# cuanvix.net — Dutch registration page promising €924 daily trading earnings | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/cuanvix.net/ Machine-readable companion: https://phishdestroy.io/domain/cuanvix.net/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-11-01 07:05:34 UTC - Stored record updated: 2026-11-01 10:12:59 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Registration date in stored WHOIS data: 2026-07-10 11:19:32 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a18242-ee5d-76b7-9139-b0a5faf0a203/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/cuanvix.net - Certificate Transparency search: https://crt.sh/?q=%25.cuanvix.net - Web Archive lookup: https://web.archive.org/web/*/https://cuanvix.net/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy describes cuanvix.net, a Dutch-language page inviting visitors to register for AI trading that promises €924 per day. The captured cuanvix.net page is a Dutch-language landing page that promises earnings of €924 per day through trading with Cuanvix, and it states that registration is open. The main interaction is a registration form shown inside a phone mockup, asking for first name, last name, email address and phone number, with an "Aanmelden" button beneath it. Below the hero, three steps outline creating a free account, making a first deposit, and activating AI trading. The stored VirusTotal domain result reports 3 detections out of 92 engines. CRDF reported "malicious"; SOCRadar reported "phishing". Package revision: bbbb16047eb5cb1b395a622aaa24866d361e362df68cdee0b0a1e00dd0dc6d54 Text generated (not scan time): 2026-11-01 08:14:20 Reviewed evidence snapshot: {"domain":"cuanvix.net","screenshot_available":true,"virustotal":{"detections":3,"engines":92,"malicious":2,"suspicious":1,"retrieved_date":"2026-11-01","analysis_date":"2026-10-28","flagging_vendors":["CRDF","SOCRadar","alphaMountain.ai"],"vendor_labels":{"CRDF":"malicious","SOCRadar":"phishing","alphaMountain.ai":"spam"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-27T07:45:31Z"},"virustotal_public_summary":"The stored VirusTotal domain result reports 3 detections out of 92 engines. CRDF reported \"malicious\"; SOCRadar reported \"phishing\".","page_paragraph_target_characters":516} Source facts (timestamps as stored): {"record_id":1728172,"first_recorded_at":"2026-11-01 08:05:34","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":3,"denominator":92,"malicious":2,"suspicious":1,"vendors":{"CRDF":"malicious","SOCRadar":"phishing","alphaMountain.ai":"spam"},"observed_at":"2026-10-28T13:48:31Z","checked_at":"2026-11-01 08:11:37","fetched_at":"2026-11-01T07:11:36Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":3,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","CRDF","SOCRadar"],"observed_at":"2026-10-28 13:48:31","checked_at":"2026-11-01 08:11:37","fetched_at":"2026-11-01 07:11:37","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 08:11:51"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_SPAM","checked_at":"2026-11-01 08:30:15"},"availability":{"source":"stored HTTP observation","state":"unknown","observed_at":null}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a18242-ee5d-76b7-9139-b0a5faf0a203.png Captured: 2026-11-01 07:05:34 UTC - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17c52-32a6-73eb-bd69-3c622cd569d9.png Captured: 2026-10-27 07:45:31 UTC Source report: https://urlscan.io/result/01a17c52-32a6-73eb-bd69-3c622cd569d9/ SHA-256: 881c7ed2c2429f6ca573a6bdcbcf04a9537f9abc3e79d5c1a0e1e70a9392ab68 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-01T07:13:18Z", "uuid": "01a18242-ee5d-76b7-9139-b0a5faf0a203", "scanned_at": "2026-10-28T11:26:56Z", "final_url": "http://cuanvix.net/", "domain_age_days": 109, "apex_age_days": 109, "requests": 4, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 77, "malicious": true }, "overall": { "score": 0, "malicious": false } } }, "cf": { "v": 1, "fetched_at": "2026-11-01T07:41:44Z", "uuid": "44cbc8a1-1cf2-4971-a10f-b9d3e8232d80", "scanned_at": "2026-11-01T07:12:39Z" }, "vt": { "v": 1, "fetched_at": "2026-11-01T07:11:36Z", "analysis_at": "2026-10-28T13:48:31Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 2, "suspicious": 1, "undetected": 35 }, "detections": { "CRDF": "malicious", "SOCRadar": "phishing", "alphaMountain.ai": "spam" }, "reputation": 0, "categories": { "alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)" }, "registrar": "Dynadot Inc", "created": "2026-07-10T13:19:32Z", "expires": "2027-07-10T13:19:32Z", "updated": "2026-08-13T12:44:01Z", "first_seen": "2026-07-10T14:05:06Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.cuanvix.net", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-28T13:53:04Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "cuanvix.net" ], "issuer": "Let's Encrypt / YE2", "serial": "6374fd7c042d0caa6d5678df5aa477d89", "sha256": "253a89e64af768cb01737b12a2bb57635dada301e1d0548c161a0a3174dce199", "subject": "cuanvix.net", "valid_to": "2026-11-26T11:01:13Z", "valid_from": "2026-08-28T11:01:14Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-07-10T13:19:32Z", "updated": "2026-08-13T12:44:01Z", "expires": "2027-07-10T13:19:32Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-07-10T13:19:32Z", "last changed": "2026-08-28T09:24:51Z", "registration": "2026-07-10T13:19:32Z", "registrar expiration": "2027-07-10T13:19:32Z", "last update of RDAP database": "2026-10-23T10:53:36Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-11-01T07:14:02Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "cuanvix.net" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "dns_server": { "ns": [ { "ip": "162.159.27.158", "host": "ns1.dyna-ns.net" }, { "ip": "162.159.24.5", "host": "ns2.dyna-ns.net" } ], "zone": "cuanvix.net" }, "location": { "ip": "158.94.210.119", "asn": "6461", "org": "Zayo Bandwidth", "city": "Amsterdam", "country": "NL" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns2.dyna-ns.net", "ns1.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.cuanvix.net\", \"serial\": 2026082801, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-10T13:19:32Z", "updated": "2026-08-13T12:44:01Z", "expires": "2027-07-10T13:19:32Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } } } ```