# PhishDestroy domain threat record: avelicio.click Content language: English Canonical HTML report: https://phishdestroy.io/domain/avelicio.click/ Machine-readable companion: https://phishdestroy.io/domain/avelicio.click/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:37:45 UTC - Last availability or vendor check: 2026-10-22 05:37:45 UTC - Stored record updated: 2026-10-22 06:49:46 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.56.63 - Registrar in stored WHOIS data: Dynadot, LLC - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-06-03 05:36:42 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1621b-b1df-74c3-99a2-aa7cc208997f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/avelicio.click - Certificate Transparency search: https://crt.sh/?q=%25.avelicio.click - Web Archive lookup: https://web.archive.org/web/*/https://avelicio.click/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed avelicio.click as suspicious in its internal blocklist. The recorded page title was “Avelicio | AI Trading Platform | Official Website”. The first observation by PhishDestroy occurred on 2026-10-22, when an HTTP 200 response was recorded. How the scam works The recorded page title indicated the site presented itself as an AI‑driven trading platform and did not display obvious malicious forms or download links. Because no specific malicious payload was observed, the risk assessment relies on the aggregated vendor detections rather than a confirmed phishing, malware, or credential‑harvesting mechanism. Evidence VirusTotal scanned the domain on 2026-10-19 and reported 13 malicious and 3 suspicious detections from 92 engines, including BitDefender, Fortinet, G‑Data and others. Google Safe Browsing checked on 2026-10-22 and did not flag the site. urlscan.io captured the site on 2026-10-22; its engine verdict marked it malicious with a score of 98, while the overall verdict was neutral. Cloudflare Radar flagged the domain as malicious and categorized it under malware on 2026-10-22. PhishDestroy’s internal blocklist marks the domain as listed; external blocklists such as Spamhaus and other public lists showed no entry on the check dates. OTX recorded five pulses referencing the domain. Infrastructure The domain was registered with Dynadot on 2026-06-03, giving it an age of about 139 days at the time of capture. The domain was recorded pointing to IP 185.62.56.63, which was associated with Snel.com B.V. in the Netherlands, and it used Cloudflare nameservers chloe.ns.cloudflare.com and jaxson.ns.cloudflare.com. The TLS certificate, issued by ZeroSSL ECC DV SSL CA 2, was valid until 2026-12-13 and covered only the apex domain. What to do Visitors should avoid entering credentials, personal data, or financial information on the site and change any passwords if they may have been submitted. Organizations should block avelicio.click at DNS or proxy level, monitor logs for connections to 185.62.56.63, and treat traffic to this address as potentially malicious. Continue to monitor updates from security vendors and PhishDestroy for any change in classification. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1621b-b1df-74c3-99a2-aa7cc208997f/ Cloudflare Radar report: https://radar.cloudflare.com/scan/e0dd2ec0-f857-4aa6-adf5-c992c2efc2d1 URLQuery report: https://urlquery.net/report/d9eb8a2e-0986-4fb9-b827-ced38e96da3e Stored capture screenshot: https://urlscan.io/screenshots/01a1621b-b1df-74c3-99a2-aa7cc208997f.png Cloudflare Radar screenshot (2026-10-22T06:10:42Z): https://screenshots.phishdestroy.io/cf/e0dd2ec0-f857-4aa6-adf5-c992c2efc2d1.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/d9eb8a2e-0986-4fb9-b827-ced38e96da3e.png URLScan screenshot (2026-10-22T05:52:26Z): https://screenshots.phishdestroy.io/us/01a1622a-d078-72cf-a5a2-4cc0279d2f19.png URLScan capture report: https://urlscan.io/result/01a1622a-d078-72cf-a5a2-4cc0279d2f19/ VirusTotal report: https://www.virustotal.com/gui/domain/avelicio.click Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=avelicio.click Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 06:49:40 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1621b-b1df-74c3-99a2-aa7cc208997f.png Captured: 2026-10-22 05:37:45 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1621b-b1df-74c3-99a2-aa7cc208997f.png Captured: 2026-10-22 05:37:45 UTC Source report: https://urlscan.io/result/01a1621b-b1df-74c3-99a2-aa7cc208997f/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e0dd2ec0-f857-4aa6-adf5-c992c2efc2d1.png Captured: 2026-10-22 06:10:42 UTC Source report: https://radar.cloudflare.com/scan/e0dd2ec0-f857-4aa6-adf5-c992c2efc2d1 SHA-256: 9d0eb1d75a27ba49836613b082059a7a378c1569033d5ff68af7db6ab776cd74 - URLQuery: https://screenshots.phishdestroy.io/uq/d9eb8a2e-0986-4fb9-b827-ced38e96da3e.png Source report: https://urlquery.net/report/d9eb8a2e-0986-4fb9-b827-ced38e96da3e SHA-256: 3b6c23f9d2443a1e4b97edda6170a92545cb09db347cbf486102b012f98e9230 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1622a-d078-72cf-a5a2-4cc0279d2f19.png Captured: 2026-10-22 05:52:26 UTC Source report: https://urlscan.io/result/01a1622a-d078-72cf-a5a2-4cc0279d2f19/ SHA-256: 46ad3d6f3f435d2a04aaf68cd19587d97d0d49b8fb9b4a086a971a0fc2d82924 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:54:33Z", "uuid": "01a1621b-b1df-74c3-99a2-aa7cc208997f", "scanned_at": "2026-10-22T05:36:15Z", "final_url": "https://avelicio.click/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://avelicio.click/", "from": "http://avelicio.click/", "status": 307 } ], "ip": "185.62.56.63", "ptr": "s46060.hosted-by-snel.com", "domains": [ "fonts.gstatic.com", "cdn.jsdelivr.net", "challenges.cloudflare.com", "www.cloudflare.com", "geolocation-db.com", "fonts.googleapis.com" ], "ips": [ "104.18.95.41", "142.251.167.94", "104.18.94.41", "104.16.124.96", "104.17.208.5", "159.89.102.253", "142.251.16.95", "185.62.56.63" ], "asns": [ "13335", "15169", "14061", "62370" ], "countries": [ "US", "DE", "NL" ], "doc_hash": "4aeb4294f3f774953f95c08599b51a5a792ece346962ce643b95cf2ee92213ca", "script_hashes": [ "eef74c5c9e24b89ec236ec44a38f5118fcd0ad916937e52857f4a4259045a572" ], "globals": [ "geoCountry", "geoPrefix", "countryPhoneCodes", "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "avelicio.click" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "avelicio.click", "protocol": "TLS 1.3", "valid_to": "2026-12-13T23:59:59Z", "valid_from": "2026-09-14T00:00:00Z" }, "domain_age_days": 139, "apex_age_days": 139, "tls_age_days": 38, "tls_valid_days": 90, "requests": 25, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T06:11:11Z", "uuid": "e0dd2ec0-f857-4aa6-adf5-c992c2efc2d1", "scanned_at": "2026-10-22T06:10:42Z", "final_url": "https://avelicio.click/", "status": 200, "history": [ { "url": "https://avelicio.click/", "status": 200 } ], "dom_hash": "fcac8bbd9b11e77a8d69149cdb922543b4c325a4e92f28e2da361023174b53c2", "doc_hash": "4aeb4294f3f774953f95c08599b51a5a792ece346962ce643b95cf2ee92213ca", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "avelicio.click", "type": "A", "value": "185.62.56.63" } ], "dnssec_valid": false, "ip": "185.62.56.63", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-06-03T07:36:42Z", "updated": "2026-06-08T07:37:11Z", "expires": "2027-06-03T07:36:42Z", "nameservers": [ "jaxson.ns.cloudflare.com", "chloe.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T06:46:27Z", "analysis_at": "2026-10-19T11:00:30Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 13, "suspicious": 3, "undetected": 33 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "DYNADOT LLC", "created": "2026-06-03T07:36:42Z", "expires": "2027-06-03T07:36:42Z", "updated": "2026-06-08T07:37:11Z", "first_seen": "2026-06-03T20:48:46Z", "dns": [ { "ttl": 300, "type": "A", "value": "185.62.56.63" }, { "ttl": 21600, "type": "NS", "value": "jaxson.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "chloe.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "chloe.ns.cloudflare.com" } ], "dns_at": "2026-10-19T11:05:51Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "avelicio.click" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "f531e2ffd4337a51418815e2b96ffe45", "sha256": "044cf693f30aca9d929ffdd9698ae340a363b74660ed0d068d4bdc71c0397b3c", "subject": "avelicio.click", "valid_to": "2026-12-13T23:59:59Z", "valid_from": "2026-09-14T00:00:00Z" }, "whois": { "registrar": "DYNADOT LLC", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-06-03T07:36:42Z", "updated": "2026-06-03T08:45:45Z", "expires": "2027-06-03T07:36:42Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "chloe.ns.cloudflare.com", "jaxson.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-03T07:36:42Z", "last changed": "2026-06-03T08:45:45Z", "registration": "2026-06-03T07:36:42Z", "registrar expiration": "2027-06-03T07:36:42Z", "last update of RDAP database": "2026-10-16T07:12:35Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T06:11:25Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "avelicio.click" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T05:39:16Z", "first": "2026-10-22T05:39:16Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 14193 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://avelicio.click/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "title": "Avelicio | AI Trading Platform | Official Website", "robots": "index, follow", "themeColor": "#130a24", "description": "Avelicio delivers premium market education across Stocks, Commodities, and Forex, linking learners with independent third-party educators for guided, practical training.", "canonicalUrl": "https://avelicio.click/" }, "trackers": { "requests": 22, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 5 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 4 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 35, "tls": 42, "wait": 58, "connect": 33, "download": 51 }, "response_ms": 219 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 50125, "co2_grams": 0.0018, "cleaner_than": 37 }, "dns_server": { "ns": [ { "ip": "172.64.32.85", "host": "chloe.ns.cloudflare.com" }, { "ip": "162.159.44.221", "host": "jaxson.ns.cloudflare.com" } ], "zone": "avelicio.click" }, "location": { "ip": "185.62.56.63", "asn": "62370", "org": "Snel.com B.V.", "city": "Schiedam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "avelicio.click" }, "dns": { "A": [ "185.62.56.63" ], "NS": [ "chloe.ns.cloudflare.com", "jaxson.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"chloe.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416173831, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.63", "family": 4 }, "redirects": { "chain": [ "https://avelicio.click" ] }, "tech_stack": { "technologies": [ "Cloudflare Turnstile", "ClientJS", "Priority Hints", "jsDelivr", "Google Font API", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 38 }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-06-03T07:36:42Z", "updated": "2026-06-08T07:37:11Z", "expires": "2027-06-03T07:36:42Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "jaxson.ns.cloudflare.com", "chloe.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```