# PhishDestroy domain threat record: eixo-inviolex.digital Content language: English Canonical HTML report: https://phishdestroy.io/domain/eixo-inviolex.digital/ Machine-readable companion: https://phishdestroy.io/domain/eixo-inviolex.digital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 16:08:19 UTC - Last availability or vendor check: 2026-10-25 16:08:19 UTC - Stored record updated: 2026-10-25 19:30:50 UTC - VirusTotal detections in the stored snapshot: 19/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: ups ## Stored infrastructure - Observed IP address: 104.21.43.239 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-09 13:36:01 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a173d0-0e7f-7129-8d23-bcd47836e112/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/eixo-inviolex.digital - Certificate Transparency search: https://crt.sh/?q=%25.eixo-inviolex.digital - Web Archive lookup: https://web.archive.org/web/*/https://eixo-inviolex.digital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy has placed eixo-inviolex.digital on its internal blocklist. The domain was first observed by PhishDestroy on 2026-10-25. The recorded page title reads “Eixo Inviolex” and the meta description advertises AI‑enhanced automation for trade execution and risk governance. An HTTP 200 response was recorded on the same date, indicating the site was reachable at that time. How the scam works The detections associated with this domain suggest it could be used for deceptive or malicious activity, but no specific malicious behavior was observed on the page itself. Such suspicious domains often mimic legitimate services to lure visitors into credential disclosure, malware download, or fraudulent financial offers. Evidence VirusTotal reported 19 detections from 92 engines on 2026-10-22, including 15 malicious and 4 suspicious labels from vendors such as ADMINUSLabs, BitDefender and ESET. Google Safe Browsing checked on 2026-10-25 did not flag the site. OTX listed five pulses referencing the domain as of 2026-10-25. Cloudflare Radar flagged the domain as both phishing and malware on 2026-10-25. urlscan.io recorded a malicious engine score of 97 on 2026-10-25, though its overall verdict was non‑malicious. PhishDestroy’s internal blocklist contains the domain, while external blocklists checked on the same day returned zero matches. Infrastructure The domain was registered on 2026-03-09 with NICENIC INTERNATIONAL GROUP CO., LIMITED and is 229 days old. DNS records point to Cloudflare nameservers and resolve to A records 172.67.189.5 and 104.21.43.239 (plus corresponding AAAA records). The TLS certificate, issued by Google Trust Services, is valid from 2026-09-03 to 2026-12-02, and DNSSEC was not present. What to do Visitors should avoid entering credentials, downloading files, or interacting with offers on this site. If any credentials were submitted, change the associated passwords immediately. Security teams should block the domain at the network perimeter, monitor logs for connections to the recorded IP addresses or hostnames, and keep the domain under observation for future intelligence updates. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a173d0-0e7f-7129-8d23-bcd47836e112/ Cloudflare Radar report: https://radar.cloudflare.com/scan/02867b2c-2e44-4e5a-ae7e-8d02f2e62b4c Stored capture screenshot: https://urlscan.io/screenshots/01a173d0-0e7f-7129-8d23-bcd47836e112.png Cloudflare Radar screenshot (2026-10-25T16:43:51Z): https://screenshots.phishdestroy.io/cf/02867b2c-2e44-4e5a-ae7e-8d02f2e62b4c.png URLScan screenshot (2026-10-25T16:07:07Z): https://screenshots.phishdestroy.io/us/01a173d0-a7b9-76cc-a3b7-128551d57ebb.png URLScan capture report: https://urlscan.io/result/01a173d0-a7b9-76cc-a3b7-128551d57ebb/ VirusTotal report: https://www.virustotal.com/gui/domain/eixo-inviolex.digital Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=eixo-inviolex.digital Archived copy: https://web.archive.org/web/20261025160919/https://eixo-inviolex.digital/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 16:46:40 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a173d0-0e7f-7129-8d23-bcd47836e112.png Captured: 2026-10-25 16:08:19 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a173d0-0e7f-7129-8d23-bcd47836e112.png Captured: 2026-10-25 16:08:19 UTC Source report: https://urlscan.io/result/01a173d0-0e7f-7129-8d23-bcd47836e112/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/02867b2c-2e44-4e5a-ae7e-8d02f2e62b4c.png Captured: 2026-10-25 16:43:51 UTC Source report: https://radar.cloudflare.com/scan/02867b2c-2e44-4e5a-ae7e-8d02f2e62b4c SHA-256: 141eb7e643edebec436a1ec3a2f2289dede88b008fd772820f4d376445bd80b4 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a173d0-a7b9-76cc-a3b7-128551d57ebb.png Captured: 2026-10-25 16:07:07 UTC Source report: https://urlscan.io/result/01a173d0-a7b9-76cc-a3b7-128551d57ebb/ SHA-256: a48b88a5c06866a2218f77d7b15ff8d6068b943695c5536573104f5072cc5f69 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T16:22:43Z", "uuid": "01a173d0-0e7f-7129-8d23-bcd47836e112", "scanned_at": "2026-10-25T16:06:39Z", "final_url": "https://eixo-inviolex.digital/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://eixo-inviolex.digital/", "from": "http://eixo-inviolex.digital/", "status": 307 } ], "ip": "172.67.189.5", "domains": [ "challenges.cloudflare.com", "fonts.googleapis.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "cdn.jsdelivr.net", "static.cloudflareinsights.com", "static.cloudflare.com" ], "ips": [ "104.18.94.41", "172.217.222.94", "104.18.95.41", "104.17.207.5", "173.194.175.95", "104.17.25.14", "172.67.189.5" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "95c6cf9a7c8cbd8ae380daf7aa648f9f7f7bf77b233425b95a55ff508042dfba", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_hv1dz2qb", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "eixo-inviolex.digital" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "eixo-inviolex.digital", "protocol": "QUIC", "valid_to": "2026-12-02T21:17:09Z", "valid_from": "2026-09-03T20:17:11Z" }, "domain_age_days": 229, "apex_age_days": 229, "tls_age_days": 51, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://chall", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T16:45:48Z", "uuid": "02867b2c-2e44-4e5a-ae7e-8d02f2e62b4c", "scanned_at": "2026-10-25T16:43:51Z", "final_url": "https://eixo-inviolex.digital/", "status": 200, "history": [ { "url": "https://eixo-inviolex.digital/", "status": 200 } ], "dom_hash": "cbf4eb06a8f6baf944999ffe901b0bef3f1e512d4881e7f1b5dd62ac90d48235", "doc_hash": "8a95685843a7be5280035dbb3bfb801135147b67e8cd1e895b6fc30182062031", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "eixo-inviolex.digital", "type": "A", "value": "172.67.189.5" }, { "name": "eixo-inviolex.digital", "type": "A", "value": "104.21.43.239" }, { "name": "eixo-inviolex.digital", "type": "AAAA", "value": "2606:4700:3031::ac43:bd05" }, { "name": "eixo-inviolex.digital", "type": "AAAA", "value": "2606:4700:3037::6815:2bef" } ], "dnssec_valid": false, "ip": "172.67.189.5", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T16:42:37Z", "analysis_at": "2026-10-22T18:10:04Z", "stats": { "timeout": 0, "harmless": 41, "malicious": 15, "suspicious": 4, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "ADMINUSLabs": "malicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "spam", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "created": "2026-03-09T00:00:00Z", "updated": "2026-03-09T00:00:00Z", "first_seen": "2026-03-09T18:34:48Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.189.5" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 ip4:46.166.131.92 ~all" }, { "ttl": 300, "type": "TXT", "value": "google-site-verification=2Dv9lYUvw9joxJ10RBhYu5tiApOHJDQsd9cxvBhkQ-E" }, { "ttl": 300, "type": "MX", "value": "mail.eixo-inviolex.digital", "priority": 10 }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "andronicus.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.43.239" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:2bef" }, { "ttl": 21600, "type": "NS", "value": "andronicus.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:bd05" }, { "ttl": 21600, "type": "NS", "value": "grace.ns.cloudflare.com" } ], "dns_at": "2026-10-22T18:15:52Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "eixo-inviolex.digital" ], "issuer": "Google Trust Services / WE1", "serial": "cefe66688169a2c0ef8eb8d0ef76907", "sha256": "20d13a122585e639bdeb838b0fe44bb0cf9e51a2e79054615f7337c4b3282e3d", "subject": "eixo-inviolex.digital", "valid_to": "2026-12-02T21:17:09Z", "valid_from": "2026-09-03T20:17:11Z" }, "whois": [], "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-03-08T16:00:00Z", "registration": "2026-03-08T16:00:00Z", "registrar expiration": "2027-03-08T16:00:00Z", "last update of RDAP database": "2026-03-08T16:00:00Z" }, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T16:45:09Z", "mail_config": { "mx": [ "mail.eixo-inviolex.digital" ], "spf": "v=spf1 ip4:46.166.131.92 ~all", "spf_lookups": 0 }, "caa_records": { "domain": "eixo-inviolex.digital" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*", "Amazonbot", "Applebot-Extended", "Bytespider", "CCBot" ], "present": true, "sitemaps": [ "https://eixo-inviolex.digital/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "title": "Eixo Inviolex", "robots": "index, follow", "description": "Eixo Inviolex delivers AI-enhanced automation for trade execution, risk governance, and operational tooling built around intelligent trading bots.", "canonicalUrl": "https://eixo-inviolex.digital/" }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 6 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 421, "tls": 55, "wait": 168, "connect": 13, "download": 76 }, "response_ms": 733 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 147762, "co2_grams": 0.0054, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "172.64.35.113", "host": "andronicus.ns.cloudflare.com" }, { "ip": "172.64.32.159", "host": "grace.ns.cloudflare.com" } ], "zone": "eixo-inviolex.digital" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3031::ac43:bd05", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "eixo-inviolex.digital" }, "dns": { "A": [ "172.67.189.5", "104.21.43.239" ], "MX": [ "{\"exchange\": \"mail.eixo-inviolex.digital\", \"priority\": 10}" ], "NS": [ "andronicus.ns.cloudflare.com", "grace.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"andronicus.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418083792, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "google-site-verification=2Dv9lYUvw9joxJ10RBhYu5tiApOHJDQsd9cxvBhkQ-E", "v=spf1 ip4:46.166.131.92 ~all" ], "AAAA": [ "2606:4700:3031::ac43:bd05", "2606:4700:3037::6815:2bef" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=15552000; includeSubDomains; preload", "message": "HSTS max-age is 15552000, below the 31536000 minimum." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; font-src 'self' https://fonts.gstat", "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3031::ac43:bd05", "family": 6 }, "redirects": { "chain": [ "https://eixo-inviolex.digital" ] }, "linked_pages": { "internal_count": 46 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cl", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```