# PhishDestroy domain threat record: dvondaluron.click

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dvondaluron.click/
Machine-readable companion: https://phishdestroy.io/domain/dvondaluron.click/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 12:07:43 UTC
- Last availability or vendor check: 2026-10-25 12:30:15 UTC
- Stored record updated: 2026-10-25 14:07:17 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: celer

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-27 10:46:35 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17308-67a2-717b-868a-9804b2c3f0c4/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dvondaluron.click
- Certificate Transparency search: https://crt.sh/?q=%25.dvondaluron.click
- Web Archive lookup: https://web.archive.org/web/*/https://dvondaluron.click/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed dvondaluron.click as a suspicious domain based on automated risk indicators. The recorded page title is “Dvondaluron | AI Trading Platform | Official Direct Gateway”. PhishDestroy first observed the domain on 2026-10-25 and recorded an HTTP 200 response on that date.

How the scam works
The available detections do not confirm a particular fraud technique. Sites that present fake AI‑trading services are commonly used to lure visitors into providing credentials, installing malware, or interacting with fraudulent investment offers. No credential‑stealing form or wallet‑draining code was observed on the captured page.

Evidence
VirusTotal scanned the domain on 2026-10-16 and reported 15 detections across 92 engines, including 12 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-25 and did not flag the site. OTX listed three pulses referencing the domain as of 2026-10-25. Cloudflare Radar flagged the domain as malicious with a malware category on 2026-10-25. Urlscan captured the page on 2026-10-25; its engine score was 97 (malicious) but the overall verdict was non‑malicious. PhishDestroy’s internal blocklist marks the domain as listed, while external blocklists reported zero matches on the same date.

Infrastructure
The domain was registered on 2026-08-27 through Spaceship, Inc. It is served behind Cloudflare, with recorded IP 188.114.96.3 located in GB and additional Cloudflare edge IPs observed in scans. TLS was issued by Google Trust Services, valid from 2026-08-27 to 2026-11-25. DNS records include A and AAAA entries pointing to Cloudflare nodes; DNSSEC is not enabled.

What to do
Do not submit credentials, personal data or download files from this site; if any credentials were entered, change them immediately and enable MFA where possible. Users who suspect exposure should review account activity for unauthorized actions. Defenders should block dvondaluron.click at the network perimeter and monitor logs for connections to the recorded IP addresses.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17308-67a2-717b-868a-9804b2c3f0c4/
Cloudflare Radar report: https://radar.cloudflare.com/scan/2bc302d8-35ed-453e-8ecb-224b2b9d67a1
Stored capture screenshot: https://urlscan.io/screenshots/01a17308-67a2-717b-868a-9804b2c3f0c4.png
Cloudflare Radar screenshot (2026-10-25T12:11:29Z): https://screenshots.phishdestroy.io/cf/2bc302d8-35ed-453e-8ecb-224b2b9d67a1.png
URLScan screenshot (2026-09-16T12:15:32Z): https://screenshots.phishdestroy.io/us/01a0aa24-aff1-774f-b33b-0a0ddd609315.png
URLScan capture report: https://urlscan.io/result/01a0aa24-aff1-774f-b33b-0a0ddd609315/
VirusTotal report: https://www.virustotal.com/gui/domain/dvondaluron.click
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dvondaluron.click
Archived copy: https://web.archive.org/web/20261025120905/https://dvondaluron.click/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 12:43:51 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17308-67a2-717b-868a-9804b2c3f0c4.png
  Captured: 2026-10-25 12:30:15 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0aed5-ff85-7249-9220-fda4fc41c63b.png
  Captured: 2026-10-25 12:07:43 UTC
  Source report: https://urlscan.io/result/01a17308-67a2-717b-868a-9804b2c3f0c4/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2bc302d8-35ed-453e-8ecb-224b2b9d67a1.png
  Captured: 2026-10-25 12:11:29 UTC
  Source report: https://radar.cloudflare.com/scan/2bc302d8-35ed-453e-8ecb-224b2b9d67a1
  SHA-256: b3061893a8b797f04b41995e5cfd31d71f87e49d2866c259cbed92244ec9eba3
- URLQuery: https://screenshots.phishdestroy.io/uq/06ff7666-1501-4642-bfe5-8e69f1064d2e.png
  Source report: https://urlquery.net/report/06ff7666-1501-4642-bfe5-8e69f1064d2e
  SHA-256: cb4d98b3d3f64aadebd430577774420ca78f82e8de05c32111a49e5a6dd2870a
- URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0aa24-aff1-774f-b33b-0a0ddd609315.png
  Captured: 2026-09-16 12:15:32 UTC
  Source report: https://urlscan.io/result/01a0aa24-aff1-774f-b33b-0a0ddd609315/
  SHA-256: be8842da76d4da71911c6bb3ae639824ef98f70d3fd05a20a35507fb4cd03317
- URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0aed5-ff85-7249-9220-fda4fc41c63b.png
  Captured: 2026-09-17 10:07:42 UTC
  Source report: https://urlscan.io/result/01a0aed5-ff85-7249-9220-fda4fc41c63b/
  SHA-256: fb39bdf935c5e641aebe1c72a0b7426a0d429c69bbd1a468f3793b524fb10152
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17300-0f11-731b-8c16-4f9bd1e3b337.png
  Captured: 2026-10-25 12:19:26 UTC
  Source report: https://urlscan.io/result/01a17300-0f11-731b-8c16-4f9bd1e3b337/
  SHA-256: b5f722fdbd3222cccd713f579aedc89851a43d2c07c21cd2cc348e8889fd6656
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17313-0d0c-746a-a41e-1afcb97a27e1.png
  Captured: 2026-10-25 12:40:05 UTC
  Source report: https://urlscan.io/result/01a17313-0d0c-746a-a41e-1afcb97a27e1/
  SHA-256: a2791492dba104ce300e5947610c72190f9a3fb516852cbabc7a1d411bdfc9f8

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T12:42:58Z",
        "uuid": "01a17308-67a2-717b-868a-9804b2c3f0c4",
        "scanned_at": "2026-10-25T12:28:26Z",
        "final_url": "https://dvondaluron.click/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dvondaluron.click/",
                "from": "http://dvondaluron.click/",
                "status": 307
            }
        ],
        "ip": "172.67.142.140",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.95.41",
            "104.18.94.41",
            "104.17.208.5",
            "142.250.195.106",
            "104.17.25.14",
            "172.67.142.140"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "698dc855fea9a7f8da76e3d7f64596a4276e0704cf18f53bff0d62c746dee893",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_viqkbfy",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "dvondaluron.click"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "dvondaluron.click",
            "protocol": "QUIC",
            "valid_to": "2026-11-25T13:30:28Z",
            "valid_from": "2026-08-27T12:30:31Z"
        },
        "domain_age_days": 58,
        "apex_age_days": 58,
        "tls_age_days": 58,
        "tls_valid_days": 90,
        "requests": 25,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; font-src 'self' https://fonts.gstat",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "no-referrer-when-downgrade",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T12:14:26Z",
        "uuid": "2bc302d8-35ed-453e-8ecb-224b2b9d67a1",
        "scanned_at": "2026-10-25T12:11:29Z",
        "final_url": "https://dvondaluron.click/",
        "status": 200,
        "history": [
            {
                "url": "https://dvondaluron.click/",
                "status": 200
            }
        ],
        "dom_hash": "2c254616eafc9bb4b1fa8c478836c6020401852d041dd0fb2e569a0e789998db",
        "doc_hash": "6cea74c129697fb512b7f251b263ed0b48822d017810ae2cc9217a383ed455f5",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "dvondaluron.click",
                "type": "A",
                "value": "104.21.79.62"
            },
            {
                "name": "dvondaluron.click",
                "type": "A",
                "value": "172.67.142.140"
            },
            {
                "name": "dvondaluron.click",
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:8e8c"
            },
            {
                "name": "dvondaluron.click",
                "type": "AAAA",
                "value": "2606:4700:3034::6815:4f3e"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.79.62",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-08-27T12:46:34Z",
            "updated": "2026-09-01T12:46:51Z",
            "expires": "2027-08-27T12:46:34Z",
            "nameservers": [
                "khalid.ns.cloudflare.com",
                "rachel.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T12:42:25Z",
        "analysis_at": "2026-10-16T19:31:44Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 12,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Spaceship, Inc.",
        "created": "2026-08-27T12:46:34Z",
        "expires": "2027-08-27T12:46:34Z",
        "updated": "2026-09-01T12:46:51Z",
        "first_seen": "2026-08-27T14:01:42Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.142.140"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:4f3e"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:8e8c"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "rachel.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.79.62"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "khalid.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "khalid.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-16T19:37:00Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "dvondaluron.click"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "ea6bd4c0adb90206130c2bb2c4152c63",
            "sha256": "52fa684afb7321b55fb63715ebd7c1b3a6991ee0fa83739de61a0715c7018260",
            "subject": "dvondaluron.click",
            "valid_to": "2026-11-25T13:30:28Z",
            "valid_from": "2026-08-27T12:30:31Z"
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862",
            "registrar_url": "https://www.spaceship.com/",
            "created": "2026-08-27T12:46:34Z",
            "updated": "2026-09-01T12:46:51Z",
            "expires": "2027-08-27T12:46:34Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "khalid.ns.cloudflare.com",
                "rachel.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-08-27T13:22:48Z",
                "registration": "2026-08-27T12:46:34Z",
                "registrar expiration": "2027-08-27T12:46:34Z",
                "last update of RDAP database": "2026-10-16T19:37:00Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T12:14:47Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dvondaluron.click"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T12:09:05Z",
            "first": "2026-10-10T02:41:45Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.06,
            "avg_page_bytes": 43533
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true,
            "sitemaps": [
                "https://dvondaluron.click/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://dvondaluron.click/",
            "title": "Dvondaluron | AI Trading Platform | Official Direct Gateway",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Dvondaluron | Premium AI-Driven Trading Workflows",
            "ogSiteName": "Dvondaluron",
            "themeColor": "#000000",
            "description": "Dvondaluron presents AI-powered trading assistance and automated trading bots with calm, structured controls, clear workflows, and risk-aware guidance for modern market participation.",
            "twitterCard": "summary",
            "canonicalUrl": "https://dvondaluron.click/",
            "ogDescription": "Dvondaluron delivers AI-powered trading guidance and automated bots with calm, structured controls, crystal-clear workflows, and risk-aware guidance for modern markets."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 20,
                "tls": 47,
                "wait": 292,
                "connect": 30,
                "download": 40
            },
            "response_ms": 429
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 150996,
            "co2_grams": 0.0055,
            "cleaner_than": 13
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.32.215",
                    "host": "rachel.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.53",
                    "host": "khalid.ns.cloudflare.com"
                }
            ],
            "zone": "dvondaluron.click"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "dvondaluron.click"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "rachel.ns.cloudflare.com",
                "khalid.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"khalid.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086445, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:;",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://dvondaluron.click"
            ]
        },
        "linked_pages": {
            "internal_count": 11
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-08-27T12:46:34Z",
            "updated": "2026-09-01T12:46:51Z",
            "expires": "2027-08-27T12:46:34Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "khalid.ns.cloudflare.com",
                "rachel.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsa",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "no-referrer-when-downgrade",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```