# PhishDestroy domain threat record: dvonttkrelon.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dvonttkrelon.com/
Machine-readable companion: https://phishdestroy.io/domain/dvonttkrelon.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 12:07:44 UTC
- Last availability or vendor check: 2026-10-26 00:17:57 UTC
- Stored record updated: 2026-10-26 02:04:44 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: outlook

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-29 18:28:01 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17300-5032-7139-976e-0df1ff05df22/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dvonttkrelon.com
- Certificate Transparency search: https://crt.sh/?q=%25.dvonttkrelon.com
- Web Archive lookup: https://web.archive.org/web/*/https://dvonttkrelon.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added dvonttkrelon.com to its internal blocklist on 2026-10-25 following a trusted intake. The recorded page title reads “Dvontt Krelon — AI Platform for Smarter Dollar-Cost Averaging”. The site returned HTTP 200 when fetched on 2026-10-25, 26 days after its registration on 2026-09-29.

How the scam works
No specific malicious behavior was observed on the page, and the listing does not point to a particular fraud vector. Domains with similar detections are often used for phishing, credential harvesting, or malware distribution, but the current evidence does not confirm any of those mechanisms.

Evidence
VirusTotal scanned the domain on 2026-10-25 and reported 16 detections from 92 engines, with 13 labeled malicious and 3 suspicious. Google Safe Browsing checked on 2026-10-25 and returned no warning. urlscan.io captured the site on 2026-10-05; its engines gave a malicious score of 98 but the overall verdict was non‑malicious. Cloudflare Radar flagged the URL as malicious under the malware category on 2026-10-25. PhishDestroy’s internal blocklist marks the domain as listed, and OTX recorded one pulse on 2026-10-25. No external blocklists reported the domain.

Infrastructure
The domain was registered with Dynadot Inc on 2026-09-29 and is served through Cloudflare’s network, with recorded IPs 188.114.96.1 and 188.114.97.3. TLS was provided by Let’s Encrypt, valid from 2026-09-29 to 2026-12-28, and the authoritative nameservers are jack.ns.cloudflare.com and raquel.ns.cloudflare.com.

What to do
Visitors should avoid entering credentials, personal data, or financial information on this site. If any credentials were submitted, change them immediately and monitor the associated accounts. Defenders can block the exact domain in firewalls and DNS filters and review logs for connections to the recorded IPs or Cloudflare network, while continuing to monitor for status changes.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a109b0-0213-776c-ad0d-5d0678dccb9b/
Cloudflare Radar report: https://radar.cloudflare.com/scan/b386cc25-125b-450b-99f5-29ba03b32e2a
Stored capture screenshot: https://urlscan.io/screenshots/01a109b0-0213-776c-ad0d-5d0678dccb9b.png
Cloudflare Radar screenshot (2026-10-25T12:11:28Z): https://screenshots.phishdestroy.io/cf/b386cc25-125b-450b-99f5-29ba03b32e2a.png
VirusTotal report: https://www.virustotal.com/gui/domain/dvonttkrelon.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dvonttkrelon.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 12:15:04 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17300-5032-7139-976e-0df1ff05df22.png
  Captured: 2026-10-25 12:21:24 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a109b0-0213-776c-ad0d-5d0678dccb9b.png
  Captured: 2026-10-25 12:07:44 UTC
  Source report: https://urlscan.io/result/01a17300-5032-7139-976e-0df1ff05df22/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b386cc25-125b-450b-99f5-29ba03b32e2a.png
  Captured: 2026-10-25 12:11:28 UTC
  Source report: https://radar.cloudflare.com/scan/b386cc25-125b-450b-99f5-29ba03b32e2a
  SHA-256: 84728b67d62179df04fff950d35806fa53ec9124a33869fdca25920fefe9a995
- URLQuery: https://screenshots.phishdestroy.io/uq/4b2d7454-7d9f-4834-800e-06116728ac03.png
  Source report: https://urlquery.net/report/4b2d7454-7d9f-4834-800e-06116728ac03
  SHA-256: 9e9db446fa2e260939a7c7486a7dec9bd9183c59d5dfac465e6b1aa20336f268
- URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a109b0-0213-776c-ad0d-5d0678dccb9b.png
  Captured: 2026-10-05 01:31:47 UTC
  Source report: https://urlscan.io/result/01a109b0-0213-776c-ad0d-5d0678dccb9b/
  SHA-256: 4bd82c098d36d1081f0582137b9197be2ad83d8fa738e00bc8849dbea587da71
- URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10c05-b347-74a9-a6e7-793e0e39cabd.png
  Captured: 2026-10-05 12:24:30 UTC
  Source report: https://urlscan.io/result/01a10c05-b347-74a9-a6e7-793e0e39cabd/
  SHA-256: c7c5fc0c4f94528779b284e44a8c318112c5b8c307d727590fa18ff36b86832f
- URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a1111c-8e9b-7682-a59c-058cd322b8a2.png
  Captured: 2026-10-06 12:07:34 UTC
  Source report: https://urlscan.io/result/01a1111c-8e9b-7682-a59c-058cd322b8a2/
  SHA-256: 730b573f2491a53f8f669cee5fbf479b406c9e778200fb81db64fee8d029c9c5
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17313-b06d-7089-9016-a30b9724427f.png
  Captured: 2026-10-25 12:40:55 UTC
  Source report: https://urlscan.io/result/01a17313-b06d-7089-9016-a30b9724427f/
  SHA-256: a01aa49c19558cdaf77b6d9742682196a54b993dfa59a6a59181388704018e68

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T12:43:11Z",
        "uuid": "01a17300-5032-7139-976e-0df1ff05df22",
        "scanned_at": "2026-10-25T12:19:29Z",
        "final_url": "https://dvonttkrelon.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dvonttkrelon.com/",
                "from": "http://dvonttkrelon.com/",
                "status": 307
            }
        ],
        "ip": "2a06:98c1:3120::3",
        "ips": [
            "188.114.96.3",
            "2a06:98c1:3120::3"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "36aa241739fc36512196c630a475b956067485a34d8511cb657842dab29c132e",
        "script_hashes": [
            "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8",
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.dvonttkrelon.com",
                "dvonttkrelon.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "dvonttkrelon.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-28T19:32:50Z",
            "valid_from": "2026-09-29T19:32:51Z"
        },
        "domain_age_days": 25,
        "apex_age_days": 25,
        "tls_age_days": 25,
        "tls_valid_days": 89,
        "requests": 11,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T12:14:14Z",
        "uuid": "b386cc25-125b-450b-99f5-29ba03b32e2a",
        "scanned_at": "2026-10-25T12:11:28Z",
        "final_url": "https://dvonttkrelon.com/",
        "status": 200,
        "history": [
            {
                "url": "https://dvonttkrelon.com/",
                "status": 200
            }
        ],
        "dom_hash": "e5708e717edd0e555ec4bfb1139403184947a3aaab6b7f07d6882a5934fc0c84",
        "doc_hash": "4d228cd32aeffcb933440094491517e4885f1c1c6fa4a15b63dd55dee62352a4",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "New Domains",
            "Security Risks",
            "Malware",
            "Security threats",
            "Scam",
            "Newly Seen Domains",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "dvonttkrelon.com",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "dvonttkrelon.com",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "dvonttkrelon.com",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            },
            {
                "name": "dvonttkrelon.com",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.97.0",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-29T20:28:01Z",
            "updated": "2026-09-29T20:28:13Z",
            "expires": "2027-09-29T20:28:01Z",
            "nameservers": [
                "jack.ns.cloudflare.com",
                "raquel.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T12:10:24Z",
        "analysis_at": "2026-10-25T04:20:21Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "malware",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "registrar": "Dynadot Inc",
        "created": "2026-09-29T20:28:01Z",
        "expires": "2027-09-29T20:28:01Z",
        "updated": "2026-09-29T20:28:13Z",
        "first_seen": "2026-09-29T21:08:49Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.64.195"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.154.218"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jack.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::6815:40c3"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "raquel.ns.cloudflare.com"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=WIM_PV7z_XrY903TWTgyH6asII3fvbutjXMKgTNHjDc"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "jack.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:9ada"
            }
        ],
        "dns_at": "2026-10-25T04:25:40Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.dvonttkrelon.com",
                "dvonttkrelon.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "65b8ebaf120ad02432dd71506f33e71b901",
            "sha256": "bf647dcb63fdf4b6239d1fd77282a9f452e9d055b5269d1b77b1c00b9fc668f7",
            "subject": "dvonttkrelon.com",
            "valid_to": "2026-12-28T19:32:50Z",
            "valid_from": "2026-09-29T19:32:51Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-09-29T20:28:01Z",
            "updated": "2026-09-29T20:28:13Z",
            "expires": "2027-09-29T20:28:01Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "jack.ns.cloudflare.com",
                "raquel.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-29T20:28:01Z",
                "last changed": "2026-09-29T20:28:13Z",
                "registration": "2026-09-29T20:28:01Z",
                "registrar expiration": "2027-09-29T20:28:01Z",
                "last update of RDAP database": "2026-10-23T11:17:57Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T12:14:32Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dvonttkrelon.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T12:10:10Z",
            "first": "2026-09-29T22:57:59Z",
            "changes": 2,
            "days_archived": 3,
            "scans_per_day": 0.08,
            "avg_page_bytes": 14403
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://dvonttkrelon.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Dvontt Krelon — AI Platform for Smarter Dollar-Cost Averaging",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Dvontt Krelon offers an AI-driven platform that analyses market conditions in real time to place contributions at smarter entry points. Discover a calmer, more measured approach to growing your wealth.",
            "canonicalUrl": "https://dvonttkrelon.com/"
        },
        "trackers": {
            "requests": 38,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 10,
                "tls": 84,
                "wait": 139,
                "connect": 24,
                "download": 1
            },
            "response_ms": 258
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 69898,
            "co2_grams": 0.0026,
            "cleaner_than": 30
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.33.121",
                    "host": "jack.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.210",
                    "host": "raquel.ns.cloudflare.com"
                }
            ],
            "zone": "dvonttkrelon.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "dvonttkrelon.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "jack.ns.cloudflare.com",
                "raquel.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"jack.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416252790, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=WIM_PV7z_XrY903TWTgyH6asII3fvbutjXMKgTNHjDc"
            ],
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://dvonttkrelon.com"
            ]
        },
        "linked_pages": {
            "internal_count": 9
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-29T20:28:01Z",
            "updated": "2026-09-29T20:28:13Z",
            "expires": "2027-09-29T20:28:01Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "jack.ns.cloudflare.com",
                "raquel.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```