# PhishDestroy domain threat record: avenixai.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/avenixai.shop/ Machine-readable companion: https://phishdestroy.io/domain/avenixai.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 05:18:59 UTC - Last availability or vendor check: 2026-10-22 11:01:53 UTC - Stored record updated: 2026-10-22 17:47:54 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.97.3 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a1621c-930d-7034-b51f-2253ad191228/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/avenixai.shop - Certificate Transparency search: https://crt.sh/?q=%25.avenixai.shop - Web Archive lookup: https://web.archive.org/web/*/https://avenixai.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added avenixai.shop to its internal blocklist as a suspicious domain. The recorded page title was “AVENIX AI | Premium AI Trading Platform | Official Main Page”. The domain was first seen by PhishDestroy on 2026-10-22 when it returned an HTTP 200 response. How the scam works The listings that triggered the blocklist are typical of sites that impersonate financial or AI‑trading services to lure visitors into providing credentials or payment information. Such pages often use persuasive marketing copy and may host data‑collection forms, but no explicit collection mechanism was observed in the captured snapshot. Evidence VirusTotal scanned the domain on 2026-10-22 and reported 13 malicious and 3 suspicious detections out of 92 engines (16 total). Google Safe Browsing checked the same day and did not flag the site. urlscan captured the page on 2026-10-22; its overall verdict was clean while its engine scoring marked the URL as malicious with a high confidence score. Cloudflare Radar on 2026-10-22 classified the domain as phishing and malware, and OTX listed five pulses referencing the domain. PhishDestroy’s internal blocklist marks the domain as blocked, while external public blocklists reported zero hits. Infrastructure The domain was registered on 2026-09-14, giving it an age of 37 days at the time of observation. DNS records at that time pointed to Cloudflare‑managed addresses 188.114.96.9 and 188.114.97.9 (IPv4) and to IPv6 prefixes 2a06:98c1:3120::9 and 2a06:98c1:3121::9. The TLS certificate presented on 2026-10-22 was issued by Google Trust Services, valid from 2026-09-14 to 2026-12-13, and the server header identified Cloudflare. What to do Visitors should avoid entering any login credentials, personal data, or payment information on the site and, if they have already done so, change associated passwords and monitor accounts for unauthorized activity. Organizations should block avenixai.shop at the network perimeter and review logs for HTTPS requests to the recorded Cloudflare IPs. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1621c-930d-7034-b51f-2253ad191228/ Cloudflare Radar report: https://radar.cloudflare.com/scan/0ff3057c-d980-4000-8a5d-6c72538835b8 Stored capture screenshot: https://urlscan.io/screenshots/01a1621c-930d-7034-b51f-2253ad191228.png Cloudflare Radar screenshot (2026-10-22T05:21:37Z): https://screenshots.phishdestroy.io/cf/0ff3057c-d980-4000-8a5d-6c72538835b8.png URLScan screenshot (2026-09-21T09:00:57Z): https://screenshots.phishdestroy.io/us/01a0c332-4baa-76e8-be19-3dd233da3a9b.png URLScan capture report: https://urlscan.io/result/01a0c332-4baa-76e8-be19-3dd233da3a9b/ URLScan screenshot (2026-09-21T10:50:25Z): https://screenshots.phishdestroy.io/us/01a0c396-8d01-764f-8d87-2afcbde44cac.png URLScan capture report: https://urlscan.io/result/01a0c396-8d01-764f-8d87-2afcbde44cac/ VirusTotal report: https://www.virustotal.com/gui/domain/avenixai.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=avenixai.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 06:23:08 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1621c-930d-7034-b51f-2253ad191228.png Captured: 2026-10-22 05:38:43 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a0c892-629a-741c-ac19-e19e77f86151.png Captured: 2026-10-22 05:18:59 UTC Source report: https://urlscan.io/result/01a1621c-930d-7034-b51f-2253ad191228/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0ff3057c-d980-4000-8a5d-6c72538835b8.png Captured: 2026-10-22 05:21:37 UTC Source report: https://radar.cloudflare.com/scan/0ff3057c-d980-4000-8a5d-6c72538835b8 SHA-256: 36c95ab61b89067963c8b0479644cebc32ffec4490dd182612723ee4e2c97a44 - URLScan · 2026-09-21: https://screenshots.phishdestroy.io/us/01a0c332-4baa-76e8-be19-3dd233da3a9b.png Captured: 2026-09-21 09:00:57 UTC Source report: https://urlscan.io/result/01a0c332-4baa-76e8-be19-3dd233da3a9b/ SHA-256: b5075dc294cbdba1479a60b3580065006813e37de019fb2865a6946e6658f2db - URLScan · 2026-09-21: https://screenshots.phishdestroy.io/us/01a0c396-8d01-764f-8d87-2afcbde44cac.png Captured: 2026-09-21 10:50:25 UTC Source report: https://urlscan.io/result/01a0c396-8d01-764f-8d87-2afcbde44cac/ SHA-256: 1c11d1ce83bc237f81e4dcd95373399782f7af24be16aa79fcc165c4c0f9cc0b ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:52:17Z", "uuid": "01a1621c-930d-7034-b51f-2253ad191228", "scanned_at": "2026-10-22T05:36:54Z", "final_url": "https://avenixai.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://avenixai.shop/", "from": "http://avenixai.shop/", "status": 307 } ], "ip": "104.21.6.22", "domains": [ "cdnjs.cloudflare.com", "challenges.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflareinsights.com", "static.cloudflare.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.17.207.5", "142.251.41.170", "104.17.24.14", "104.21.6.22" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "a6e0a1df9ab127a6118863b77afe6075c3ce634d44b8ab15b74985b9745c7d0f", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_m4fwti4", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "avenixai.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "avenixai.shop", "protocol": "QUIC", "valid_to": "2026-12-13T10:57:24Z", "valid_from": "2026-09-14T09:57:25Z" }, "domain_age_days": 37, "apex_age_days": 37, "tls_age_days": 37, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-src https://challenges.cloudflare.com; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.co", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T05:52:19Z", "uuid": "0ff3057c-d980-4000-8a5d-6c72538835b8", "scanned_at": "2026-10-22T05:21:37Z", "final_url": "https://avenixai.shop/", "status": 200, "history": [ { "url": "https://avenixai.shop/", "status": 200 } ], "dom_hash": "fc6ff624bd9b2065f8501880f52e0a3166eae394454b24418578c0163857aafd", "doc_hash": "1936dca2793a8a014378f7b7d868131ec80f3a94b3c86b93ff2ef98ab9675aa3", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "avenixai.shop", "type": "A", "value": "188.114.96.0" }, { "name": "avenixai.shop", "type": "A", "value": "188.114.97.0" }, { "name": "avenixai.shop", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "avenixai.shop", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.96.0", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T06:21:52Z", "analysis_at": "2026-10-21T16:00:14Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "PREBYTES": "suspicious", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "newly registered websites" }, "first_seen": "2026-09-14T11:28:16Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::ac43:862f" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "porter.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "porter.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "rayne.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::6815:616" }, { "ttl": 300, "type": "A", "value": "172.67.134.47" }, { "ttl": 300, "type": "A", "value": "104.21.6.22" } ], "dns_at": "2026-10-21T16:05:35Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "avenixai.shop" ], "issuer": "Google Trust Services / WE1", "serial": "beb8c8eaaad2caaa139c053f73cf1054", "sha256": "4914d32f0b06eac158e5ef494965058ae923ddc243e321b56c9f10ee3c495794", "subject": "avenixai.shop", "valid_to": "2026-12-13T10:57:24Z", "valid_from": "2026-09-14T09:57:25Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T05:23:42Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "avenixai.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-09-15T00:20:48Z", "first": "2026-09-14T11:10:14Z", "changes": 1, "days_archived": 2, "scans_per_day": 1.82, "avg_page_bytes": 37223 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://avenixai.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://avenixai.shop/", "title": "AVENIX AI | Premium AI Trading Platform | Official Main Page", "ogType": "website", "robots": "index, follow", "ogTitle": "AVENIX AI | Premium Holographic AI Trading Platform", "ogSiteName": "AVENIX AI", "themeColor": "#fff8f3", "description": "AVENIX AI delivers a premium holographic fintech experience with AI-powered trading guidance and automated trading bots, featuring structured workflows, robust risk tooling, and transparent performance insights.", "twitterCard": "summary", "canonicalUrl": "https://avenixai.shop/", "ogDescription": "AVENIX AI delivers a premium holographic fintech experience with AI-powered trading guidance and automated trading bots, featuring structured workflows, robust risk tooling, and transparent performance insights." }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 14, "wait": 89, "connect": 14, "download": 12 }, "response_ms": 131 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 147998, "co2_grams": 0.0054, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "162.159.38.11", "host": "rayne.ns.cloudflare.com" }, { "ip": "172.64.35.243", "host": "porter.ns.cloudflare.com" } ], "zone": "avenixai.shop" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "avenixai.shop" }, "dns": { "A": [ "188.114.97.9", "188.114.96.9" ], "NS": [ "rayne.ns.cloudflare.com", "porter.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"porter.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086661, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::9", "2a06:98c1:3120::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "frame-src https://challenges.cloudflare.com; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:/", "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "redirects": { "chain": [ "https://avenixai.shop" ] }, "tech_stack": { "technologies": [ "jsDelivr", "Cloudflare Turnstile", "Cloudflare Rocket Loader", "ClientJS", "Priority Hints", "Google Font API", "Font Awesome", "cdnjs", "HSTS", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 39 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-src https://challenges.cloudflare.com; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; font-src 'se", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```