# PhishDestroy domain threat record: dynveheri.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dynveheri.com/
Machine-readable companion: https://phishdestroy.io/domain/dynveheri.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 12:08:48 UTC
- Last availability or vendor check: 2026-10-25 12:25:31 UTC
- Stored record updated: 2026-10-25 15:30:37 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: zelle

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-08 00:05:30 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17304-144e-731f-87fe-e98c9ab0b19b/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dynveheri.com
- Certificate Transparency search: https://crt.sh/?q=%25.dynveheri.com
- Web Archive lookup: https://web.archive.org/web/*/https://dynveheri.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed dynveheri.com as a suspicious domain based on automated risk indicators. The recorded page title reads “Reliable KI-gestützte Handelsplattform. Dyn Veh Eri.” The domain was first seen by PhishDestroy on 2026-10-25 with an HTTP 200 response.

How the scam works
The detections suggest the site could be used for phishing or to deliver malware, typical of fraudulent pages that mimic legitimate services to trick visitors. No credential‑harvesting form, wallet request, or malicious payload was observed in the captured page, so the exact technique remains uncertain.

Evidence
VirusTotal analysis on 2026-10-20 returned 18 detections from 92 engines (13 malicious, 5 suspicious) including vendors such as BitDefender, ESET and Forcepoint ThreatSeeker; Google Safe Browsing on 2026-10-25 reported no warning and OTX listed three pulses referencing the domain as of that date. urlscan.io captured the site on 2026-10-25 with a 96 % malicious engine score but an overall non‑malicious verdict, Cloudflare Radar flagged it as malware, and PhishDestroy’s internal blocklist marks it as blocked while external blocklists showed zero hits on the same day.

Infrastructure
The domain was registered with Dynadot Inc on 2026-08-08, giving it an age of 78 days at first observation. The recorded IP was 158.94.210.119, which was listed under the network Omegatech LTD in the Netherlands. TLS was provided by Let’s Encrypt, valid from 2026-08-28 to 2026-11-26, using TLS 1.3 with AES‑128‑GCM. DNS records included an A record, MX pointing to parkmail.dynadot.com, and NS records ns1.dyna-ns.net and ns2.dyna-ns.net; DNSSEC was not enabled.

What to do
Visitors should avoid entering credentials, downloading files, or approving any wallet actions on this site; if any information was submitted, change passwords and monitor accounts for suspicious activity. Defenders should add dynveheri.com to web‑filter blocklists, monitor outbound connections to 158.94.210.119, and review logs for access attempts.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17304-144e-731f-87fe-e98c9ab0b19b/
Cloudflare Radar report: https://radar.cloudflare.com/scan/45827567-7485-4216-9473-71573e64ee33
Stored capture screenshot: https://urlscan.io/screenshots/01a17304-144e-731f-87fe-e98c9ab0b19b.png
Cloudflare Radar screenshot (2026-10-25T12:11:13Z): https://screenshots.phishdestroy.io/cf/45827567-7485-4216-9473-71573e64ee33.png
URLScan screenshot (2026-08-09T14:45:22Z): https://screenshots.phishdestroy.io/us/019fe6fc-331f-736b-a2b5-d79f6efd974a.png
URLScan capture report: https://urlscan.io/result/019fe6fc-331f-736b-a2b5-d79f6efd974a/
URLScan screenshot (2026-08-10T06:45:09Z): https://screenshots.phishdestroy.io/us/019fea6a-7a90-72ab-8e4d-68b6b2db69d6.png
URLScan capture report: https://urlscan.io/result/019fea6a-7a90-72ab-8e4d-68b6b2db69d6/
URLScan screenshot (2026-08-29T16:21:10Z): https://screenshots.phishdestroy.io/us/01a04e53-1626-74af-ae9a-6247e8c110d8.png
URLScan capture report: https://urlscan.io/result/01a04e53-1626-74af-ae9a-6247e8c110d8/
URLScan screenshot (2026-08-30T19:09:52Z): https://screenshots.phishdestroy.io/us/01a05413-e37f-77ff-81f6-2a3138ae928f.png
URLScan capture report: https://urlscan.io/result/01a05413-e37f-77ff-81f6-2a3138ae928f/
VirusTotal report: https://www.virustotal.com/gui/domain/dynveheri.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dynveheri.com
Archived copy: https://web.archive.org/web/20261025121006/https://dynveheri.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 12:41:17 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17304-144e-731f-87fe-e98c9ab0b19b.png
  Captured: 2026-10-25 12:25:31 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a04b96-a70c-719f-9f2f-3563747d6cd5.png
  Captured: 2026-10-25 12:08:48 UTC
  Source report: https://urlscan.io/result/01a17304-144e-731f-87fe-e98c9ab0b19b/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/45827567-7485-4216-9473-71573e64ee33.png
  Captured: 2026-10-25 12:11:13 UTC
  Source report: https://radar.cloudflare.com/scan/45827567-7485-4216-9473-71573e64ee33
  SHA-256: 52a582eec027b098cbdeac4e9790e5d7dfb418dea8133100a15f09a6558d9afe
- URLQuery: https://screenshots.phishdestroy.io/uq/90aebfce-dc8d-4063-90fd-2d0bf8f3770c.png
  Source report: https://urlquery.net/report/90aebfce-dc8d-4063-90fd-2d0bf8f3770c
  SHA-256: 09ad04ca5368458984d1e79addec175f66d6674b36f27c15a63d5a93e0eea7a9
- URLScan · 2026-08-09: https://screenshots.phishdestroy.io/us/019fe6fc-331f-736b-a2b5-d79f6efd974a.png
  Captured: 2026-08-09 14:45:22 UTC
  Source report: https://urlscan.io/result/019fe6fc-331f-736b-a2b5-d79f6efd974a/
  SHA-256: 66317478a632a0fa7844a4e9b3f1cf73cea8638c03c22315ebb5b14b24b17e43
- URLScan · 2026-08-10: https://screenshots.phishdestroy.io/us/019fea6a-7a90-72ab-8e4d-68b6b2db69d6.png
  Captured: 2026-08-10 06:45:09 UTC
  Source report: https://urlscan.io/result/019fea6a-7a90-72ab-8e4d-68b6b2db69d6/
  SHA-256: d79988ad7038d666f3cc9742f237eac1e54b7fdca6d42217557dfc7e777a910c
- URLScan · 2026-08-29: https://screenshots.phishdestroy.io/us/01a04e53-1626-74af-ae9a-6247e8c110d8.png
  Captured: 2026-08-29 16:21:10 UTC
  Source report: https://urlscan.io/result/01a04e53-1626-74af-ae9a-6247e8c110d8/
  SHA-256: ac393821cd68eb4bfd6e85d1d77420be19440987aeec2ddc28e42063f55df1ff
- URLScan · 2026-08-30: https://screenshots.phishdestroy.io/us/01a05413-e37f-77ff-81f6-2a3138ae928f.png
  Captured: 2026-08-30 19:09:52 UTC
  Source report: https://urlscan.io/result/01a05413-e37f-77ff-81f6-2a3138ae928f/
  SHA-256: d2476a82f49abb85088035e6dc7f831bee3972ba55e07011889e838024b302c0

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T12:40:48Z",
        "uuid": "01a17304-144e-731f-87fe-e98c9ab0b19b",
        "scanned_at": "2026-10-25T12:23:38Z",
        "final_url": "https://dynveheri.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dynveheri.com/",
                "from": "http://dynveheri.com/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "4eca4f921a3f6480a1efc9686814ffd02ef5ba52a2802cd61b53498fcb41e22f",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "hamburger",
            "mobileNav",
            "langSwitcher",
            "langBtn",
            "dotGrid"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "dynveheri.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "dynveheri.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-26T15:13:49Z",
            "valid_from": "2026-08-28T15:13:50Z"
        },
        "domain_age_days": 78,
        "apex_age_days": 78,
        "tls_age_days": 57,
        "tls_valid_days": 89,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T12:12:49Z",
        "uuid": "45827567-7485-4216-9473-71573e64ee33",
        "scanned_at": "2026-10-25T12:11:13Z",
        "final_url": "https://dynveheri.com/",
        "status": 200,
        "history": [
            {
                "url": "https://dynveheri.com/",
                "status": 200
            }
        ],
        "dom_hash": "056f16e06dffd775b4c8b689ebbc2bb290ad862bffd2d11d0a09120ef52c2c27",
        "doc_hash": "9599bcf51c547ba0958c38875a80fc6bd0a8f5450590688758676097165d0be6",
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Scam",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "dynveheri.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-08T02:05:30Z",
            "updated": "2026-08-13T12:27:50Z",
            "expires": "2027-08-08T02:05:30Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T12:40:25Z",
        "analysis_at": "2026-10-20T12:03:10Z",
        "stats": {
            "timeout": 0,
            "harmless": 41,
            "malicious": 13,
            "suspicious": 5,
            "undetected": 33
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "spam",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "Google": "domain_parking",
            "Sophos": "phishing and fraud",
            "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
        },
        "registrar": "Dynadot Inc",
        "created": "2026-08-08T02:05:30Z",
        "expires": "2027-08-08T02:05:30Z",
        "updated": "2026-08-13T12:27:50Z",
        "first_seen": "2026-08-08T02:33:24Z",
        "dns": [
            {
                "ttl": 300,
                "type": "MX",
                "value": "parkmail.dynadot.com",
                "priority": 0
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.dynveheri.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dns_at": "2026-10-20T12:08:31Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "dynveheri.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5ae6adeff62e8688d3e61cc188045bd2de8",
            "sha256": "0c43b38cc96e5584826e3b2fd061b160926202185c20ed745bff5eec3f0a83e9",
            "subject": "dynveheri.com",
            "valid_to": "2026-11-26T15:13:49Z",
            "valid_from": "2026-08-28T15:13:50Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-08-08T02:05:30Z",
            "updated": "2026-08-13T12:27:50Z",
            "expires": "2027-08-08T02:05:30Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-08T02:05:30Z",
                "last changed": "2026-08-28T10:16:34Z",
                "registration": "2026-08-08T02:05:30Z",
                "registrar expiration": "2027-08-08T02:05:30Z",
                "last update of RDAP database": "2026-10-16T07:30:32Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T12:13:03Z",
        "mail_config": {
            "mx": [
                "parkmail.dynadot.com"
            ],
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dynveheri.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T12:10:06Z",
            "first": "2026-10-25T12:10:06Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 22491
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://dynveheri.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Reliable KI-gestützte Handelsplattform. Dyn Veh Eri.",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Prädiktive Marktanalyse & autonome Prozesssteuerung — Dyn Veh Eri unterstützt aktive Investoren dabei, globale Märkte effizient zu navigieren und Portfolios datenbasiert zu optimieren.",
            "canonicalUrl": "https://dynveheri.com/"
        },
        "trackers": {
            "requests": 55,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 163,
                "tls": 126,
                "wait": 239,
                "connect": 110,
                "download": 7
            },
            "response_ms": 645
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 83202,
            "co2_grams": 0.003,
            "cleaner_than": 26
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "dynveheri.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "dynveheri.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "MX": [
                "{\"exchange\": \"parkmail.dynadot.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.dynveheri.com\", \"serial\": 2026092801, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://dynveheri.com"
            ]
        },
        "linked_pages": {
            "internal_count": 29
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-08T02:05:30Z",
            "updated": "2026-08-13T12:27:50Z",
            "expires": "2027-08-08T02:05:30Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```