# PhishDestroy domain threat record: axelfundevotrade.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/axelfundevotrade.com/ Machine-readable companion: https://phishdestroy.io/domain/axelfundevotrade.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 06:46:38 UTC - Last availability or vendor check: 2026-10-22 06:46:38 UTC - Stored record updated: 2026-10-22 08:10:31 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-11 01:58:44 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1625b-af2a-75aa-b9a2-eeef8be860db/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/axelfundevotrade.com - Certificate Transparency search: https://crt.sh/?q=%25.axelfundevotrade.com - Web Archive lookup: https://web.archive.org/web/*/https://axelfundevotrade.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added axelfundevotrade.com to its internal blocklist after VirusTotal flagged the domain as malicious. The domain was first seen by PhishDestroy on 2026-10-22 and returned an HTTP 200 response on that date. The recorded page title is “Axel Fundevo — AI‑plattform för finansiellt beslutsfattande”. How the scam works The listing reflects a generic suspicion that domains with many malicious detections often host phishing, fake‑service or malware pages; such sites may try to harvest credentials or deliver malicious code, but no concrete behavior was observed on the captured page. Evidence VirusTotal analysis on 2026-10-21 reported 14 malicious and 4 suspicious detections from 92 engines, with vendors such as BitDefender, ESET and Kaspersky marking it malicious. Google Safe Browsing checked on 2026-10-22 did not flag the domain. Cloudflare Radar scan on 2026-10-22 classified the URL as phishing and malware, assigning a malicious verdict. URLScan capture on 2026-10-22 gave the page a malicious engine score of 97, though its overall verdict was non‑malicious. OTX listed two pulses referencing the domain as of 2026-10-22. No external blocklists reported the domain, while PhishDestroy’s internal blocklist marked it true. Infrastructure The domain was registered with Dynadot Inc on 2026-03-11, giving it 225 days of age at first sighting. The recorded IP address is 158.94.210.119, belonging to Omegatech LTD in the Netherlands. TLS is provided by Let’s Encrypt, valid from 2026-08-27 to 2026-11-25. Open ports observed were 22, 80 and 443. Nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net. What to do Visitors should avoid entering any credentials or downloading files from the site; if credentials were entered, change them and enable multi‑factor authentication. Organizations should block the exact domain and monitor for connections to 158.94.210.119. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1625b-af2a-75aa-b9a2-eeef8be860db/ Cloudflare Radar report: https://radar.cloudflare.com/scan/b751a9d9-76a9-496b-869e-683f37eacef9 URLQuery report: https://urlquery.net/report/624d9d96-6b5a-419a-9b92-022700b9b0e7 Stored capture screenshot: https://i.ibb.co/pB4sBqDx/dd61c2e6cb20.png Cloudflare Radar screenshot (2026-10-22T07:17:36Z): https://screenshots.phishdestroy.io/cf/b751a9d9-76a9-496b-869e-683f37eacef9.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/624d9d96-6b5a-419a-9b92-022700b9b0e7.png URLScan screenshot (2026-08-21T16:45:17Z): https://screenshots.phishdestroy.io/us/01a02536-4c22-7287-83ff-fdf683fee9fa.png URLScan capture report: https://urlscan.io/result/01a02536-4c22-7287-83ff-fdf683fee9fa/ URLScan screenshot (2026-08-22T05:45:51Z): https://screenshots.phishdestroy.io/us/01a02800-e790-7560-994f-861d9d971845.png URLScan capture report: https://urlscan.io/result/01a02800-e790-7560-994f-861d9d971845/ URLScan screenshot (2026-09-25T01:19:03Z): https://screenshots.phishdestroy.io/us/01a0d624-e292-76c8-9cad-285a7483edb8.png URLScan capture report: https://urlscan.io/result/01a0d624-e292-76c8-9cad-285a7483edb8/ URLScan screenshot (2026-10-22T06:35:08Z): https://screenshots.phishdestroy.io/us/01a16251-f708-710c-8781-6e2c22e5dcb2.png URLScan capture report: https://urlscan.io/result/01a16251-f708-710c-8781-6e2c22e5dcb2/ URLScan screenshot (2026-10-22T06:36:45Z): https://screenshots.phishdestroy.io/us/01a16253-7211-759b-8932-a14900c2bba2.png URLScan capture report: https://urlscan.io/result/01a16253-7211-759b-8932-a14900c2bba2/ URLScan screenshot (2026-10-22T06:40:42Z): https://screenshots.phishdestroy.io/us/01a16257-008b-702e-bf5d-e62590a35d75.png URLScan capture report: https://urlscan.io/result/01a16257-008b-702e-bf5d-e62590a35d75/ VirusTotal report: https://www.virustotal.com/gui/domain/axelfundevotrade.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=axelfundevotrade.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 07:18:39 UTC ## Stored page captures - Primary capture: https://i.ibb.co/pB4sBqDx/dd61c2e6cb20.png Captured: 2026-10-22 06:46:38 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1625b-af2a-75aa-b9a2-eeef8be860db.png Captured: 2026-10-22 06:46:38 UTC Source report: https://urlscan.io/result/01a1625b-af2a-75aa-b9a2-eeef8be860db/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b751a9d9-76a9-496b-869e-683f37eacef9.png Captured: 2026-10-22 07:17:36 UTC Source report: https://radar.cloudflare.com/scan/b751a9d9-76a9-496b-869e-683f37eacef9 SHA-256: 4869fc87b1d46cca3d5c267b2f78a90be5b30dee63453d07a1625881c48e9eca - URLQuery: https://screenshots.phishdestroy.io/uq/624d9d96-6b5a-419a-9b92-022700b9b0e7.png Source report: https://urlquery.net/report/624d9d96-6b5a-419a-9b92-022700b9b0e7 SHA-256: 528e7fcdf7edc9bdb2a7c46e069ef7e45efb96ad6b064669b4a91e1db58fb60c - URLScan · 2026-08-21: https://screenshots.phishdestroy.io/us/01a02536-4c22-7287-83ff-fdf683fee9fa.png Captured: 2026-08-21 16:45:17 UTC Source report: https://urlscan.io/result/01a02536-4c22-7287-83ff-fdf683fee9fa/ SHA-256: d4a5cfb301935749e992548c68ba1e718e1c4ff8ba16e903d4ce5207d0d3dc39 - URLScan · 2026-08-22: https://screenshots.phishdestroy.io/us/01a02800-e790-7560-994f-861d9d971845.png Captured: 2026-08-22 05:45:51 UTC Source report: https://urlscan.io/result/01a02800-e790-7560-994f-861d9d971845/ SHA-256: 70d00fce59bd9f4055415b39c82aa38cf71f527990094b1018dcb0265a3c2991 - URLScan · 2026-09-25: https://screenshots.phishdestroy.io/us/01a0d624-e292-76c8-9cad-285a7483edb8.png Captured: 2026-09-25 01:19:03 UTC Source report: https://urlscan.io/result/01a0d624-e292-76c8-9cad-285a7483edb8/ SHA-256: 0a08554ff18e6faa87f3dc71d4434fd04dc0573c79786004ee927deab63bb355 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16251-f708-710c-8781-6e2c22e5dcb2.png Captured: 2026-10-22 06:35:08 UTC Source report: https://urlscan.io/result/01a16251-f708-710c-8781-6e2c22e5dcb2/ SHA-256: 24cc0a3937b58ad9333003d95666d0c3b611c10f42c9c67feed6b219d25d98b2 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16253-7211-759b-8932-a14900c2bba2.png Captured: 2026-10-22 06:36:45 UTC Source report: https://urlscan.io/result/01a16253-7211-759b-8932-a14900c2bba2/ SHA-256: 7eabdf400f321bf8ba5978fc480aa061a9cd3e0979ce0f761dfe0c45e2299c2e - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16257-008b-702e-bf5d-e62590a35d75.png Captured: 2026-10-22 06:40:42 UTC Source report: https://urlscan.io/result/01a16257-008b-702e-bf5d-e62590a35d75/ SHA-256: 24cc0a3937b58ad9333003d95666d0c3b611c10f42c9c67feed6b219d25d98b2 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T07:17:48Z", "uuid": "01a1625b-af2a-75aa-b9a2-eeef8be860db", "scanned_at": "2026-10-22T06:45:45Z", "final_url": "https://axelfundevotrade.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://axelfundevotrade.com/", "from": "http://axelfundevotrade.com/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "46cc623594d165b6e761ad97fc6f240d84b97b9dab2d3fe4b24b0e9a66ef4cb7", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "axelfundevotrade.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "axelfundevotrade.com", "protocol": "TLS 1.3", "valid_to": "2026-11-25T15:50:12Z", "valid_from": "2026-08-27T15:50:13Z" }, "domain_age_days": 225, "apex_age_days": 225, "tls_age_days": 55, "tls_valid_days": 89, "requests": 7, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T07:17:56Z", "uuid": "b751a9d9-76a9-496b-869e-683f37eacef9", "scanned_at": "2026-10-22T07:17:36Z", "final_url": "https://axelfundevotrade.com/", "status": 200, "history": [ { "url": "https://axelfundevotrade.com/", "status": 200 } ], "dom_hash": "0931d8c6dd07d8270d222318a3ae399be650ab909852095d06ad7712c738177c", "doc_hash": "ccb8a03ca1dd8a1792e2096d4d94974e9df3c662d2d2d9d8947e4eba4bfc79e2", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Scam", "Security threats", "Malware", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "axelfundevotrade.com", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-03-11T02:58:44Z", "updated": "2026-08-13T12:26:13Z", "expires": "2027-03-11T02:58:44Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T07:17:34Z", "analysis_at": "2026-10-21T08:53:59Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 14, "suspicious": 4, "undetected": 30 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "spam", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "Dynadot Inc", "created": "2026-03-11T02:58:44Z", "expires": "2027-03-11T02:58:44Z", "updated": "2026-08-13T12:26:13Z", "first_seen": "2026-03-11T03:12:28Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.axelfundevotrade.com", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-21T08:59:25Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "axelfundevotrade.com" ], "issuer": "Let's Encrypt / YE1", "serial": "664eb86bc78dd2aab17b542e8d548434b4d", "sha256": "37a1c09f41338967587377f75fe08e99af2135bf56e84db7bd47a5e74153e3e5", "subject": "axelfundevotrade.com", "valid_to": "2026-11-25T15:50:12Z", "valid_from": "2026-08-27T15:50:13Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-03-11T02:58:44Z", "updated": "2026-08-13T12:26:13Z", "expires": "2027-03-11T02:58:44Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-03-11T02:58:44Z", "last changed": "2026-08-31T18:04:38Z", "registration": "2026-03-11T02:58:44Z", "registrar expiration": "2027-03-11T02:58:44Z", "last update of RDAP database": "2026-10-16T06:52:27Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T07:18:07Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "axelfundevotrade.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T06:47:38Z", "first": "2026-10-22T06:47:38Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 21448 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://axelfundevotrade.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Axel Fundevo — AI-plattform för finansiellt beslutsfattande", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Axel Fundevo erbjuder AI-driven dataanalys som omvandlar komplexa ekonomiska underlag till konkreta, spårbara rekommendationer för sparande och riskhantering. Utforska den publika prestandaloggen och se hur metodiken fungerar i praktiken.", "canonicalUrl": "https://axelfundevotrade.com/" }, "trackers": { "requests": 7 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 284, "tls": 76, "wait": 114, "connect": 66, "download": 133 }, "response_ms": 673 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 76372, "co2_grams": 0.0028, "cleaner_than": 28 }, "dns_server": { "ns": [ { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.27.158", "host": "ns1.dyna-ns.net" } ], "zone": "axelfundevotrade.com" }, "cookies": { "cookies": [ { "name": "connect.sid", "secure": true, "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "axelfundevotrade.com" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.axelfundevotrade.com\", \"serial\": 2026083101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://axelfundevotrade.com" ] }, "tech_stack": { "technologies": [ "Tailwind CSS", "jQuery", "Priority Hints", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 9 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-03-11T02:58:44Z", "updated": "2026-08-13T12:26:13Z", "expires": "2027-03-11T02:58:44Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```