# PhishDestroy domain threat record: clearstakevalence.net Content language: English Canonical HTML report: https://phishdestroy.io/domain/clearstakevalence.net/ Machine-readable companion: https://phishdestroy.io/domain/clearstakevalence.net/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 23:21:45 UTC - Last availability or vendor check: 2026-10-25 23:21:45 UTC - Stored record updated: 2026-10-26 01:00:16 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-09-30 13:26:05 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1755d-dc69-75f5-a959-2d545c942177/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/clearstakevalence.net - Certificate Transparency search: https://crt.sh/?q=%25.clearstakevalence.net - Web Archive lookup: https://web.archive.org/web/*/https://clearstakevalence.net/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added clearstakevalence.net to its internal blocklist as a suspicious domain. The recorded page title was “Clear Stakevalence — AI Platform for Business Capital Strategy” and the domain was first seen on 2026-10-26, 26 days after registration on 2026-09-30. How the scam works No malicious behavior was observed on the page, but newly‑registered sites that claim financial AI services can be used to solicit personal or payment information. Such schemes typically rely on credibility cues to harvest credentials or lure users into fraudulent investments. Evidence VirusTotal scanned the domain on 2026-10-25 and reported zero detections from 92 engines; Google Safe Browsing also returned no flag on 2026-10-26. Spamhaus DBL listed the domain as spam on 2026-10-26 and OTX recorded three pulses mentioning it on the same day. URLScan’s machine‑learning engine assigned a malicious score of 96 on 2026-10-25, while its overall verdict was non‑malicious, and PhishDestroy’s internal list marked the domain as suspicious. Infrastructure The domain was registered with Dynadot Inc on 2026-09-30 and was observed pointing to IP 158.94.210.119, which was associated with Omegatech LTD in the Netherlands. The site used a TLS 1.3 certificate from Let’s Encrypt that was valid until 2027-01-14 and was served over HTTPS. What to do Visitors should avoid submitting credentials, financial details, or downloading files from the site and treat any contact as potentially fraudulent. Organizations can block clearstakevalence.net at network perimeters and monitor outbound traffic to its IP address; if personal data was entered, change passwords and watch accounts for unauthorized activity. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1755d-dc69-75f5-a959-2d545c942177/ Cloudflare Radar report: https://radar.cloudflare.com/scan/5ff32e33-8a2b-4a5c-bc74-8b8e2cdac04a URLQuery report: https://urlquery.net/report/ccb84a57-0124-4cc1-a95d-74a9e15fbef8 Stored capture screenshot: https://i.ibb.co/zh6jFvCK/7153bba86452.png Cloudflare Radar screenshot (2026-10-25T23:52:16Z): https://screenshots.phishdestroy.io/cf/5ff32e33-8a2b-4a5c-bc74-8b8e2cdac04a.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/ccb84a57-0124-4cc1-a95d-74a9e15fbef8.png URLScan screenshot (2026-10-04T03:43:07Z): https://screenshots.phishdestroy.io/us/01a10502-0327-758b-bfec-eac0a7bb5e09.png URLScan capture report: https://urlscan.io/result/01a10502-0327-758b-bfec-eac0a7bb5e09/ URLScan screenshot (2026-10-25T23:26:02Z): https://screenshots.phishdestroy.io/us/01a17562-9021-721b-8f8f-deb0ebef19af.png URLScan capture report: https://urlscan.io/result/01a17562-9021-721b-8f8f-deb0ebef19af/ VirusTotal report: https://www.virustotal.com/gui/domain/clearstakevalence.net Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=clearstakevalence.net Archived copy: https://web.archive.org/web/20261025232307/https://clearstakevalence.net/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 23:53:34 UTC ## Stored page captures - Primary capture: https://i.ibb.co/zh6jFvCK/7153bba86452.png Captured: 2026-10-25 23:21:45 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1755d-dc69-75f5-a959-2d545c942177.png Captured: 2026-10-25 23:21:45 UTC Source report: https://urlscan.io/result/01a1755d-dc69-75f5-a959-2d545c942177/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5ff32e33-8a2b-4a5c-bc74-8b8e2cdac04a.png Captured: 2026-10-25 23:52:16 UTC Source report: https://radar.cloudflare.com/scan/5ff32e33-8a2b-4a5c-bc74-8b8e2cdac04a SHA-256: 73d4417bd7e6b4f0c2842f22dbe93ef57b798835eaa66ae53e6db5e9d0eca760 - URLQuery: https://screenshots.phishdestroy.io/uq/ccb84a57-0124-4cc1-a95d-74a9e15fbef8.png Source report: https://urlquery.net/report/ccb84a57-0124-4cc1-a95d-74a9e15fbef8 SHA-256: b7717061914b063fb709ce3c1c3f21499e1afe981c99984e3f9039858f9529c4 - URLScan · 2026-10-04: https://screenshots.phishdestroy.io/us/01a10502-0327-758b-bfec-eac0a7bb5e09.png Captured: 2026-10-04 03:43:07 UTC Source report: https://urlscan.io/result/01a10502-0327-758b-bfec-eac0a7bb5e09/ SHA-256: 6a8972537d2c9667abb571218df887ce1f35ee70bc9133f52f47269c3b5bd65c - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17562-9021-721b-8f8f-deb0ebef19af.png Captured: 2026-10-25 23:26:02 UTC Source report: https://urlscan.io/result/01a17562-9021-721b-8f8f-deb0ebef19af/ SHA-256: bdb3779b72dad05bd6598704ed3fd6fcea53a63915a13a86091ce9ff933d3438 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T23:52:29Z", "uuid": "01a1755d-dc69-75f5-a959-2d545c942177", "scanned_at": "2026-10-25T23:20:56Z", "final_url": "https://clearstakevalence.net/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://clearstakevalence.net/", "from": "http://clearstakevalence.net/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "28a4d59398536f3fa5bfe10bee143bdd37fc243b2142b61dcbe7b8fca377b7e1", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "*.clearstakevalence.net", "clearstakevalence.net" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "clearstakevalence.net", "protocol": "TLS 1.3", "valid_to": "2027-01-14T20:31:05Z", "valid_from": "2026-10-16T20:31:06Z" }, "domain_age_days": 25, "apex_age_days": 25, "tls_age_days": 9, "tls_valid_days": 89, "requests": 7, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T23:52:33Z", "uuid": "5ff32e33-8a2b-4a5c-bc74-8b8e2cdac04a", "scanned_at": "2026-10-25T23:52:16Z", "final_url": "https://clearstakevalence.net/", "status": 200, "history": [ { "url": "https://clearstakevalence.net/", "status": 200 } ], "dom_hash": "c286722c7de4ae0849a2cfcc66f0d2631b4f978b97c8fd898ff2470a7f009f4a", "doc_hash": "93a7746471bbfcc346e797c9dab4d5f19facdc0a8cbcf52d3c34097c3bf81aef", "url_risks": [ "Scam" ], "domain_risks": [ "New Domains", "Security Risks", "Scam", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "clearstakevalence.net", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "whois": { "registrar": "Dynadot Inc", "created": "2026-09-30T15:26:05Z", "updated": "2026-10-16T21:22:58Z", "expires": "2027-09-30T15:26:05Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T23:52:04Z", "analysis_at": "2026-10-25T18:33:39Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "Dynadot Inc", "created": "2026-09-30T15:26:05Z", "expires": "2027-09-30T15:26:05Z", "updated": "2026-09-30T15:30:39Z", "first_seen": "2026-09-30T17:28:44Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.clearstakevalence.net", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-25T18:35:17Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "*.clearstakevalence.net", "clearstakevalence.net" ], "issuer": "Let's Encrypt / YE2", "serial": "5cd9afeaad55a32c2f03af39cdece51e996", "sha256": "57d89367fac6c833c7bf80a546cd296bdecba403bd6f2e1b518e8600547baec7", "subject": "clearstakevalence.net", "valid_to": "2027-01-14T20:31:05Z", "valid_from": "2026-10-16T20:31:06Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-09-30T15:26:05Z", "updated": "2026-09-30T15:30:39Z", "expires": "2027-09-30T15:26:05Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "kira.ns.cloudflare.com", "rory.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-09-30T15:26:05Z", "last changed": "2026-10-16T21:29:51Z", "registration": "2026-09-30T15:26:05Z", "registrar expiration": "2027-09-30T15:26:05Z", "last update of RDAP database": "2026-10-23T11:18:13Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T23:52:48Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "clearstakevalence.net" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-25T23:23:07Z", "first": "2026-09-30T17:49:24Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.04, "avg_page_bytes": 22933 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://clearstakevalence.net/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Clear Stakevalence — AI Platform for Business Capital Strategy", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Discover with Clear Stakevalence an AI platform that models your reserve capital against decades of market data. Replace guesswork with backtested, risk-adjusted evidence before you commit.", "canonicalUrl": "https://clearstakevalence.net/" }, "trackers": { "requests": 55, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 4 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 177, "tls": 77, "wait": 94, "connect": 73, "download": 144 }, "response_ms": 565 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 78686, "co2_grams": 0.0029, "cleaner_than": 27 }, "dns_server": { "ns": [ { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.27.158", "host": "ns1.dyna-ns.net" } ], "zone": "clearstakevalence.net" }, "cookies": { "cookies": [ { "name": "cf-c", "http_only": true, "same_site": "Lax" }, { "name": "__cf_clicked" }, { "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "clearstakevalence.net" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.clearstakevalence.net\", \"serial\": 2026101604, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://clearstakevalence.net" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-09-30T15:26:05Z", "updated": "2026-10-16T21:22:58Z", "expires": "2027-09-30T15:26:05Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```