# PhishDestroy domain threat record: capivalsolvandra.click Content language: English Canonical HTML report: https://phishdestroy.io/domain/capivalsolvandra.click/ Machine-readable companion: https://phishdestroy.io/domain/capivalsolvandra.click/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 01:08:07 UTC - Last availability or vendor check: 2026-10-25 12:05:46 UTC - Stored record updated: 2026-10-25 15:21:27 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.56.63 - Registrar in stored WHOIS data: Dynadot, LLC - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date (registry RDAP, capivalsolvandra.click): 2026-06-03 07:36:41 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16b71-900e-75c1-8fb4-4969c7f9a126/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/capivalsolvandra.click - Certificate Transparency search: https://crt.sh/?q=%25.capivalsolvandra.click - Web Archive lookup: https://web.archive.org/web/*/https://capivalsolvandra.click/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed capivalsolvandra.click on its internal blocklist as a suspicious domain based on a high number of malicious detections. The recorded page title was “Capival Solvandra | AI Trading Platform | Official Website”. The domain was first seen by PhishDestroy on 2026-10-24, when an HTTP 200 response was recorded. How the scam works Because the domain is flagged as suspicious, it likely follows patterns seen in phishing or fraudulent sites that imitate legitimate services to lure users into providing credentials, payment information, or personal data. No specific behavior was observed on the captured page, so the exact scam method cannot be confirmed. Evidence VirusTotal analysis on 2026-10-22 (retrieved 2026-10-24) reported 14 malicious and 3 suspicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-24 reported no flag. urlscan.io captured on 2026-10-24 gave a malicious engine score of 99 but an overall non‑malicious verdict. Cloudflare Radar scan on 2026-10-24 marked the domain malicious for malware and scam categories. OTX listed five pulses mentioning the domain as of 2026-10-24. PhishDestroy’s internal blocklist includes the domain, while external blocklists showed zero hits on the check date. Infrastructure The domain was registered with Dynadot on 2026-06-03, 143 days before first sighting. The recorded IP address was 185.62.56.63, associated with Snel.com B.V. in the Netherlands and served through Cloudflare nameservers raina.ns.cloudflare.com and kellen.ns.cloudflare.com. The TLS certificate, issued by ZeroSSL, was valid from 2026-09-19 to 2026-12-18 and covered only capivalsolvandra.click. What to do Visitors should avoid entering credentials, payment details, or personal information on the site; if any were submitted, change related passwords and monitor accounts for unauthorized activity. Defenders should add the domain to blocklists and review network logs for connections to the recorded IP address or the domain itself. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16b71-900e-75c1-8fb4-4969c7f9a126/ Cloudflare Radar report: https://radar.cloudflare.com/scan/0e5a8f89-b0f6-407b-b148-7b6381026c26 URLQuery report: https://urlquery.net/report/90712591-acc3-4bd9-86f0-bf2d437438e2 Stored capture screenshot: https://urlscan.io/screenshots/01a16b71-900e-75c1-8fb4-4969c7f9a126.png Cloudflare Radar screenshot (2026-10-24T01:43:04Z): https://screenshots.phishdestroy.io/cf/0e5a8f89-b0f6-407b-b148-7b6381026c26.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/90712591-acc3-4bd9-86f0-bf2d437438e2.png VirusTotal report: https://www.virustotal.com/gui/domain/capivalsolvandra.click Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=capivalsolvandra.click Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 02:43:44 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16b71-900e-75c1-8fb4-4969c7f9a126.png Captured: 2026-10-24 01:08:07 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16b71-900e-75c1-8fb4-4969c7f9a126.png Captured: 2026-10-24 01:08:07 UTC Source report: https://urlscan.io/result/01a16b71-900e-75c1-8fb4-4969c7f9a126/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0e5a8f89-b0f6-407b-b148-7b6381026c26.png Captured: 2026-10-24 01:43:04 UTC Source report: https://radar.cloudflare.com/scan/0e5a8f89-b0f6-407b-b148-7b6381026c26 SHA-256: 6dce5d371471857b48aa41c9400771554c58e1818ab948a62fe1cf0cd7d74abe - URLQuery: https://screenshots.phishdestroy.io/uq/90712591-acc3-4bd9-86f0-bf2d437438e2.png Source report: https://urlquery.net/report/90712591-acc3-4bd9-86f0-bf2d437438e2 SHA-256: 349e2082a86b0e5a212e64a351a2916b09b44b5389522e2ebcc0b8ed15638780 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T01:39:05Z", "uuid": "01a16b71-900e-75c1-8fb4-4969c7f9a126", "scanned_at": "2026-10-24T01:06:17Z", "final_url": "https://capivalsolvandra.click/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://capivalsolvandra.click/", "from": "http://capivalsolvandra.click/", "status": 307 } ], "ip": "185.62.56.63", "ptr": "s46060.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.18.94.41", "142.251.20.94", "104.18.95.41", "104.16.123.96", "104.17.207.5", "104.17.24.14", "142.250.154.95", "185.62.56.63" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "db82efee71b640aadae0aaadac2e59daae51266c9c1762c82f18343f9b2d6313", "script_hashes": [ "d2dc7d5373b3177e581fd015a9e5e26cc8094dc0e89df0305ab00e65db01292d" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "__visitorCountry", "ClientJS", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "capivalsolvandra.click" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "capivalsolvandra.click", "protocol": "TLS 1.3", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "domain_age_days": 142, "apex_age_days": 142, "tls_age_days": 35, "tls_valid_days": 90, "requests": 26, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T01:44:04Z", "uuid": "0e5a8f89-b0f6-407b-b148-7b6381026c26", "scanned_at": "2026-10-24T01:43:04Z", "final_url": "https://capivalsolvandra.click/", "status": 200, "history": [ { "url": "https://capivalsolvandra.click/", "status": 200 } ], "dom_hash": "4fdfe66a639e5326515d497053fb4c53304b0556c8244041b0c15cbc91a9cb73", "doc_hash": "db82efee71b640aadae0aaadac2e59daae51266c9c1762c82f18343f9b2d6313", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "capivalsolvandra.click", "type": "A", "value": "185.62.56.63" } ], "dnssec_valid": false, "ip": "185.62.56.63", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-06-03T07:36:41Z", "updated": "2026-06-08T07:37:11Z", "expires": "2027-06-03T07:36:41Z", "nameservers": [ "raina.ns.cloudflare.com", "kellen.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-24T02:42:47Z", "analysis_at": "2026-10-22T09:09:05Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 14, "suspicious": 3, "undetected": 30 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "registrar": "Dynadot, LLC", "created": "2026-06-03T07:36:41Z", "expires": "2027-06-03T07:36:41Z", "updated": "2026-06-08T07:37:11Z", "first_seen": "2026-06-03T09:16:54Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "kellen.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.56.63" }, { "ttl": 21600, "type": "NS", "value": "raina.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "kellen.ns.cloudflare.com" } ], "dns_at": "2026-10-22T09:09:19Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "capivalsolvandra.click" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "83a9db6d41b3c55defe883ff2f40eea3", "sha256": "0110d140694e3258941bc155d179ab8cb3a92e4ff978cdb1479cc0a2db6535f9", "subject": "capivalsolvandra.click", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "whois": { "registrar": "Dynadot, LLC", "registrar_iana_id": "472", "registrar_url": "www.dynadot.com", "created": "2026-06-03T07:36:41Z", "updated": "2026-06-08T07:37:11Z", "expires": "2027-06-03T07:36:41Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "kellen.ns.cloudflare.com", "raina.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-03T07:36:41Z", "last changed": "2026-06-03T08:46:12Z", "registration": "2026-06-03T07:36:41Z", "registrar expiration": "2027-06-03T07:36:41Z", "last update of RDAP database": "2026-10-16T07:12:35Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T01:44:18Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "capivalsolvandra.click" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-24T01:10:16Z", "first": "2026-10-24T01:10:16Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 13321 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://capivalsolvandra.click/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://capivalsolvandra.click/", "title": "Capival Solvandra | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Capival Solvandra | Premium AI Trading Automation & Bot Orchestration", "ogSiteName": "Capival Solvandra", "themeColor": "#0d1118", "description": "Capival Solvandra delivers premium automation for trading workflows, featuring AI-guided guidance, bot orchestration, and enterprise-grade tools for precise execution.", "twitterCard": "summary", "canonicalUrl": "https://capivalsolvandra.click/", "ogDescription": "Capival Solvandra delivers enterprise-grade automation for trading workflows, featuring AI-assisted guidance, bot orchestration, and precise execution tools designed for professionals." }, "trackers": { "requests": 21, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 4 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 53, "tls": 20, "wait": 16, "connect": 13, "download": 69 }, "response_ms": 171 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 47930, "co2_grams": 0.0018, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "108.162.195.160", "host": "kellen.ns.cloudflare.com" }, { "ip": "172.64.34.241", "host": "raina.ns.cloudflare.com" } ], "zone": "capivalsolvandra.click" }, "location": { "ip": "185.62.56.63", "asn": "62370", "org": "Snel.com B.V.", "city": "Schiedam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "capivalsolvandra.click" }, "dns": { "A": [ "185.62.56.63" ], "NS": [ "raina.ns.cloudflare.com", "kellen.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"kellen.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416210150, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.63", "family": 4 }, "redirects": { "chain": [ "https://capivalsolvandra.click" ] }, "linked_pages": { "internal_count": 11 }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-06-03T07:36:41Z", "updated": "2026-06-08T07:37:11Z", "expires": "2027-06-03T07:36:41Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "raina.ns.cloudflare.com", "kellen.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```