# PhishDestroy domain threat record: avenivesolvoral.click

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/avenivesolvoral.click/
Machine-readable companion: https://phishdestroy.io/domain/avenivesolvoral.click/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 05:18:55 UTC
- Last availability or vendor check: 2026-10-22 05:38:42 UTC
- Stored record updated: 2026-10-22 06:30:31 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.92.90
- Registrar in stored WHOIS data: Spaceship, Inc.
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-06 08:12:54 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1621c-8f77-7065-917e-5f443630257d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/avenivesolvoral.click
- Certificate Transparency search: https://crt.sh/?q=%25.avenivesolvoral.click
- Web Archive lookup: https://web.archive.org/web/*/https://avenivesolvoral.click/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed avenivesolvoral.click on 2026-10-22 after its intake flagged the domain because VirusTotal returned multiple malicious detections. The page presents the title "Avenive Solvoral | AI Trading Platform | Official Main Page" and returned HTTP 200 on the same date. Google Safe Browsing checked the URL on 2026-10-22 and did not flag it, and no external blocklists (aside from a single Cloudflare Family entry) reported it as malicious.

How the scam works
The detections do not prove a specific fraud technique, but domains that receive phishing or malware labels are commonly used to harvest credentials, distribute malicious code, or impersonate legitimate services. In this case the page claims to be an AI trading platform, a theme often leveraged to lure users into providing personal or financial information. No concrete evidence of such activity was observed on the captured page.

Evidence
VirusTotal analysis on 2026-10-16 (retrieved 2026-10-22) recorded 12 malicious and 3 suspicious vendor votes out of 92 engines, totaling 15 detections. Vendors such as BitDefender, Fortinet, Kaspersky and others marked the domain as phishing. Google Safe Browsing on 2026-10-22 returned a clean result. URLScan captured the site on 2026-09-17; its engine verdict scored 99 as malicious, but the overall verdict was clean. OTX listed one pulse referencing the domain on 2026-10-22. PhishDestroy’s internal blocklist marked the domain as malicious on 2026-10-22, while external blocklists showed zero hits.

Infrastructure
The domain was registered with Spaceship, Inc. on 2026-09-06, giving it an age of ten days at first sight. Hosting is provided through Cloudflare, with recorded IP addresses 172.67.190.222 and 104.21.92.90. TLS was issued by Google Trust Services, valid from 2026-09-06 to 2026-12-05. Nameservers are olof.ns.cloudflare.com and savanna.ns.cloudflare.com.

What to do
If you visited the site, avoid entering any credentials or personal data; change passwords for accounts that may have been used. Monitor email and financial accounts for suspicious activity. Network defenders should block avenivesolvoral.click and its resolved IPs, and add the domain to threat‑intel feeds. Review logs for any connections to the Cloudflare IPs and investigate any related alerts.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0aed4-2e83-752f-908d-0a9207ddec8b/
Cloudflare Radar report: https://radar.cloudflare.com/scan/1fc2563d-486e-4888-9a2f-13b0fbd6eb53
Stored capture screenshot: https://urlscan.io/screenshots/01a0aed4-2e83-752f-908d-0a9207ddec8b.png
Cloudflare Radar screenshot (2026-10-22T05:21:37Z): https://screenshots.phishdestroy.io/cf/1fc2563d-486e-4888-9a2f-13b0fbd6eb53.png
URLScan screenshot (2026-09-16T13:00:56Z): https://screenshots.phishdestroy.io/us/01a0aa4e-3f14-729e-8ce0-8d0a8e71ff97.png
URLScan capture report: https://urlscan.io/result/01a0aa4e-3f14-729e-8ce0-8d0a8e71ff97/
VirusTotal report: https://www.virustotal.com/gui/domain/avenivesolvoral.click
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=avenivesolvoral.click
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 05:23:49 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1621c-8f77-7065-917e-5f443630257d.png
  Captured: 2026-10-22 05:38:42 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0aed4-2e83-752f-908d-0a9207ddec8b.png
  Captured: 2026-10-22 05:18:55 UTC
  Source report: https://urlscan.io/result/01a1621c-8f77-7065-917e-5f443630257d/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1fc2563d-486e-4888-9a2f-13b0fbd6eb53.png
  Captured: 2026-10-22 05:21:37 UTC
  Source report: https://radar.cloudflare.com/scan/1fc2563d-486e-4888-9a2f-13b0fbd6eb53
  SHA-256: 61a4e9de7270abbd44aa22c2bdaa8d6866ccfa42dce729c79f21be5d10f93416
- URLQuery: https://screenshots.phishdestroy.io/uq/09725c52-49df-44a3-a8df-45e056bb6875.png
  Source report: https://urlquery.net/report/09725c52-49df-44a3-a8df-45e056bb6875
  SHA-256: 4e7351e706e3fe743137fe611eddab99837cb25c3e665208bca652970b38191a
- URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0aa4e-3f14-729e-8ce0-8d0a8e71ff97.png
  Captured: 2026-09-16 13:00:56 UTC
  Source report: https://urlscan.io/result/01a0aa4e-3f14-729e-8ce0-8d0a8e71ff97/
  SHA-256: 6d0310d7adfc788a1c40a569e36e100c39fe645795ccae063330270e7fec8674
- URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0aed4-2e83-752f-908d-0a9207ddec8b.png
  Captured: 2026-09-17 10:05:44 UTC
  Source report: https://urlscan.io/result/01a0aed4-2e83-752f-908d-0a9207ddec8b/
  SHA-256: b795df7c3db11730897aae38f6880b17c11f96319f104ec7302aa46ef249b800

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T05:55:12Z",
        "uuid": "01a1621c-8f77-7065-917e-5f443630257d",
        "scanned_at": "2026-10-22T05:36:52Z",
        "final_url": "https://avenivesolvoral.click/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://avenivesolvoral.click/",
                "from": "http://avenivesolvoral.click/",
                "status": 307
            }
        ],
        "ip": "172.67.190.222",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.95.41",
            "2606:4700::6811:d005",
            "2a00:1450:4001:c25::5f",
            "104.17.24.14",
            "172.67.190.222"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "9779cc13658f780f4c46224dcb9cd510edb7fcd14eff8f4cbd527aefc4dd7174",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_vmtdv",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "avenivesolvoral.click"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "avenivesolvoral.click",
            "protocol": "QUIC",
            "valid_to": "2026-12-05T14:02:56Z",
            "valid_from": "2026-09-06T13:03:03Z"
        },
        "domain_age_days": 45,
        "apex_age_days": 45,
        "tls_age_days": 45,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-e",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T05:23:23Z",
        "uuid": "1fc2563d-486e-4888-9a2f-13b0fbd6eb53",
        "scanned_at": "2026-10-22T05:21:37Z",
        "final_url": "https://avenivesolvoral.click/",
        "status": 200,
        "history": [
            {
                "url": "https://avenivesolvoral.click/",
                "status": 200
            }
        ],
        "dom_hash": "aae9618870b595763c0e78b1229357d0d8b6993bb7237d9ed9bbcdda3ab878c3",
        "doc_hash": "120a2b7dfcd42a096fbbcf20456c0a419386b1f6ac0e012a41dbb386cfb68ec9",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "avenivesolvoral.click",
                "type": "A",
                "value": "104.21.92.90"
            },
            {
                "name": "avenivesolvoral.click",
                "type": "A",
                "value": "172.67.190.222"
            },
            {
                "name": "avenivesolvoral.click",
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:bede"
            },
            {
                "name": "avenivesolvoral.click",
                "type": "AAAA",
                "value": "2606:4700:3034::6815:5c5a"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.92.90",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-09-06T10:12:54Z",
            "updated": "2026-09-11T10:13:51Z",
            "expires": "2027-09-06T10:12:54Z",
            "nameservers": [
                "olof.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T05:20:48Z",
        "analysis_at": "2026-10-16T20:29:45Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 12,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Spaceship, Inc.",
        "created": "2026-09-06T10:12:54Z",
        "expires": "2027-09-06T10:12:54Z",
        "updated": "2026-09-11T10:13:51Z",
        "first_seen": "2026-09-06T12:36:53Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:5c5a"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.92.90"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "olof.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:bede"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.190.222"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "olof.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "savanna.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-16T20:35:07Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "avenivesolvoral.click"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "5dd5e5e3e1a0cf41134b65fa049de0b7",
            "sha256": "a8148c5c924d1d4df986cb73959d34850f20ef3733a8b2f9720131fc1652ba1b",
            "subject": "avenivesolvoral.click",
            "valid_to": "2026-12-05T14:02:56Z",
            "valid_from": "2026-09-06T13:03:03Z"
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862",
            "registrar_url": "https://www.spaceship.com/",
            "created": "2026-09-06T10:12:54Z",
            "updated": "2026-09-11T10:13:51Z",
            "expires": "2027-09-06T10:12:54Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "olof.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "add period"
            ],
            "events": {
                "last changed": "2026-09-06T12:14:12Z",
                "registration": "2026-09-06T10:12:54Z",
                "registrar expiration": "2027-09-06T10:12:54Z",
                "last update of RDAP database": "2026-10-16T20:35:07Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T05:23:34Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "avenivesolvoral.click"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://avenivesolvoral.click/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://avenivesolvoral.click/",
            "title": "Avenive Solvoral | AI Trading Platform | Official Main Page",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Avenive Solvoral | Premium AI trading support for institutions",
            "ogSiteName": "Avenive Solvoral",
            "themeColor": "#f2fbf7",
            "description": "Avenive Solvoral provides enterprise-grade AI trading support and automated bot workflows with transparent controls, secure onboarding, and disciplined risk management tools.",
            "twitterCard": "summary",
            "canonicalUrl": "https://avenivesolvoral.click/",
            "ogDescription": "Avenive Solvoral delivers enterprise-grade AI trading support and automated bot workflows with transparent controls, secure onboarding, and disciplined risk governance."
        },
        "trackers": {
            "requests": 17,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 130,
                "tls": 60,
                "wait": 183,
                "connect": 11,
                "download": 9
            },
            "response_ms": 393
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 146350,
            "co2_grams": 0.0054,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.51",
                    "host": "olof.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.194.136",
                    "host": "savanna.ns.cloudflare.com"
                }
            ],
            "zone": "avenivesolvoral.click"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3030::ac43:bede",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "avenivesolvoral.click"
        },
        "dns": {
            "A": [
                "104.21.92.90",
                "172.67.190.222"
            ],
            "NS": [
                "olof.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"olof.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086518, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3030::ac43:bede",
                "2606:4700:3034::6815:5c5a"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-sr",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3030::ac43:bede",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://avenivesolvoral.click"
            ]
        },
        "tech_stack": {
            "technologies": [
                "jsDelivr",
                "Cloudflare Turnstile",
                "Cloudflare Rocket Loader",
                "ClientJS",
                "Priority Hints",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 42
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-09-06T10:12:54Z",
            "updated": "2026-09-11T10:13:51Z",
            "expires": "2027-09-06T10:12:54Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "olof.ns.cloudflare.com",
                "savanna.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; font-",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```