# PhishDestroy domain threat record: edifice-gainlux.live Content language: English Canonical HTML report: https://phishdestroy.io/domain/edifice-gainlux.live/ Machine-readable companion: https://phishdestroy.io/domain/edifice-gainlux.live/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 14:27:13 UTC - Last availability or vendor check: 2026-10-25 14:44:18 UTC - Stored record updated: 2026-10-25 15:30:33 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: ethereum ## Stored infrastructure - Observed IP address: 188.114.97.3 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-15 15:34:04 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17383-244c-71f8-a9d1-1d80a322df11/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/edifice-gainlux.live - Certificate Transparency search: https://crt.sh/?q=%25.edifice-gainlux.live - Web Archive lookup: https://web.archive.org/web/*/https://edifice-gainlux.live/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy classifies edifice-gainlux.live as a suspicious domain and added it to its internal blocklist on 2026-10-25 after a trusted auto‑rule assessment. The recorded page title reads “Édifice Gainlux | Premier AI‑Powered Trading Platform” and an HTTP 200 response was captured that day. How the scam works No concrete malicious behavior was observed; the listing is based on security detections rather than confirmed phishing or malware activity. Detections of this type often relate to sites that imitate financial services to trick users into revealing credentials or downloading unwanted software, but the exact method here is unverified. Evidence VirusTotal (2026-10-23) flagged the domain with 5 detections from 92 engines – 3 malicious and 2 suspicious – labeling it phishing or malicious. Google Safe Browsing (2026-10-25) did not flag it, while urlscan.io (2026-10-16) gave a high engine score of 98 (malicious) but an overall non‑malicious verdict. Cloudflare Radar (2026-10-25) marked it malicious with a malware tag; OTX recorded one pulse on 2026-10-25, and PhishDestroy’s internal list blocks the domain, whereas external blocklists showed no hits. Infrastructure The domain was registered on 2026-10-15 through Dynadot Inc (DYNADOT LLC). It is hosted behind Cloudflare with edge IPs such as 188.114.97.1, uses a Let’s Encrypt certificate valid until 2027-01-13, and DNSSEC is not enabled. What to do If you entered any login or personal data on the site, change the passwords immediately and monitor the accounts for suspicious activity. Defenders should block edifice-gainlux.live at firewalls or proxies, log DNS queries for it, and watch for traffic to its Cloudflare IP addresses. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a14426-3544-77f8-9c7c-ef9a13e6d0f0/ Cloudflare Radar report: https://radar.cloudflare.com/scan/d3aee781-d9f0-408c-9eb0-7d19a40ad506 Stored capture screenshot: https://urlscan.io/screenshots/01a14426-3544-77f8-9c7c-ef9a13e6d0f0.png Cloudflare Radar screenshot (2026-10-25T14:30:23Z): https://screenshots.phishdestroy.io/cf/d3aee781-d9f0-408c-9eb0-7d19a40ad506.png URLScan screenshot (2026-10-15T22:00:35Z): https://screenshots.phishdestroy.io/us/01a14194-ba76-7766-9a3c-bd2bce060be2.png URLScan capture report: https://urlscan.io/result/01a14194-ba76-7766-9a3c-bd2bce060be2/ VirusTotal report: https://www.virustotal.com/gui/domain/edifice-gainlux.live Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=edifice-gainlux.live Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 14:32:21 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a17383-244c-71f8-a9d1-1d80a322df11.png Captured: 2026-10-25 14:44:18 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a14426-3544-77f8-9c7c-ef9a13e6d0f0.png Captured: 2026-10-25 14:27:13 UTC Source report: https://urlscan.io/result/01a17383-244c-71f8-a9d1-1d80a322df11/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d3aee781-d9f0-408c-9eb0-7d19a40ad506.png Captured: 2026-10-25 14:30:23 UTC Source report: https://radar.cloudflare.com/scan/d3aee781-d9f0-408c-9eb0-7d19a40ad506 SHA-256: 9be7db8ca49d3d641d4814abcbbe0bfcb07d91ddfea8c4032e7c4f06743c9a21 - URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a14194-ba76-7766-9a3c-bd2bce060be2.png Captured: 2026-10-15 22:00:35 UTC Source report: https://urlscan.io/result/01a14194-ba76-7766-9a3c-bd2bce060be2/ SHA-256: 1c0034eedb7a4d1cd8abb0deea354ea6ca18e84ad8f76a4401b61e0578e0f65f ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T15:11:14Z", "uuid": "01a17383-244c-71f8-a9d1-1d80a322df11", "scanned_at": "2026-10-25T14:42:22Z", "final_url": "https://edifice-gainlux.live/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://edifice-gainlux.live/", "from": "http://edifice-gainlux.live/", "status": 307 } ], "ip": "188.114.96.3", "domains": [ "cdnedge.io", "cdn.jsdelivr.net" ], "ips": [ "104.17.207.5", "172.67.221.102", "2606:4700::6811:cf05", "188.114.96.3" ], "asns": [ "13335" ], "countries": [ "US" ], "doc_hash": "44a7be9fffb2ec1de23f62086b0a7180541a59c95fc1b712a97165b57c4ccfd6", "script_hashes": [ "a628e2e0432e63e81cce6e990e98dbbd4ba9953bdeb7dc3929e40f3fcb23e516", "dc997fce7d250808113181e2ce8d8ba0b9a443bc781410a6ba9e9a19b1610821", "15a60ba80a89cb35bb9968d40f7ab1fc090059834b33fcf84f38529a41776518" ], "globals": [ "APP_LANG", "OFFER_CURRENCY_SYMBOL", "OFFER_LOCALE", "defaultLang", "intlTelInputGlobals", "intlTelInput", "intlTelInputUtils", "getLeadCookieName", "getLeadCookieDays", "hasLeadCookie", "setLeadCookie", "showAlreadyRegistered", "getFieldWrap", "clearFieldError", "setFieldError", "showFormMessage", "hideFormMessage", "validateNativeFields", "validatePhone", "focusInvalidField", "getThanksPageUrl", "integrationBaseUrl", "resolveVisitorPhoneCountry", "syncPhoneCountryHidden", "refreshFormToken", "ensureFormToken", "setupFormValidation", "LazyLoad", "toggleSeo", "toggleAccordion", "forms", "L", "phoneErrorMap", "initConnectors", "initMobuleMenu", "initLangFlags", "initLazyLoad", "initInitials", "initTrading" ], "cookies": [ "PHPSESSID" ], "tls": { "san": [ "*.edifice-gainlux.live", "edifice-gainlux.live" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "edifice-gainlux.live", "protocol": "QUIC", "valid_to": "2027-01-13T16:51:10Z", "valid_from": "2026-10-15T16:51:11Z" }, "domain_age_days": 9, "apex_age_days": 9, "tls_age_days": 9, "tls_valid_days": 89, "requests": 41, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T14:31:37Z", "uuid": "d3aee781-d9f0-408c-9eb0-7d19a40ad506", "scanned_at": "2026-10-25T14:30:23Z", "final_url": "https://edifice-gainlux.live/", "status": 200, "history": [ { "url": "https://edifice-gainlux.live/", "status": 200 } ], "dom_hash": "1965fcf490b7d58fd2d0c750088298997025110f432ab8a68d7253ececb3129e", "doc_hash": "b4774bb291397732daff5d3232819ca01f8323016d9565930560f836e315f578", "phishing_v2": [ "phishing" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "Malware", "Security threats", "New Domains", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "edifice-gainlux.live", "type": "A", "value": "104.21.16.15" }, { "name": "edifice-gainlux.live", "type": "A", "value": "172.67.209.196" }, { "name": "edifice-gainlux.live", "type": "AAAA", "value": "2606:4700:3037::6815:100f" }, { "name": "edifice-gainlux.live", "type": "AAAA", "value": "2606:4700:3037::ac43:d1c4" } ], "dnssec_valid": false, "ip": "104.21.16.15", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T14:29:35Z", "analysis_at": "2026-10-23T14:38:45Z", "stats": { "timeout": 0, "harmless": 0, "malicious": 3, "suspicious": 2, "undetected": 87 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "SOCRadar": "phishing", "Gridinsoft": "suspicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "first_seen": "2026-10-15T19:22:30Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "bradley.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "bradley.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.16.15" }, { "ttl": 300, "type": "A", "value": "172.67.209.196" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:d1c4" }, { "ttl": 21600, "type": "NS", "value": "delilah.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:100f" } ], "dns_at": "2026-10-23T14:41:37Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.edifice-gainlux.live", "edifice-gainlux.live" ], "issuer": "Let's Encrypt / YE2", "serial": "591e609746b6cffff54c2df206164071334", "sha256": "ce2df6e9c13db918c2a1185c76481eeaa0aa983b6ec20fb139c97a8f50d8e3c4", "subject": "edifice-gainlux.live", "valid_to": "2027-01-13T16:51:10Z", "valid_from": "2026-10-15T16:51:11Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-10-15T17:34:04Z", "last changed": "2026-10-15T17:40:22Z", "registration": "2026-10-15T17:34:04Z", "registrar expiration": "2027-10-15T17:34:04Z", "last update of RDAP database": "2026-10-23T11:22:13Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T14:31:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "edifice-gainlux.live" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T14:29:27Z", "first": "2026-10-16T03:05:29Z", "changes": 2, "days_archived": 3, "scans_per_day": 0.21, "avg_page_bytes": 18638 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://edifice-gainlux.live/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 9 }, "social_tags": { "ogUrl": "https://edifice-gainlux.live/", "title": "Édifice Gainlux | Premier AI-Powered Trading Platform", "author": "Édifice Gainlux", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://edifice-gainlux.live/static/img/platform/dificegainlux-trading-platform-mobile.webp", "ogTitle": "Édifice Gainlux | Premier AI-Powered Trading Platform", "ogSiteName": "Édifice Gainlux", "themeColor": "#0d7377", "description": "Engage with crypto, forex, and global markets via Édifice Gainlux's AI-powered analytics and intuitive platform tailored for Canada clients.", "twitterCard": "summary_large_image", "canonicalUrl": "https://edifice-gainlux.live/", "ogDescription": "Engage with crypto, forex, and global markets via Édifice Gainlux's AI-powered analytics and intuitive platform tailored for Canada clients." }, "trackers": { "requests": 33, "trackers": [ { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 4 } ] }, "mixed_content": { "no_sri": [ "https://cdnedge.io/js/750393b117602e986a9151abcb87eabf/app.min.js", "https://cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/js/intlTelInput.min.js", "https://cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/js/utils.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 8, "tls": 28, "wait": 109, "connect": 7, "download": 36 }, "response_ms": 188 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 119835, "co2_grams": 0.0044, "cleaner_than": 18 }, "dns_server": { "ns": [ { "ip": "162.159.44.35", "host": "bradley.ns.cloudflare.com" }, { "ip": "162.159.38.99", "host": "delilah.ns.cloudflare.com" } ], "zone": "edifice-gainlux.live" }, "cookies": { "cookies": [ { "name": "PHPSESSID", "session": true } ] }, "location": { "ip": "2a06:98c1:3120::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "edifice-gainlux.live" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "bradley.ns.cloudflare.com", "delilah.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"bradley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417975298, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::3", "2a06:98c1:3120::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::3", "family": 6 }, "redirects": { "chain": [ "https://edifice-gainlux.live" ] }, "linked_pages": { "internal_count": 9 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } } } } ```