from": "2026-09-17T05:34:02Z"
        },
        "whois": {
            "registrar": "Dynadot, LLC",
            "registrar_iana_id": "472",
            "registrar_url": "www.dynadot.com",
            "created": "2026-07-19T13:35:58Z",
            "updated": "2026-07-24T13:36:56Z",
            "expires": "2027-07-19T13:35:58Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "adrian.ns.cloudflare.com",
                "titan.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-19T13:35:58Z",
                "last changed": "2026-07-19T17:02:41Z",
                "registration": "2026-07-19T13:35:58Z",
                "registrar expiration": "2027-07-19T13:35:58Z",
                "last update of RDAP database": "2026-10-16T07:25:02Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T05:24:05Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "auvrikensolmireth.click"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://auvrikensolmireth.click/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "title": "Auvriken Solmireth | AI Trading Platform | Official Website",
            "robots": "index, follow",
            "themeColor": "#0f0f1a",
            "description": "Auvriken Solmireth delivers a premium overview of automated trading bots and AI-assisted trading support, spotlighting workflow, controls, and execution patterns for decisive action.",
            "canonicalUrl": "https://auvrikensolmireth.click/"
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 3,
                "tls": 25,
                "wait": 111,
                "connect": 6,
                "download": 23
            },
            "response_ms": 168
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 141487,
            "co2_grams": 0.0052,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.93",
                    "host": "titan.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.57",
                    "host": "adrian.ns.cloudflare.com"
                }
            ],
            "zone": "auvrikensolmireth.click"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3037::ac43:b1ad",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "auvrikensolmireth.click"
        },
        "dns": {
            "A": [
                "104.21.35.167",
                "172.67.177.173"
            ],
            "NS": [
                "adrian.ns.cloudflare.com",
                "titan.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"adrian.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418085887, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3037::ac43:b1ad",
                "2606:4700:3036::6815:23a7"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=15552000; includeSubDomains; preload",
            "message": "HSTS max-age is 15552000, below the 31536000 minimum."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; default-src 'self'; con",
            "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3037::ac43:b1ad",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://auvrikensolmireth.click"
            ]
        },
        "tech_stack": {
            "technologies": [
                "jsDelivr",
                "Cloudflare Turnstile",
                "Cloudflare Rocket Loader",
                "ClientJS",
                "Priority Hints",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 12
        },
        "whois": {
            "registrar": "Dynadot, LLC",
            "created": "2026-07-19T13:35:58Z",
            "updated": "2026-07-24T13:36:56Z",
            "expires": "2027-07-19T13:35:58Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "adrian.ns.cloudflare.com",
                "titan.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
                "content-security-policy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-i",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```