# PhishDestroy domain threat record: avalabs.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/avalabs.digital/
Machine-readable companion: https://phishdestroy.io/domain/avalabs.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 11:41:50 UTC
- Last availability or vendor check: 2026-10-26 11:41:50 UTC
- Stored record updated: 2026-10-26 20:18:22 UTC
- VirusTotal detections in the stored snapshot: 4/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 74.81.40.236
- Registrar in stored WHOIS data: Squarespace Domains II LLC
- Last stored HTTP status: 301
- Registration date in stored WHOIS data: 2026-09-21 22:28:42 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17803-6eec-7133-882d-9d9ace69c3d3/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/avalabs.digital
- Certificate Transparency search: https://crt.sh/?q=%25.avalabs.digital
- Web Archive lookup: https://web.archive.org/web/*/https://avalabs.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot shows a dark-themed English landing page branded Avalabs digital, presenting an AI-powered executive hiring platform with a Start Free Trial button, a How It Works button, a Request Access button, a Sign In link and social-proof statistics. PhishDestroy listed the domain as a threat after intake on 2026-10-26, and PhishDestroy first saw it on 2026-10-26.

How the scam works
As a category risk, this kind of landing page funnels visitors into a free-trial or request-access sign-up flow that can capture business email addresses, names and passwords while the visitor believes they are evaluating a legitimate SaaS product. The polished marketing copy, trust badge and performance statistics are the lure used to lower suspicion before any submission.

Evidence
The screenshot shows the headline Discover Exceptional Talent Before They Join, a Trusted by 500+ Leading Companies badge, Start Free Trial and How It Works buttons, and statistics of 500+, 50K+, 72% and 98%. urlscan rated the scan malicious with an engine score of 91 on 2026-10-26, while VirusTotal flagged the domain as malicious with CRDF and Webroot among the labelling vendors, and MetaMask, SEAL and PhishDestroy's own blocklist listed it; Google Safe Browsing and Spamhaus did not flag it, all checked 2026-10-26, and OTX recorded 4 pulses. The capture followed a two-hop redirect chain from the apex to the www host of the same domain. Site inspection shows a Next.js application with Google Fonts as the only tracked resource and 10 distinct script SHA256 hashes recorded for campaign pivoting, one beginning 38ee7b1ca61a.

Infrastructure
Registered 2026-09-22 through Squarespace Domains II LLC and recorded at a hosting address captured on 2026-10-26, with no CDN or WAF identified and a server header of nginx/1.18.0 (Ubuntu) alongside Next.js. TLS 1.3, TLS_AES_256_GCM_SHA384, forward secrecy, ALPN h2; CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, COEP and CORP all absent; SPF, DKIM and DMARC configured; CAA records present; DNSSEC signed.

What to do
If you submitted information through the captured page, change your password on the genuine service you logged into and enable two-factor authentication, and treat messages originating from this domain as untrusted. Defenders should block avalabs.digital, hunt the recorded script hashes and redirect chain, and monitor for newly observed subdomains of avalabs.digital.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17803-6eec-7133-882d-9d9ace69c3d3/
Cloudflare Radar report: https://radar.cloudflare.com/scan/1efbde24-0652-4f78-b82b-81c90f6098b4
URLQuery report: https://urlquery.net/report/dc8954fa-02fd-47e0-8a8f-96aa510223a9
Stored capture screenshot: https://i.ibb.co/jvt4bNh0/ec9156d09843.png
Cloudflare Radar screenshot (2026-10-26T12:14:09Z): https://screenshots.phishdestroy.io/cf/1efbde24-0652-4f78-b82b-81c90f6098b4.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/dc8954fa-02fd-47e0-8a8f-96aa510223a9.png
URLScan screenshot (2026-10-16T07:35:46Z): https://screenshots.phishdestroy.io/us/01a143a3-4ca5-7001-b146-2b7384539c35.png
URLScan capture report: https://urlscan.io/result/01a143a3-4ca5-7001-b146-2b7384539c35/
URLScan screenshot (2026-10-16T10:38:08Z): https://screenshots.phishdestroy.io/us/01a1444a-3d90-7558-ba57-2718084c019f.png
URLScan capture report: https://urlscan.io/result/01a1444a-3d90-7558-ba57-2718084c019f/
URLScan screenshot (2026-10-20T19:58:12Z): https://screenshots.phishdestroy.io/us/01a15ae4-7999-71d4-9454-8f3b7566396b.png
URLScan capture report: https://urlscan.io/result/01a15ae4-7999-71d4-9454-8f3b7566396b/
URLScan screenshot (2026-10-26T11:43:54Z): https://screenshots.phishdestroy.io/us/01a17806-1308-72bf-b772-de30db58d528.png
URLScan capture report: https://urlscan.io/result/01a17806-1308-72bf-b772-de30db58d528/
VirusTotal report: https://www.virustotal.com/gui/domain/avalabs.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=avalabs.digital
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:18:22 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/jvt4bNh0/ec9156d09843.png
  Captured: 2026-10-26 11:41:50 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17803-6eec-7133-882d-9d9ace69c3d3.png
  Captured: 2026-10-26 11:41:50 UTC
  Source report: https://urlscan.io/result/01a17803-6eec-7133-882d-9d9ace69c3d3/
- URLScan · 2026-10-16: https://screenshots.phishdestroy.io/us/01a143a3-4ca5-7001-b146-2b7384539c35.png
  Captured: 2026-10-16 07:35:46 UTC
  Source report: https://urlscan.io/result/01a143a3-4ca5-7001-b146-2b7384539c35/
  SHA-256: 76e8cb4277060cf137cbf47279a1fb27238ceb1d1f0b69b389f1782f0b75ab9a
- URLScan · 2026-10-16: https://screenshots.phishdestroy.io/us/01a1444a-3d90-7558-ba57-2718084c019f.png
  Captured: 2026-10-16 10:38:08 UTC
  Source report: https://urlscan.io/result/01a1444a-3d90-7558-ba57-2718084c019f/
  SHA-256: f7ba52dbf2e8b4d8854d5f2b00cf873345fbe8c6a354597bd4876a618758c3fa
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15ae4-7999-71d4-9454-8f3b7566396b.png
  Captured: 2026-10-20 19:58:12 UTC
  Source report: https://urlscan.io/result/01a15ae4-7999-71d4-9454-8f3b7566396b/
  SHA-256: bd07e643f096954707e5881a88aea85f000f310303fe615e8b0b561fc1ded318
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17806-1308-72bf-b772-de30db58d528.png
  Captured: 2026-10-26 11:43:54 UTC
  Source report: https://urlscan.io/result/01a17806-1308-72bf-b772-de30db58d528/
  SHA-256: 67732dd85d69df15cd42f9e9bd94695c159b51ddb8ba83523ec29c6dc6240eb8
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1efbde24-0652-4f78-b82b-81c90f6098b4.png
  Captured: 2026-10-26 12:14:09 UTC
  Source report: https://radar.cloudflare.com/scan/1efbde24-0652-4f78-b82b-81c90f6098b4
  SHA-256: b5e2240d33aa60b423c7ce9bd391f7705da7ce05461118542b4fa7fde7536929
- URLQuery: https://screenshots.phishdestroy.io/uq/dc8954fa-02fd-47e0-8a8f-96aa510223a9.png
  Source report: https://urlquery.net/report/dc8954fa-02fd-47e0-8a8f-96aa510223a9
  SHA-256: 45629f3e828b44303a69e8c508f7fd920ae6a138aa5f2585a5d63bf5a5bcf5c6

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T11:59:05Z",
        "uuid": "01a17803-6eec-7133-882d-9d9ace69c3d3",
        "scanned_at": "2026-10-26T11:41:00Z",
        "final_url": "https://www.avalabs.digital/",
        "status": 200,
        "redirected": "parent-domain",
        "redirects": [
            {
                "to": "https://avalabs.digital/",
                "from": "http://avalabs.digital/",
                "status": 307
            },
            {
                "to": "https://www.avalabs.digital/",
                "from": "https://avalabs.digital/",
                "status": 301
            }
        ],
        "ip": "74.81.40.236",
        "domains": [
            "fonts.googleapis.com",
            "avalabs.digital"
        ],
        "ips": [
            "2a00:1450:4001:c0f::5f",
            "74.81.40.236"
        ],
        "asns": [
            "15169",
            "22439"
        ],
        "countries": [
            "DE",
            "US"
        ],
        "doc_hash": "529bd9661a261c20db1d9b8361b40aef36c92c2660412e22c17f6e3d96fa0ee1",
        "script_hashes": [
            "38ee7b1ca61ad73b5dc0e4921c132d7e12904a0973d6bb931d8ec74cedf44381",
            "56dc43117a7af2ec34f46020ef3e0787e38991bc503e95ccdfffb147f17d058e",
            "49071491a827219036537007b10bc405f4e667075bd454daffe809628ccf8f2a",
            "ca0f0a041492a92825e433c27560f87954008b0ec9e8eb0c770e4d7269471d9f",
            "5b95930050375e82a50152462bf86d6252c1106414210518b2dbb46c477fee09",
            "61f0fcc72a54c882ecb79fb33b52146aba83093b6e16209bbf5113cea06ccbe7",
            "7e4952b3e34e89bfaea810659e093aaecff33b1a8489d3b7501fc8fdda3064da",
            "97f35c1ad692bbb44c1c83ce8c339247c5b946b1d75334dff38e02d3c2b8feba",
            "e5425b02bf364fbac9b7c595cb308f90fff940986c664bf80a2cb10fd46391fd",
            "846cc6e5d737899f43fcb147c8dd615a0202229682712367499a37a50ba2b083"
        ],
        "globals": [
            "webpackChunk_N_E",
            "__next_f",
            "next",
            "_N_E",
            "__SOCKET_IO__"
        ],
        "tls": {
            "san": [
                "avalabs.digital",
                "www.avalabs.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR1",
            "subject": "avalabs.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-24T14:36:14Z",
            "valid_from": "2026-09-25T14:36:15Z"
        },
        "domain_age_days": 34,
        "apex_age_days": 34,
        "tls_age_days": 30,
        "tls_valid_days": 89,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 91,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx/1.18.0 (Ubuntu)",
            "content-type": "text/html; charset=utf-8",
            "x-powered-by": "Next.js"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T12:15:21Z",
        "uuid": "1efbde24-0652-4f78-b82b-81c90f6098b4",
        "scanned_at": "2026-10-26T12:14:09Z",
        "final_url": "https://www.avalabs.digital/",
        "status": 200,
        "redirected": "subdomain",
        "history": [
            {
                "url": "https://avalabs.digital/",
                "status": 301
            },
            {
                "url": "https://www.avalabs.digital/",
                "status": 200
            }
        ],
        "dom_hash": "fc762ecee98700a9edefa5401227f393b95e2b788a399774cd83d7b9ca08ab1d",
        "doc_hash": "529bd9661a261c20db1d9b8361b40aef36c92c2660412e22c17f6e3d96fa0ee1",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "avalabs.digital",
                "type": "A",
                "value": "74.81.40.236"
            },
            {
                "name": "www.avalabs.digital",
                "type": "CNAME",
                "value": "avalabs.digital"
            },
            {
                "name": "avalabs.digital",
                "type": "A",
                "value": "74.81.40.236"
            },
            {
                "name": "www.avalabs.digital",
                "type": "CNAME",
                "value": "avalabs.digital"
            }
        ],
        "dnssec_valid": true,
        "ip": "74.81.40.236",
        "whois": {
            "registrar": "Squarespace Domains II LLC",
            "created": "2026-09-22T00:28:42Z",
            "updated": "2026-09-27T00:29:38Z",
            "expires": "2027-09-22T00:28:42Z",
            "nameservers": [
                "nse1.squarespacedns.com",
                "nse2.squarespacedns.com",
                "nse3.squarespacedns.com",
                "nse4.squarespacedns.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T12:42:58Z",
        "analysis_at": "2026-10-26T03:40:15Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 2,
            "suspicious": 2,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "Webroot": "malicious",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "suspicious"
        },
        "reputation": 0,
        "first_seen": "2026-09-22T01:03:12Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nse4.squarespacedns.com"
            },
            {
                "ttl": 1800,
                "type": "A",
                "value": "74.81.40.236"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "aspmx.l.google.com",
                "priority": 1
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nse2.squarespacedns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nse1.squarespacedns.com"
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "google-site-verification=lhZsZoLsPphOOPaOa8rRvB8JySv5riYmk48Br95kw94"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nse3.squarespacedns.com"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "cloud-dns-hostmaster.google.com",
                "value": "nse1.squarespacedns.com"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "alt4.aspmx.l.google.com",
                "priority": 10
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "alt1.aspmx.l.google.com",
                "priority": 5
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "alt3.aspmx.l.google.com",
                "priority": 10
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "alt2.aspmx.l.google.com",
                "priority": 5
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "google-site-verification=ykNVGVAkRQE9M334nro1Eg6Ox9RgzSm47KrVdsU0_X4"
            }
        ],
        "dns_at": "2026-10-26T08:51:23Z",
        "jarm": "21d19d00021d21d00042d43d0000000c5f19e7e54cb3beeed93cf987598de9",
        "cert": {
            "san": [
                "avalabs.digital",
                "www.avalabs.digital"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "532d233382907c897a74b7318e5f16e9c9",
            "sha256": "3c2366f4bf64a0eb97aed43ddd40bacf44f82edb5016f1d3abe6c0c657f3221b",
            "subject": "avalabs.digital",
            "valid_to": "2026-12-24T14:36:14Z",
            "valid_from": "2026-09-25T14:36:15Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "client delete prohibited"
            ],
            "events": {
                "expiration": "2027-09-22T00:28:42Z",
                "last changed": "2026-09-22T00:42:24Z",
                "registration": "2026-09-22T00:28:42Z",
                "registrar expiration": "2027-09-22T00:28:42Z",
                "last update of RDAP database": "2026-09-22T00:42:24Z"
            },
            "registrar": "Squarespace Domains II LLC",
            "registrar_iana_id": "895"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T12:15:39Z",
        "mail_config": {
            "mx": [
                "aspmx.l.google.com",
                "alt1.aspmx.l.google.com",
                "alt3.aspmx.l.google.com",
                "alt2.aspmx.l.google.com",
                "alt4.aspmx.l.google.com"
            ],
            "dkim": [
                "google"
            ],
            "dmarc": true,
            "dkim_bits": 2048,
            "providers": [
                "Google Workspace"
            ],
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "avalabs.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T11:42:55Z",
            "first": "2026-09-22T02:28:07Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.03,
            "avg_page_bytes": 8057
        },
        "social_tags": {
            "title": "AI-Powered Executive Hiring Platform",
            "description": "Transform your recruitment process with AI-powered candidate assessments, secure invites, and comprehensive insights."
        },
        "trackers": {
            "requests": 17,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 301,
            "timings": {
                "dns": 23,
                "tls": 178,
                "wait": 172,
                "connect": 172,
                "download": 0
            },
            "response_ms": 545
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 78436,
            "co2_grams": 0.0029,
            "cleaner_than": 27
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "216.239.32.110",
                    "host": "nse1.squarespacedns.com"
                },
                {
                    "ip": "216.239.38.110",
                    "host": "nse4.squarespacedns.com"
                },
                {
                    "ip": "216.239.34.110",
                    "host": "nse2.squarespacedns.com"
                },
                {
                    "ip": "216.239.36.110",
                    "host": "nse3.squarespacedns.com"
                }
            ],
            "zone": "avalabs.digital"
        },
        "location": {
            "ip": "74.81.40.236",
            "asn": "22439",
            "org": "Perfect International, Inc",
            "city": "Los Angeles",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR1",
            "subject": "avalabs.digital"
        },
        "dns": {
            "A": [
                "74.81.40.236"
            ],
            "MX": [
                "{\"exchange\": \"alt1.aspmx.l.google.com\", \"priority\": 5}",
                "{\"exchange\": \"alt2.aspmx.l.google.com\", \"priority\": 5}",
                "{\"exchange\": \"aspmx.l.google.com\", \"priority\": 1}",
                "{\"exchange\": \"alt4.aspmx.l.google.com\", \"priority\": 10}",
                "{\"exchange\": \"alt3.aspmx.l.google.com\", \"priority\": 10}"
            ],
            "NS": [
                "nse2.squarespacedns.com",
                "nse4.squarespacedns.com",
                "nse3.squarespacedns.com",
                "nse1.squarespacedns.com"
            ],
            "SOA": "{\"nsname\": \"nse1.squarespacedns.com\", \"hostmaster\": \"cloud-dns-hostmaster.google.com\", \"serial\": 1, \"refresh\": 21600, \"retry\": 3600, \"expire\": 259200, \"minttl\": 300}",
            "TXT": [
                "google-site-verification=lhZsZoLsPphOOPaOa8rRvB8JySv5riYmk48Br95kw94",
                "google-site-verification=ykNVGVAkRQE9M334nro1Eg6Ox9RgzSm47KrVdsU0_X4"
            ]
        },
        "dnssec": {
            "ds": true,
            "rrsig": true,
            "dnskey": true
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "74.81.40.236",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://avalabs.digital",
                "https://www.avalabs.digital/"
            ],
            "count": 1
        },
        "linked_pages": {
            "internal_count": 11
        },
        "headers": {
            "headers": {
                "server": "nginx/1.18.0 (Ubuntu)",
                "content-type": "text/html; charset=utf-8",
                "x-powered-by": "Next.js"
            }
        }
    }
}
```