# PhishDestroy domain threat record: corvenhalltrust.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/corvenhalltrust.com/
Machine-readable companion: https://phishdestroy.io/domain/corvenhalltrust.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 23:36:11 UTC
- Last availability or vendor check: 2026-10-25 23:36:11 UTC
- Stored record updated: 2026-10-26 01:00:12 UTC
- VirusTotal detections in the stored snapshot: 4/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-25 10:17:38 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1756b-1ebe-72b9-b924-5584b41f934e/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/corvenhalltrust.com
- Certificate Transparency search: https://crt.sh/?q=%25.corvenhalltrust.com
- Web Archive lookup: https://web.archive.org/web/*/https://corvenhalltrust.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI assessment recorded on 2026-10-26 classified corvenhalltrust.com as malicious because the site presented itself as an “AI Platform for Smarter Supplemental Income,” a vague claim often used in fraudulent investment schemes. The page title and description were captured on the same date, and an HTTP 200 response was observed. Google Safe Browsing and OTX checks performed on 2026-10-26 returned no matches, and no external blocklists listed the domain.

How the scam works
An AI‑investment scam typically advertises AI‑driven market recommendations or guaranteed supplemental income and urges visitors to deposit funds or share account credentials, relying on the allure of advanced technology to conceal the absence of a real product. Victims who provide money or access are left without returns and may have their accounts compromised.

Evidence
VirusTotal scanned the domain on 2026-10-25 and reported four detections from 92 engines, labeling it as spam by Sophos, Fortinet and alphaMountain.ai and malicious by Netcraft. URLScan captured the site on 2026-10-25, assigned a malicious score of 99 with tags urlscan‑ml and urlscan‑ml‑60c5e22, while its overall verdict was non‑malicious. Cloudflare Radar scan on 2026-10-26 flagged the URL with the “Scam” risk and listed additional security‑threat tags. PhishDestroy’s internal blocklist marked the domain as malicious on 2026-10-26, whereas external blocklists and OTX reported zero hits.

Infrastructure
The domain was registered on 2026-08-25 through Dynadot Inc, making it 62 days old at the time of first sighting. The recorded IP address was 158.94.210.119, associated with Omegatech LTD in the Netherlands. TLS information captured on 2026-10-25 showed a Let’s Encrypt certificate issued on 2026-09-08 for corvenhalltrust.com and its wildcard, valid until 2026-12-07, with DNSSEC not enabled.

What to do
Visitors should not submit personal, financial or credential information to the site and should ignore any investment prompts. If credentials were entered, change the associated passwords and monitor the accounts for unauthorized activity. Defenders should block corvenhalltrust.com, log any connections to the recorded IP, and add the observed indicators to intrusion‑detection or firewall rules.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1756b-1ebe-72b9-b924-5584b41f934e/
Cloudflare Radar report: https://radar.cloudflare.com/scan/d8554da8-6034-47fc-98b1-f045c7565bc8
Stored capture screenshot: https://i.ibb.co/S4hG56YM/4d875e2ad3db.png
Cloudflare Radar screenshot (2026-10-25T23:36:51Z): https://screenshots.phishdestroy.io/cf/d8554da8-6034-47fc-98b1-f045c7565bc8.png
URLScan screenshot (2026-10-25T23:27:52Z): https://screenshots.phishdestroy.io/us/01a17564-351c-70cb-aed4-0efc51f0084a.png
URLScan capture report: https://urlscan.io/result/01a17564-351c-70cb-aed4-0efc51f0084a/
URLScan screenshot (2026-10-25T23:35:22Z): https://screenshots.phishdestroy.io/us/01a1756b-1d14-7124-9977-faf49e5b926f.png
URLScan capture report: https://urlscan.io/result/01a1756b-1d14-7124-9977-faf49e5b926f/
VirusTotal report: https://www.virustotal.com/gui/domain/corvenhalltrust.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=corvenhalltrust.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 23:37:56 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/S4hG56YM/4d875e2ad3db.png
  Captured: 2026-10-25 23:36:11 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1756b-1ebe-72b9-b924-5584b41f934e.png
  Captured: 2026-10-25 23:36:11 UTC
  Source report: https://urlscan.io/result/01a1756b-1ebe-72b9-b924-5584b41f934e/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d8554da8-6034-47fc-98b1-f045c7565bc8.png
  Captured: 2026-10-25 23:36:51 UTC
  Source report: https://radar.cloudflare.com/scan/d8554da8-6034-47fc-98b1-f045c7565bc8
  SHA-256: e874b6faa497a7e9b00d508a258b087d8ef4e18d4cdc3c713169ee612c744a1c
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17564-351c-70cb-aed4-0efc51f0084a.png
  Captured: 2026-10-25 23:27:52 UTC
  Source report: https://urlscan.io/result/01a17564-351c-70cb-aed4-0efc51f0084a/
  SHA-256: 70968317ee688033067ae5b56ba8ea4bd61b25cea57ac6dd407e17033fc52527
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1756b-1d14-7124-9977-faf49e5b926f.png
  Captured: 2026-10-25 23:35:22 UTC
  Source report: https://urlscan.io/result/01a1756b-1d14-7124-9977-faf49e5b926f/
  SHA-256: f8fa8f03d0bdb5a236eec968b81a9497179293d50b91a0d40cf30cb69ceadf59

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T23:37:05Z",
        "uuid": "01a1756b-1ebe-72b9-b924-5584b41f934e",
        "scanned_at": "2026-10-25T23:35:23Z",
        "final_url": "https://corvenhalltrust.com/",
        "status": 200,
        "redirected": "sub-domain",
        "redirects": [
            {
                "to": "https://www.corvenhalltrust.com/",
                "from": "http://www.corvenhalltrust.com/",
                "status": 307
            },
            {
                "to": "https://corvenhalltrust.com/",
                "from": "https://www.corvenhalltrust.com/",
                "status": 301
            }
        ],
        "ip": "158.94.210.119",
        "domains": [
            "www.corvenhalltrust.com"
        ],
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "82d043e40cf87832b0f69921fdf317c332bcbede91724d108d496dd4c35c824f",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.corvenhalltrust.com",
                "corvenhalltrust.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "corvenhalltrust.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-07T11:21:24Z",
            "valid_from": "2026-09-08T11:21:25Z"
        },
        "domain_age_days": 60,
        "apex_age_days": 60,
        "tls_age_days": 47,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T23:37:06Z",
        "uuid": "d8554da8-6034-47fc-98b1-f045c7565bc8",
        "scanned_at": "2026-10-25T23:36:51Z",
        "final_url": "https://corvenhalltrust.com/",
        "status": 200,
        "history": [
            {
                "url": "https://corvenhalltrust.com/",
                "status": 200
            }
        ],
        "dom_hash": "b1428f6ca14fc0cb36878525a63098ce4b8812b01a2aad6767e62373064145c0",
        "doc_hash": "e87381862acd181e437ae208ce16e6d230206d8f65f4bea7749cf2fd231a4a89",
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Scam",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "corvenhalltrust.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-25T12:17:38Z",
            "updated": "2026-08-25T12:19:13Z",
            "expires": "2027-08-25T12:17:38Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T23:36:42Z",
        "analysis_at": "2026-10-25T09:10:30Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 1,
            "suspicious": 3,
            "undetected": 36
        },
        "detections": {
            "Sophos": "spam",
            "Fortinet": "spam",
            "Netcraft": "malicious",
            "alphaMountain.ai": "spam"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Spam (alphaMountain.ai)"
        },
        "registrar": "Dynadot Inc",
        "created": "2026-08-25T12:17:38Z",
        "expires": "2027-08-25T12:17:38Z",
        "updated": "2026-08-25T12:19:13Z",
        "first_seen": "2026-08-26T11:49:36Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.corvenhalltrust.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dns_at": "2026-10-25T09:54:01Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.corvenhalltrust.com",
                "corvenhalltrust.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "59c2724a6caf4539bda6e9c7bbefecb7c55",
            "sha256": "627ae990ed5e7a92c8561c4fb252f4fbc70424bd062fe37cdcff90ab4f51b858",
            "subject": "corvenhalltrust.com",
            "valid_to": "2026-12-07T11:21:24Z",
            "valid_from": "2026-09-08T11:21:25Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-08-25T12:17:38Z",
            "updated": "2026-08-25T12:19:13Z",
            "expires": "2027-08-25T12:17:38Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-25T12:17:38Z",
                "last changed": "2026-09-08T12:20:02Z",
                "registration": "2026-08-25T12:17:38Z",
                "registrar expiration": "2027-08-25T12:17:38Z",
                "last update of RDAP database": "2026-10-23T11:08:29Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T23:37:22Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "corvenhalltrust.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://corvenhalltrust.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Corvenhall Trust — AI Platform for Smarter Supplemental Income",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Corvenhall Trust offers continuously updated AI-driven market recommendations and zero trading fees, so you keep every gain the platform helps you identify. Get started today.",
            "canonicalUrl": "https://corvenhalltrust.com/"
        },
        "trackers": {
            "requests": 56,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1794,
                "tls": 132,
                "wait": 122,
                "connect": 69,
                "download": 138
            },
            "response_ms": 2255
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "carbon": {
            "bytes": 75335,
            "co2_grams": 0.0028,
            "cleaner_than": 28
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "corvenhalltrust.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "corvenhalltrust.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.corvenhalltrust.com\", \"serial\": 2026090802, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://corvenhalltrust.com"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-25T12:17:38Z",
            "updated": "2026-08-25T12:19:13Z",
            "expires": "2027-08-25T12:17:38Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```