# PhishDestroy domain threat record: dinexion.org Content language: English Canonical HTML report: https://phishdestroy.io/domain/dinexion.org/ Machine-readable companion: https://phishdestroy.io/domain/dinexion.org/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 08:24:13 UTC - Last availability or vendor check: 2026-10-25 12:23:02 UTC - Stored record updated: 2026-10-25 23:22:20 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Hosting Concepts B.V. d/b/a Registrar.eu - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-01-07 18:23:09 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17232-1064-723f-8227-57691053f949/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/dinexion.org - Certificate Transparency search: https://crt.sh/?q=%25.dinexion.org - Web Archive lookup: https://web.archive.org/web/*/https://dinexion.org/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed dinexion.org as a suspicious domain based on a high number of VirusTotal detections. The recorded page title reads “Research with perspective. Invest with understanding. | Dinexion”. The domain was first seen by PhishDestroy on 2026-10-25 and returned an HTTP 200 response on that date. How the scam works The available evidence does not reveal a specific malicious workflow, but domains flagged by multiple security engines are often used for phishing, credential harvesting, or fraudulent financial offers. In such schemes attackers mimic legitimate investment or research sites to lure visitors into disclosing personal data or performing unauthorised transactions. No concrete phishing forms, wallet requests, or malware downloads were observed on the captured page. Evidence VirusTotal reported 13 malicious and 3 suspicious detections out of 92 engines (16 total) on 2026-10-20 (retrieved 2026-10-25). Vendors marking the domain malicious include AlphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker, among others. Google Safe Browsing flagged the site as clean on 2026-10-25. URLScan’s automated engine flagged the URL as malicious with a score of 54, though its overall verdict was clean on 2026-10-21. OTX listed five pulses referencing the domain as of 2026-10-25. PhishDestroy’s internal blocklist contains the domain (checked 2026-10-25) while external blocklists reported none. Infrastructure The domain was registered on 2026-01-07 through Hosting Concepts B.V. d/b/a Registrar.eu. The recorded DNS records listed Cloudflare‑served addresses (A 188.114.96.3, 188.114.97.0; AAAA 2a06:98c1:3120::3, 2a06:98c1:3121::). The TLS certificate was issued by Let’s Encrypt and was valid from 2026-09-21 to 2026-12-20. DNSSEC was not enabled. The recorded hosting network was CloudFLARENET‑EU, located in GB. What to do Treat the site as untrusted: do not submit credentials, personal data, or financial information. If any credentials were entered, change the associated passwords immediately. Organizations should block the domain at the firewall or DNS level and monitor outbound connections to the listed IP addresses. Review web‑proxy logs for any access to dinexion.org and investigate for potential credential exposure. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17232-1064-723f-8227-57691053f949/ Cloudflare Radar report: https://radar.cloudflare.com/scan/f9476df5-f8c8-4b84-ae93-89060c066cb6 URLQuery report: https://urlquery.net/report/2f06f3e0-1405-43f8-805b-103e7534c074 Stored capture screenshot: https://urlscan.io/screenshots/01a17232-1064-723f-8227-57691053f949.png Cloudflare Radar screenshot (2026-10-25T08:35:57Z): https://screenshots.phishdestroy.io/cf/f9476df5-f8c8-4b84-ae93-89060c066cb6.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/2f06f3e0-1405-43f8-805b-103e7534c074.png URLScan screenshot (2026-09-19T23:30:35Z): https://screenshots.phishdestroy.io/us/01a0bc01-cb51-772c-bfc0-952f6f74a369.png URLScan capture report: https://urlscan.io/result/01a0bc01-cb51-772c-bfc0-952f6f74a369/ URLScan screenshot (2026-09-20T09:53:13Z): https://screenshots.phishdestroy.io/us/01a0be3b-652c-7420-8988-50e83ae58cdd.png URLScan capture report: https://urlscan.io/result/01a0be3b-652c-7420-8988-50e83ae58cdd/ URLScan screenshot (2026-09-25T03:03:08Z): https://screenshots.phishdestroy.io/us/01a0d684-2bc7-75e9-b07a-473d5baba55e.png URLScan capture report: https://urlscan.io/result/01a0d684-2bc7-75e9-b07a-473d5baba55e/ URLScan screenshot (2026-10-21T01:06:25Z): https://screenshots.phishdestroy.io/us/01a15bfe-a6f7-773d-b1a4-b573a1b5b5e0.png URLScan capture report: https://urlscan.io/result/01a15bfe-a6f7-773d-b1a4-b573a1b5b5e0/ URLScan screenshot (2026-10-25T08:36:24Z): https://screenshots.phishdestroy.io/us/01a17234-16c7-77b9-952b-52c0cfa12f7d.png URLScan capture report: https://urlscan.io/result/01a17234-16c7-77b9-952b-52c0cfa12f7d/ VirusTotal report: https://www.virustotal.com/gui/domain/dinexion.org Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dinexion.org Archived copy: https://web.archive.org/web/20261025082715/https://dinexion.org/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 09:49:35 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a17232-1064-723f-8227-57691053f949.png Captured: 2026-10-25 08:36:07 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a17232-1064-723f-8227-57691053f949.png Captured: 2026-10-25 08:36:07 UTC Source report: https://urlscan.io/result/01a17232-1064-723f-8227-57691053f949/ - URLScan capture 2: https://urlscan.io/screenshots/01a15bfe-a6f7-773d-b1a4-b573a1b5b5e0.png Captured: 2026-10-25 08:24:13 UTC Source report: https://urlscan.io/result/01a17232-1064-723f-8227-57691053f949/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f9476df5-f8c8-4b84-ae93-89060c066cb6.png Captured: 2026-10-25 08:35:57 UTC Source report: https://radar.cloudflare.com/scan/f9476df5-f8c8-4b84-ae93-89060c066cb6 SHA-256: f85869e5759b7a62255cedd24a28262bcb8e39659ecf96889d5ba782ca5fb51c - URLQuery: https://screenshots.phishdestroy.io/uq/2f06f3e0-1405-43f8-805b-103e7534c074.png Source report: https://urlquery.net/report/2f06f3e0-1405-43f8-805b-103e7534c074 SHA-256: faa63a4fd009fd0aa27e8d15cea495aaeec56a03299e3786ef48d3a9dd097a04 - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0bc01-cb51-772c-bfc0-952f6f74a369.png Captured: 2026-09-19 23:30:35 UTC Source report: https://urlscan.io/result/01a0bc01-cb51-772c-bfc0-952f6f74a369/ SHA-256: 97cd70741e075096a0f27cbc4c03269035c1c1027de218676ad652374eaeff2e - URLScan · 2026-09-20: https://screenshots.phishdestroy.io/us/01a0be3b-652c-7420-8988-50e83ae58cdd.png Captured: 2026-09-20 09:53:13 UTC Source report: https://urlscan.io/result/01a0be3b-652c-7420-8988-50e83ae58cdd/ SHA-256: 1b4be7714aa7bae845928b31cadf848b97cdbbb6da0a280b5739d91b25e43250 - URLScan · 2026-09-25: https://screenshots.phishdestroy.io/us/01a0d684-2bc7-75e9-b07a-473d5baba55e.png Captured: 2026-09-25 03:03:08 UTC Source report: https://urlscan.io/result/01a0d684-2bc7-75e9-b07a-473d5baba55e/ SHA-256: c82f49a466ac9f3e33553756bd336b0f3c9e133f4ac5485c2a4c55d2b85035c3 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15bfe-a6f7-773d-b1a4-b573a1b5b5e0.png Captured: 2026-10-21 01:06:25 UTC Source report: https://urlscan.io/result/01a15bfe-a6f7-773d-b1a4-b573a1b5b5e0/ SHA-256: c82f49a466ac9f3e33553756bd336b0f3c9e133f4ac5485c2a4c55d2b85035c3 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17234-16c7-77b9-952b-52c0cfa12f7d.png Captured: 2026-10-25 08:36:24 UTC Source report: https://urlscan.io/result/01a17234-16c7-77b9-952b-52c0cfa12f7d/ SHA-256: c82f49a466ac9f3e33553756bd336b0f3c9e133f4ac5485c2a4c55d2b85035c3 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T08:39:22Z", "uuid": "01a17232-1064-723f-8227-57691053f949", "scanned_at": "2026-10-25T08:34:11Z", "final_url": "https://dinexion.org/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://dinexion.org/", "from": "http://dinexion.org/", "status": 307 } ], "ip": "2a06:98c1:3120::3", "domains": [ "region1.google-analytics.com", "equlum-app.com", "www.googletagmanager.com" ], "ips": [ "2001:4860:4802:34::36", "188.114.96.12", "172.67.150.169", "2a00:1450:4001:c15::61", "2a06:98c1:3120::3" ], "asns": [ "15169", "13335" ], "countries": [ "US", "DE" ], "doc_hash": "e55bc8aa61e9960da8754ca2b7e5df74e6a53f611f74be47e21813c92a6bc8f6", "script_hashes": [ "40d8afcbc36cb2ae0b34f0e84c97dcff08e82439f23a4b5da9136121f7b7c112" ], "globals": [ "gtag", "dataLayer", "google_tag_data", "google_tag_manager", "onYouTubeIframeAPIReady", "gaGlobal", "cleanReferrer", "menuButton", "navigation", "alert" ], "cookies": [ "dinexion_session", "_ga_LXS61CC2SN", "_ga" ], "tls": { "san": [ "*.dinexion.org", "dinexion.org" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "dinexion.org", "protocol": "TLS 1.3", "valid_to": "2026-12-20T10:21:54Z", "valid_from": "2026-09-21T10:21:55Z" }, "domain_age_days": 290, "apex_age_days": 290, "tls_age_days": 33, "tls_valid_days": 89, "requests": 10, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 54, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000;", "content-security-policy": "default-src 'self'; script-src 'self' 'nonce-akuxNGhHlenfG1+frZjYgQ==' https://www.googletagmanager.com; style-src 'self'; img-src 'self' data: https://equlum-app.com https://www.googletagmanager.com", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T08:39:23Z", "uuid": "f9476df5-f8c8-4b84-ae93-89060c066cb6", "scanned_at": "2026-10-25T08:35:57Z", "final_url": "https://dinexion.org/", "status": 200, "history": [ { "url": "https://dinexion.org/", "status": 200 } ], "dom_hash": "829abdf09a703d607e428f2e2894d5b7c35c6042e61c93282bad91ee008158f6", "doc_hash": "8965c91760baddffea6284673b2028a297cdc188e71a3706959bff04ec4eda1b", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "dinexion.org", "type": "A", "value": "188.114.97.0" }, { "name": "dinexion.org", "type": "A", "value": "188.114.96.0" }, { "name": "dinexion.org", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "dinexion.org", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.97.0", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-01-07T19:23:09Z", "updated": "2026-09-21T11:07:39Z", "expires": "2027-01-07T19:23:09Z", "nameservers": [ "elisa.ns.cloudflare.com", "titan.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T09:46:01Z", "analysis_at": "2026-10-20T06:50:07Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "created": "2026-01-07T00:00:00Z", "updated": "2026-01-07T00:00:00Z", "first_seen": "2026-01-07T19:46:19Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "elisa.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:4de0" }, { "ttl": 21600, "type": "NS", "value": "elisa.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::ac43:d420" }, { "ttl": 21600, "type": "NS", "value": "titan.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.212.32" }, { "ttl": 300, "type": "A", "value": "104.21.77.224" } ], "dns_at": "2026-10-20T06:55:21Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.dinexion.org", "dinexion.org" ], "issuer": "Let's Encrypt / YE1", "serial": "68724cda7fd00469de7b16d3bb29f7c1034", "sha256": "35404b9d38c1276d4d848c4ceb0e36788bd3d15c36591e6b39c38df88ad01451", "subject": "dinexion.org", "valid_to": "2026-12-20T10:21:54Z", "valid_from": "2026-09-21T10:21:55Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-01-07T19:23:09Z", "registration": "2026-01-07T19:23:09Z", "registrar expiration": "2027-01-07T19:23:09Z", "last update of RDAP database": "2026-10-15T23:10:39Z" }, "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "registrar_iana_id": "1647" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T08:39:40Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "dinexion.org" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T08:27:15Z", "first": "2026-05-13T19:14:17Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.01, "avg_page_bytes": 162081 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://dinexion.org/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 24 }, "social_tags": { "ogUrl": "https://dinexion.org/", "title": "Research with perspective. Invest with understanding. | Dinexion", "ogType": "website", "ogImage": "https://dinexion.org/assets/images/architecture.jpg", "ogTitle": "Research with perspective. Invest with understanding.", "ogSiteName": "Dinexion", "themeColor": "#234d43", "description": "Independent thinking for informed investors. Explore investment research, market context, and practical financial education.", "twitterCard": "summary_large_image", "canonicalUrl": "https://dinexion.org/", "ogDescription": "Independent thinking for informed investors. Explore investment research, market context, and practical financial education." }, "trackers": { "requests": 8, "trackers": [ { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Analytics", "company": "Google", "country": "US", "category": "Site Analytics", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://www.googletagmanager.com/gtag/js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 4011, "tls": 47, "wait": 70, "connect": 8, "download": 1 }, "response_ms": 4137 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "carbon": { "bytes": 23626, "co2_grams": 0.0009, "cleaner_than": 53 }, "dns_server": { "ns": [ { "ip": "162.159.38.54", "host": "elisa.ns.cloudflare.com" }, { "ip": "108.162.195.93", "host": "titan.ns.cloudflare.com" } ], "zone": "dinexion.org" }, "cookies": { "cookies": [ { "name": "dinexion_session", "secure": true, "session": true, "http_only": true, "same_site": "Lax" }, { "name": "_ga_LXS61CC2SN" }, { "name": "_ga" } ] }, "location": { "ip": "2a06:98c1:3120::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "dinexion.org" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "titan.ns.cloudflare.com", "elisa.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"elisa.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416426528, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000;", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "default-src 'self'; script-src 'self' 'nonce-BbcK/18xxdg3N+7WtCY5Rg==' https://www.googletagmanager.com; style-src 'self", "strictTransportPolicy": "max-age=31536000;", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://dinexion.org" ] }, "linked_pages": { "internal_count": 35 }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-01-07T19:23:09Z", "updated": "2026-09-21T11:07:39Z", "expires": "2027-01-07T19:23:09Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "elisa.ns.cloudflare.com", "titan.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000;", "content-security-policy": "default-src 'self'; script-src 'self' 'nonce-hSxn6a7bRhqRFUNnBLnb3g==' https://www.googletagmanager.com; style-src 'self'; img-src 'self' data: https://equlum-app.com https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; connect-src 'self' https://www.googletagmanager.com", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } } } } ```