# PhishDestroy domain threat record: dynamictrevion-system.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/dynamictrevion-system.com/ Machine-readable companion: https://phishdestroy.io/domain/dynamictrevion-system.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 12:23:57 UTC - Last availability or vendor check: 2026-10-25 12:23:57 UTC - Stored record updated: 2026-10-25 20:49:50 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.137.233 - Registrar in stored WHOIS data: MAT BAO CORPORATION - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-03 09:42:11 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17302-a68b-71e4-9b9c-49297d5975d0/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/dynamictrevion-system.com - Certificate Transparency search: https://crt.sh/?q=%25.dynamictrevion-system.com - Web Archive lookup: https://web.archive.org/web/*/https://dynamictrevion-system.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added dynamictrevion-system.com to its internal blocklist on 2026-10-25 under a trusted‑auto rule because the domain was 175 days old at first sight. The recorded page metadata listed the title “Dynamic Trevion | AI Trading Platform | Official Website” and the recorded HTTP response code was 200 on that date. Google Safe Browsing reported no warning and external blocklists showed no hits at the time of checking. How the scam works The detections and classifications do not confirm a specific malicious technique for this domain. In general, domains flagged by multiple vendors may be used for phishing, malware distribution, or fake‑service schemes that attempt to harvest credentials or deliver unwanted code. Evidence VirusTotal scanned the domain on 2026-10-22 and recorded 17 detections from 92 engines, including 14 malicious and 3 suspicious verdicts from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing on 2026-10-25 found no warning. OTX listed four pulses, and Cloudflare Radar flagged the site as malware on 2026-10-25, while urlscan.io assigned a malicious score of 97 though its overall verdict was non‑malicious. PhishDestroy’s internal blocklist marks the domain as blocked and external blocklists showed zero hits. Infrastructure The domain was registered with MAT BAO CORPORATION on 2026-05-03 and expires on 2027-05-03. It was hosted behind Cloudflare’s CDN and resolved to IP addresses such as 172.67.137.233 and 104.21.62.179 among others. TLS was provided by Google Trust Services, valid from 2026-08-30 to 2026-11-28, with HSTS enabled and DNSSEC not configured. What to do Network defenders should block dynamictrevion-system.com at firewalls or proxies and monitor for any outbound connections to its recorded IP addresses. Users who visited the site should avoid entering credentials or downloading files; if credentials were entered, change the associated passwords immediately. No wallet‑related remediation is required, but continue to watch threat feeds for new activity linked to this domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17302-a68b-71e4-9b9c-49297d5975d0/ Cloudflare Radar report: https://radar.cloudflare.com/scan/10413d87-0e3b-4848-b3be-d5bd913d26f4 URLQuery report: https://urlquery.net/report/a9ba8436-015c-4e23-bdac-13190022ab73 Stored capture screenshot: https://urlscan.io/screenshots/01a17302-a68b-71e4-9b9c-49297d5975d0.png Cloudflare Radar screenshot (2026-10-25T12:56:55Z): https://screenshots.phishdestroy.io/cf/10413d87-0e3b-4848-b3be-d5bd913d26f4.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/a9ba8436-015c-4e23-bdac-13190022ab73.png VirusTotal report: https://www.virustotal.com/gui/domain/dynamictrevion-system.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dynamictrevion-system.com Archived copy: https://web.archive.org/web/20261025122415/https://dynamictrevion-system.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 12:58:42 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a17302-a68b-71e4-9b9c-49297d5975d0.png Captured: 2026-10-25 12:23:57 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a17302-a68b-71e4-9b9c-49297d5975d0.png Captured: 2026-10-25 12:23:57 UTC Source report: https://urlscan.io/result/01a17302-a68b-71e4-9b9c-49297d5975d0/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/10413d87-0e3b-4848-b3be-d5bd913d26f4.png Captured: 2026-10-25 12:56:55 UTC Source report: https://radar.cloudflare.com/scan/10413d87-0e3b-4848-b3be-d5bd913d26f4 SHA-256: da56bd5bfecf62e2c9c8bd4414600c9003813dc93c3a50dbeabc4e247a6f1a0a - URLQuery: https://screenshots.phishdestroy.io/uq/a9ba8436-015c-4e23-bdac-13190022ab73.png Source report: https://urlquery.net/report/a9ba8436-015c-4e23-bdac-13190022ab73 SHA-256: dd6fc54fb3194efc40b5b2abb56a8cb4dc770f9a4f9613bf3eb4965e0058da80 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T12:43:09Z", "uuid": "01a17302-a68b-71e4-9b9c-49297d5975d0", "scanned_at": "2026-10-25T12:23:37Z", "final_url": "https://dynamictrevion-system.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://dynamictrevion-system.com/", "from": "http://dynamictrevion-system.com/", "status": 307 } ], "ip": "172.67.137.233", "domains": [ "cdnjs.cloudflare.com", "challenges.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflare.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.17.207.5", "142.251.127.95", "104.17.25.14", "172.67.137.233" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "1a4c11da96fe7bff058e0eb519d4b052dce554472d248f4f205139563085eaa8", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_dt84a", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "dynamictrevion-system.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "dynamictrevion-system.com", "protocol": "QUIC", "valid_to": "2026-11-28T11:02:41Z", "valid_from": "2026-08-30T10:02:46Z" }, "domain_age_days": 175, "apex_age_days": 175, "tls_age_days": 56, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudf", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T12:57:55Z", "uuid": "10413d87-0e3b-4848-b3be-d5bd913d26f4", "scanned_at": "2026-10-25T12:56:55Z", "final_url": "https://dynamictrevion-system.com/", "status": 200, "history": [ { "url": "https://dynamictrevion-system.com/", "status": 200 } ], "dom_hash": "12d4ae902e083d58597d7e7adc177d5c601f7512adad6d66d0ba09a08cc1f006", "doc_hash": "f6e19f445b1a6da68392e1ef042675d155b8fe9714fd8df0677ced91c2799d84", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "dynamictrevion-system.com", "type": "A", "value": "104.21.62.179" }, { "name": "dynamictrevion-system.com", "type": "A", "value": "172.67.137.233" }, { "name": "dynamictrevion-system.com", "type": "AAAA", "value": "2606:4700:3033::6815:3eb3" }, { "name": "dynamictrevion-system.com", "type": "AAAA", "value": "2606:4700:3032::ac43:89e9" } ], "dnssec_valid": false, "ip": "104.21.62.179", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "MAT BAO CORPORATION", "created": "2026-05-03T11:42:11Z", "updated": "2026-05-03T12:05:55Z", "expires": "2027-05-03T11:42:11Z", "nameservers": [ "edward.ns.cloudflare.com", "luciane.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T12:56:11Z", "analysis_at": "2026-10-22T18:12:51Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "MAT BAO CORPORATION", "created": "2026-05-03T11:42:11Z", "expires": "2027-05-03T11:42:11Z", "updated": "2026-05-03T12:05:55Z", "first_seen": "2026-05-03T12:22:56Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.137.233" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:3eb3" }, { "ttl": 300, "type": "A", "value": "104.21.62.179" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "edward.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "edward.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "luciane.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::ac43:89e9" } ], "dns_at": "2026-10-22T18:18:32Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "dynamictrevion-system.com" ], "issuer": "Google Trust Services / WE1", "serial": "58d6846b32da80f30e8e9d0cce0e4533", "sha256": "e135ce0d3bdd3b151293a21905af465f3e19bd6d5c0bf9bde1461a65ea10a206", "subject": "dynamictrevion-system.com", "valid_to": "2026-11-28T11:02:41Z", "valid_from": "2026-08-30T10:02:46Z" }, "whois": { "registrar": "MAT BAO CORPORATION", "registrar_iana_id": "1586", "registrar_url": "http://www.matbao.net", "created": "2026-05-03T11:42:11Z", "updated": "2026-05-03T12:05:55Z", "expires": "2027-05-03T11:42:11Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "edward.ns.cloudflare.com", "luciane.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-07-03T02:15:47Z", "registration": "2026-05-03T11:42:11Z", "registrar expiration": "2027-05-03T11:42:11Z", "last update of RDAP database": "2026-10-22T18:18:36Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T12:58:13Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "dynamictrevion-system.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T12:24:15Z", "first": "2026-10-25T12:24:15Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 42579 }, "robots_txt": { "agents": [ "*", "Amazonbot", "Applebot-Extended", "Bytespider", "CCBot" ], "present": true, "sitemaps": [ "https://dynamictrevion-system.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://dynamictrevion-system.com/", "title": "Dynamic Trevion | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Dynamic Trevion | AI Bot Execution & Risk Controls", "ogSiteName": "Dynamic Trevion", "themeColor": "#180025", "description": "Dynamic Trevion delivers AI-driven trading bot tooling for strategy orchestration, execution controls, and risk-aware workflows across major markets with transparent visibility.", "twitterCard": "summary", "canonicalUrl": "https://dynamictrevion-system.com/", "ogDescription": "Dynamic Trevion delivers AI-driven trading bot tooling for strategy orchestration, precise order execution, and risk-aware workflows across major markets with transparent visibility." }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 61, "tls": 42, "wait": 191, "connect": 74, "download": 39 }, "response_ms": 407 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 145381, "co2_grams": 0.0053, "cleaner_than": 14 }, "dns_server": { "ns": [ { "ip": "108.162.194.120", "host": "luciane.ns.cloudflare.com" }, { "ip": "108.162.195.210", "host": "edward.ns.cloudflare.com" } ], "zone": "dynamictrevion-system.com" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3033::6815:3eb3", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "dynamictrevion-system.com" }, "dns": { "A": [ "104.21.62.179", "172.67.137.233" ], "NS": [ "edward.ns.cloudflare.com", "luciane.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"edward.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418085044, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3032::ac43:89e9", "2606:4700:3033::6815:3eb3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=15552000; includeSubDomains; preload", "message": "HSTS max-age is 15552000, below the 31536000 minimum." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenge", "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3033::6815:3eb3", "family": 6 }, "redirects": { "chain": [ "https://dynamictrevion-system.com" ] }, "linked_pages": { "internal_count": 38 }, "whois": { "registrar": "MAT BAO CORPORATION", "created": "2026-05-03T11:42:11Z", "updated": "2026-05-03T12:05:55Z", "expires": "2027-05-03T11:42:11Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "edward.ns.cloudflare.com", "luciane.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; frame", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```