# PhishDestroy domain threat record: boost-2u-axid.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/boost-2u-axid.digital/
Machine-readable companion: https://phishdestroy.io/domain/boost-2u-axid.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 11:59:56 UTC
- Last availability or vendor check: 2026-10-23 12:08:22 UTC
- Stored record updated: 2026-10-23 18:20:51 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date (registry RDAP, boost-2u-axid.digital): 2026-08-18 07:31:44 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a168a7-aa44-728f-a7c0-1b86127ede1c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/boost-2u-axid.digital
- Certificate Transparency search: https://crt.sh/?q=%25.boost-2u-axid.digital
- Web Archive lookup: https://web.archive.org/web/*/https://boost-2u-axid.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added boost-2u-axid.digital to its internal blocklist on 2026-10-23 after the intake system highlighted the domain because VirusTotal reported multiple malicious detections. The recorded page title reads “Boost +2U Axid | AI Trading Platform | Authorized Main Hub” and the HTTP response was 200 on that date. Google Safe Browsing showed no flag on 2026-10-23 and external blocklists listed the domain zero times.

How the scam works
The vendor detections classify the site under phishing or malware categories, which typically aim to trick users into revealing credentials or installing unwanted software. No specific malicious behavior was observed on the captured page, so the risk is inferred from the generic threat labels rather than concrete evidence.

Evidence
VirusTotal analysis on 2026-10-17 (retrieved 2026-10-23) returned 13 malicious and 3 suspicious detections out of 92 engines, with vendors such as BitDefender, Fortinet and Kaspersky marking it as phishing. Google Safe Browsing checked on 2026-10-23 reported the domain as not flagged. urlscan.io captured the site on 2026-09-08; its engine verdict flagged the URL as malicious with a score of 100, while the overall verdict was clean. Cloudflare Radar scan on 2026-10-23 classified the domain as malicious under the malware category. OTX listed one pulse referencing the domain on 2026-10-23. PhishDestroy’s internal blocklist marks the domain as present, while external blocklists reported zero hits.

Infrastructure
The domain was registered on 2026-08-18 through Spaceship, Inc., giving it a registration age of 66 days at first sighting. DNS records point to Cloudflare IP addresses such as 188.114.96.1 and 188.114.97.3, and the site was served through Cloudflare’s CDN using TLS 1.3; the certificate issued by Google Trust Services is valid from 2026-10-16 to 2027-01-14. Nameservers are mitchell.ns.cloudflare.com and katja.ns.cloudflare.com, and DNSSEC is not enabled.

What to do
Visitors should avoid entering any credentials, personal data, or downloading files from this site; if any information was submitted, change passwords and monitor accounts for suspicious activity. Organizations should block the exact domain in web filters and firewalls and review logs for connections to the recorded IP addresses.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0806a-e72f-7065-934e-58569e6aff89/
Cloudflare Radar report: https://radar.cloudflare.com/scan/d752ea25-e46c-4dd3-940e-41d7f3cf2a69
Stored capture screenshot: https://urlscan.io/screenshots/01a0806a-e72f-7065-934e-58569e6aff89.png
Cloudflare Radar screenshot (2026-10-23T12:02:46Z): https://screenshots.phishdestroy.io/cf/d752ea25-e46c-4dd3-940e-41d7f3cf2a69.png
URLScan screenshot (2026-09-07T09:01:07Z): https://screenshots.phishdestroy.io/us/01a07b19-766e-75b2-9ce7-cbfe19bd59bc.png
URLScan capture report: https://urlscan.io/result/01a07b19-766e-75b2-9ce7-cbfe19bd59bc/
URLScan screenshot (2026-09-07T10:26:56Z): https://screenshots.phishdestroy.io/us/01a07b68-07fe-71a6-a62b-e9537fbcc89a.png
URLScan capture report: https://urlscan.io/result/01a07b68-07fe-71a6-a62b-e9537fbcc89a/
URLScan screenshot (2026-10-23T12:06:32Z): https://screenshots.phishdestroy.io/us/01a168a7-aa44-728f-a7c0-1b86127ede1c.png
URLScan capture report: https://urlscan.io/result/01a168a7-aa44-728f-a7c0-1b86127ede1c/
VirusTotal report: https://www.virustotal.com/gui/domain/boost-2u-axid.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=boost-2u-axid.digital
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 12:08:21 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a168a7-aa44-728f-a7c0-1b86127ede1c.png
  Captured: 2026-10-23 12:08:22 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a168a7-aa44-728f-a7c0-1b86127ede1c.png
  Captured: 2026-10-23 12:08:22 UTC
  Source report: https://urlscan.io/result/01a168a7-aa44-728f-a7c0-1b86127ede1c/
- URLScan capture 2: https://urlscan.io/screenshots/01a0806a-e72f-7065-934e-58569e6aff89.png
  Captured: 2026-10-23 11:59:56 UTC
  Source report: https://urlscan.io/result/01a168a7-aa44-728f-a7c0-1b86127ede1c/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d752ea25-e46c-4dd3-940e-41d7f3cf2a69.png
  Captured: 2026-10-23 12:02:46 UTC
  Source report: https://radar.cloudflare.com/scan/d752ea25-e46c-4dd3-940e-41d7f3cf2a69
  SHA-256: 206aeb941eea851f91dcd0c9b8e8d01022f76afbe5b261efae86446dc3cfd30d
- URLQuery: https://screenshots.phishdestroy.io/uq/7aa2cc67-e17d-481f-8459-945fa32b6573.png
  Source report: https://urlquery.net/report/7aa2cc67-e17d-481f-8459-945fa32b6573
  SHA-256: f6eefa72d666a6d911d58968100a0f15f4eb524e9c9a7c1c98f0a1a1fc01eea2
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b19-766e-75b2-9ce7-cbfe19bd59bc.png
  Captured: 2026-09-07 09:01:07 UTC
  Source report: https://urlscan.io/result/01a07b19-766e-75b2-9ce7-cbfe19bd59bc/
  SHA-256: 7d9b9a9db009501c6882fe6c9f36c7eabfef07012238a7eebcc449a517049eea
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b68-07fe-71a6-a62b-e9537fbcc89a.png
  Captured: 2026-09-07 10:26:56 UTC
  Source report: https://urlscan.io/result/01a07b68-07fe-71a6-a62b-e9537fbcc89a/
  SHA-256: c9921151adc516c0d3f921ad4d984ab4c0d912679dd0d39eeee8b79a36acf019
- URLScan · 2026-09-08: https://screenshots.phishdestroy.io/us/01a0806a-e72f-7065-934e-58569e6aff89.png
  Captured: 2026-09-08 09:48:13 UTC
  Source report: https://urlscan.io/result/01a0806a-e72f-7065-934e-58569e6aff89/
  SHA-256: f1e0fa783a110f9f7c185473eacc66d7f970b2abcbb297d9580d70d83618a6ad
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a168a8-e1b7-751f-ab99-d9e338669866.png
  Captured: 2026-10-23 12:08:01 UTC
  Source report: https://urlscan.io/result/01a168a8-e1b7-751f-ab99-d9e338669866/
  SHA-256: c37ce8161b4f762faf50e05576747e64e1fb5545cc9c848221d0da40febf36a5

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T12:56:23Z",
        "uuid": "01a168a7-aa44-728f-a7c0-1b86127ede1c",
        "scanned_at": "2026-10-23T12:06:32Z",
        "final_url": "https://boost-2u-axid.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://boost-2u-axid.digital/",
                "from": "http://boost-2u-axid.digital/",
                "status": 307
            }
        ],
        "ip": "104.21.52.119",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "104.17.207.5",
            "172.217.222.95",
            "104.17.25.14",
            "104.21.52.119"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "c4456ed97272112af9af4509224448e61f931e8f8ef926c9a9cbfb697840efca",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_s6k5i6",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "boost-2u-axid.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "boost-2u-axid.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-14T09:39:12Z",
            "valid_from": "2026-10-16T08:39:14Z"
        },
        "domain_age_days": 66,
        "apex_age_days": 66,
        "tls_age_days": 7,
        "tls_valid_days": 90,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflar",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T12:07:03Z",
        "uuid": "d752ea25-e46c-4dd3-940e-41d7f3cf2a69",
        "scanned_at": "2026-10-23T12:02:46Z",
        "final_url": "https://boost-2u-axid.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://boost-2u-axid.digital/",
                "status": 200
            }
        ],
        "dom_hash": "08d21ea8f9af649293caf118e93b02faeea4fd8fe34a655e6fadd14464866fd2",
        "doc_hash": "094200a0cae84702151fc4b5d0f83ff8065c6c83473e5db67928867f4632d0a5",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "boost-2u-axid.digital",
                "type": "A",
                "value": "104.21.52.119"
            },
            {
                "name": "boost-2u-axid.digital",
                "type": "A",
                "value": "172.67.198.129"
            },
            {
                "name": "boost-2u-axid.digital",
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:c681"
            },
            {
                "name": "boost-2u-axid.digital",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:3477"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.52.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T12:01:32Z",
        "analysis_at": "2026-10-17T19:36:36Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "first_seen": "2026-08-18T08:51:52Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:c681"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:3477"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "katja.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "katja.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.52.119"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "mitchell.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.198.129"
            }
        ],
        "dns_at": "2026-10-17T19:41:51Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "boost-2u-axid.digital"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "87bb39231b21b334131566f90dfdddec",
            "sha256": "8c164387e3f78276e6f27484519141f982eafae96ce68690072896452ac5518b",
            "subject": "boost-2u-axid.digital",
            "valid_to": "2027-01-14T09:39:12Z",
            "valid_from": "2026-10-16T08:39:14Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-08-18T08:22:35Z",
                "registration": "2026-08-18T07:31:44Z",
                "registrar expiration": "2027-08-18T07:31:44Z",
                "last update of RDAP database": "2026-10-17T19:41:51Z"
            },
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T12:07:21Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "boost-2u-axid.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T12:02:32Z",
            "first": "2026-10-23T12:02:32Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 41011
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://boost-2u-axid.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://boost-2u-axid.digital/",
            "title": "Boost +2U Axid | AI Trading Platform | Authorized Main Hub",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Boost +2U Axid | Premium AI Trading Assistant",
            "ogSiteName": "Boost +2U Axid",
            "themeColor": "#0A1F3D",
            "description": "Boost +2U Axid unveils AI-powered trading guidance, automated bots, live market metrics, portfolio controls, and secure access for modern traders.",
            "twitterCard": "summary",
            "canonicalUrl": "https://boost-2u-axid.digital/",
            "ogDescription": "Boost +2U Axid unleashes AI-powered trading guidance, autonomous bots, real-time market metrics, portfolio controls, and secure access for modern traders."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 4,
                "tls": 38,
                "wait": 163,
                "connect": 6,
                "download": 60
            },
            "response_ms": 271
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 134381,
            "co2_grams": 0.0049,
            "cleaner_than": 16
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.231",
                    "host": "mitchell.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.53",
                    "host": "katja.ns.cloudflare.com"
                }
            ],
            "zone": "boost-2u-axid.digital"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "boost-2u-axid.digital"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "mitchell.ns.cloudflare.com",
                "katja.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"katja.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086287, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' htt",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://boost-2u-axid.digital"
            ]
        },
        "linked_pages": {
            "internal_count": 39
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "content-security-policy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; default-src 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.clou",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```