# PhishDestroy domain threat record: chiarovalzenzaai.pro Content language: English Canonical HTML report: https://phishdestroy.io/domain/chiarovalzenzaai.pro/ Machine-readable companion: https://phishdestroy.io/domain/chiarovalzenzaai.pro/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 08:04:22 UTC - Last availability or vendor check: 2026-10-24 11:13:45 UTC - Stored record updated: 2026-10-24 12:53:29 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.42.207 - Registrar in stored WHOIS data: NETIM SAS - Last stored HTTP status: 200 - Registration date (registry RDAP, chiarovalzenzaai.pro): 2026-06-21 07:02:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16cf8-f969-75ff-9186-951ba1a025f7/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/chiarovalzenzaai.pro - Certificate Transparency search: https://crt.sh/?q=%25.chiarovalzenzaai.pro - Web Archive lookup: https://web.archive.org/web/*/https://chiarovalzenzaai.pro/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed chiarovalzenzaai.pro as a suspicious domain based on automated security assessments. The recorded page title is “chiaro valzenza ai | AI Trading Platform | Official Website”. The domain was first seen by PhishDestroy on 2026-10-24, when an HTTP 200 response was recorded. How the scam works The multiple malicious and phishing labels from security vendors indicate the site could be used for typical fraudulent activities such as credential harvesting or malware delivery, but no concrete malicious behavior was observed on the captured page. Evidence VirusTotal scanned the domain on 2026-10-24 and returned 13 malicious and 3 suspicious detections out of 92 engines, with vendors including BitDefender, Fortinet and Kaspersky labeling it phishing. Google Safe Browsing checked on 2026-10-24 and did not flag the site. urlscan captured the page on 2026-08-04, gave an overall clean verdict but its engine analysis assigned a malicious score of 97. Cloudflare Radar scanned on 2026-10-24 and marked the domain as malicious under the malware category. OTX listed two pulses referencing the domain as of 2026-10-24. PhishDestroy’s internal blocklist includes the domain, while external blocklists showed no entries at the time of checking. Infrastructure The domain was registered on 2026-06-21 through NETIM SAS, giving it 125 days of age before first detection. DNS records show A records for 104.21.42.207 and 172.67.210.19 and AAAA records in the 2606:4700:: range, all belonging to Cloudflare’s network. The TLS certificate observed on 2026-10-24 was issued by Google Trust Services, covers chiarovalzenzaai.pro, and is valid until 2027-01-16. Nameservers are kipp.ns.cloudflare.com and kallie.ns.cloudflare.com; MX records point to mx1.netim.net and mx2.netim.net. What to do Visitors should avoid entering credentials or downloading files from the site; if any information was submitted, change associated passwords and monitor accounts for unusual activity. Defenders should add chiarovalzenzaai.pro to blocklists, monitor DNS queries for the recorded IPs, and review web proxy or firewall logs for access attempts. No wallet‑related actions are required because no wallet‑specific activity was observed. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019fcbc1-61d6-73c9-b62e-920ceb0ddff0/ Cloudflare Radar report: https://radar.cloudflare.com/scan/7f74e597-51c2-4574-9c07-db2b34ca33aa Stored capture screenshot: https://urlscan.io/screenshots/019fcbc1-61d6-73c9-b62e-920ceb0ddff0.png Cloudflare Radar screenshot (2026-10-24T08:06:02Z): https://screenshots.phishdestroy.io/cf/7f74e597-51c2-4574-9c07-db2b34ca33aa.png VirusTotal report: https://www.virustotal.com/gui/domain/chiarovalzenzaai.pro Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=chiarovalzenzaai.pro Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 08:09:21 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16cf8-f969-75ff-9186-951ba1a025f7.png Captured: 2026-10-24 08:15:39 UTC - URLScan capture: https://screenshots.phishdestroy.io/019fcbc1-61d6-73c9-b62e-920ceb0ddff0.png Captured: 2026-10-24 08:04:22 UTC Source report: https://urlscan.io/result/01a16cf8-f969-75ff-9186-951ba1a025f7/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7f74e597-51c2-4574-9c07-db2b34ca33aa.png Captured: 2026-10-24 08:06:02 UTC Source report: https://radar.cloudflare.com/scan/7f74e597-51c2-4574-9c07-db2b34ca33aa SHA-256: 0d9cc073f9c3fe796860462e2acf706b621c3f07f7455afe6e0736f09a53c59c - URLQuery: https://screenshots.phishdestroy.io/uq/a7ae9607-c667-46fe-bc26-ef85ca95a814.png Source report: https://urlquery.net/report/a7ae9607-c667-46fe-bc26-ef85ca95a814 SHA-256: 1432741e57e78e31908db26ec3de7bc78e0ec0df326ebb82175847062a3f06a7 - URLScan · 2026-08-04: https://screenshots.phishdestroy.io/us/019fcbc1-61d6-73c9-b62e-920ceb0ddff0.png Captured: 2026-08-04 07:51:22 UTC Source report: https://urlscan.io/result/019fcbc1-61d6-73c9-b62e-920ceb0ddff0/ SHA-256: 56bca33a801f4cf986a91fc82ac1dd27fc73f9b872ce95e7a0e1f0e723efcfb9 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T10:14:10Z", "uuid": "01a16cf8-f969-75ff-9186-951ba1a025f7", "scanned_at": "2026-10-24T08:13:49Z", "final_url": "https://chiarovalzenzaai.pro/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://chiarovalzenzaai.pro/", "from": "http://chiarovalzenzaai.pro/", "status": 307 } ], "ip": "104.21.42.207", "domains": [ "cdnjs.cloudflare.com", "challenges.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflare.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.17.208.5", "142.251.127.95", "104.17.24.14", "104.21.42.207" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "8fec25b821722f1fc2414b6c8a267c0a504190d6411c3aba175745f06790b9b2", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_adova", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "chiarovalzenzaai.pro" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "chiarovalzenzaai.pro", "protocol": "TLS 1.3", "valid_to": "2027-01-16T08:42:55Z", "valid_from": "2026-10-18T07:42:57Z" }, "domain_age_days": 124, "apex_age_days": 124, "tls_age_days": 6, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; img-src 'sel", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T08:08:24Z", "uuid": "7f74e597-51c2-4574-9c07-db2b34ca33aa", "scanned_at": "2026-10-24T08:06:02Z", "final_url": "https://chiarovalzenzaai.pro/", "status": 200, "history": [ { "url": "https://chiarovalzenzaai.pro/", "status": 200 } ], "dom_hash": "37b2d57a49eb51728336c28d57407cafa7e301170fed0f29df6359203f0aaa9b", "doc_hash": "7d25336c6a0877912769638ff73fa5e345dea08117ffb340236cb630d9b62f72", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "chiarovalzenzaai.pro", "type": "A", "value": "104.21.42.207" }, { "name": "chiarovalzenzaai.pro", "type": "A", "value": "172.67.210.19" }, { "name": "chiarovalzenzaai.pro", "type": "AAAA", "value": "2606:4700:3036::ac43:d213" }, { "name": "chiarovalzenzaai.pro", "type": "AAAA", "value": "2606:4700:3032::6815:2acf" } ], "dnssec_valid": false, "ip": "104.21.42.207", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "NETIM SAS", "created": "2026-06-21T07:02:34Z", "updated": "2026-08-12T02:27:43Z", "expires": "2027-06-21T07:02:34Z", "nameservers": [ "kipp.ns.cloudflare.com", "kallie.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-24T08:05:04Z", "analysis_at": "2026-10-23T12:16:30Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-06-21T10:13:30Z", "dns": [ { "ttl": 300, "type": "TXT", "value": "v=spf1 ip4:185.26.104.0/22 ~all" }, { "ttl": 21600, "type": "NS", "value": "kipp.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.210.19" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::ac43:d213" }, { "ttl": 21600, "type": "NS", "value": "kallie.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "kallie.ns.cloudflare.com" }, { "ttl": 300, "type": "MX", "value": "mx1.netim.net", "priority": 10 }, { "ttl": 300, "type": "MX", "value": "mx2.netim.net", "priority": 10 }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::6815:2acf" }, { "ttl": 300, "type": "A", "value": "104.21.42.207" } ], "dns_at": "2026-10-23T12:24:09Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "chiarovalzenzaai.pro" ], "issuer": "Google Trust Services / WE1", "serial": "74d324707d93cf831392078794829564", "sha256": "87204557eb624b9cab871b7d76f039d7537bea8f6161843574bcf7ecccc9faf4", "subject": "chiarovalzenzaai.pro", "valid_to": "2027-01-16T08:42:55Z", "valid_from": "2026-10-18T07:42:57Z" }, "rdap": { "status": [ "active", "client transfer prohibited" ], "events": { "expiration": "2027-06-21T21:00:00Z", "last changed": "2026-06-21T09:02:32Z", "registration": "2026-06-21T00:00:00Z", "registrar expiration": "2027-06-21T21:00:00Z", "last update of RDAP database": "2026-10-23T14:24:08Z" }, "registrar": "NETIM SAS", "registrar_iana_id": "1519" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T08:08:41Z", "mail_config": { "mx": [ "mx1.netim.net", "mx2.netim.net" ], "spf": "v=spf1 ip4:185.26.104.0/22 ~all", "spf_lookups": 0 }, "caa_records": { "domain": "chiarovalzenzaai.pro" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-24T08:07:53Z", "first": "2026-10-24T08:07:53Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 42729 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://chiarovalzenzaai.pro/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "title": "chiaro valzenza ai | AI Trading Platform | Official Website", "robots": "index, follow", "themeColor": "#0d0d12", "description": "Chiaro Valzenza AI unlocks intelligent, AI-powered trading automation with precise execution workflows, real-time monitoring, and robust risk controls for confident decision-making.", "canonicalUrl": "https://chiarovalzenzaai.pro/" }, "trackers": { "requests": 21, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 9 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 6, "tls": 18, "wait": 110, "connect": 8, "download": 74 }, "response_ms": 216 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 145248, "co2_grams": 0.0053, "cleaner_than": 14 }, "dns_server": { "ns": [ { "ip": "108.162.194.85", "host": "kallie.ns.cloudflare.com" }, { "ip": "162.159.44.240", "host": "kipp.ns.cloudflare.com" } ], "zone": "chiarovalzenzaai.pro" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3032::6815:2acf", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "chiarovalzenzaai.pro" }, "dns": { "A": [ "104.21.42.207", "172.67.210.19" ], "MX": [ "{\"exchange\": \"mx1.netim.net\", \"priority\": 10}", "{\"exchange\": \"mx2.netim.net\", \"priority\": 10}" ], "NS": [ "kallie.ns.cloudflare.com", "kipp.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"kallie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418085678, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 ip4:185.26.104.0/22 ~all" ], "AAAA": [ "2606:4700:3032::6815:2acf", "2606:4700:3036::ac43:d213" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.g", "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3032::6815:2acf", "family": 6 }, "redirects": { "chain": [ "https://chiarovalzenzaai.pro" ] }, "linked_pages": { "internal_count": 43 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com;", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```