# PhishDestroy domain threat record: evelunec.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/evelunec.net/
Machine-readable companion: https://phishdestroy.io/domain/evelunec.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 23:08:19 UTC
- Last availability or vendor check: 2026-10-25 23:08:19 UTC
- Stored record updated: 2026-10-26 01:00:18 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 172.67.212.104
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-15 13:46:11 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17550-92d8-74fb-95bd-4e8c0979cda2/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/evelunec.net
- Certificate Transparency search: https://crt.sh/?q=%25.evelunec.net
- Web Archive lookup: https://web.archive.org/web/*/https://evelunec.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added evelunec.net to its internal blocklist as a suspicious domain. The recorded page title was “Evelunec — Plateforme IA d'investissement sans complexité” in French. PhishDestroy first observed the domain on 2026-10-26, 41 days after its registration on 2026-09-15. An HTTP 200 response was recorded on that date.

How the scam works
Because no malicious functionality was observed on the page, the classification relies on external detections that commonly flag sites used for phishing, credential harvesting, or fraudulent investment offers. Such categories typically lure users to submit personal or financial information under false pretenses. The current evidence does not confirm any particular technique being employed on this site.

Evidence
VirusTotal scanned the domain on 2026-10-25, reporting 17 detections from 92 engines (14 malicious, 3 suspicious) including vendors such as BitDefender, CRDF and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-26 and returned no flag. Cloudflare Radar (2026-10-26) labeled the URL as phishing and malware with a malicious verdict, and urlscan.io (2026-10-26) gave an engine‑based malicious score of 81 while its overall verdict was non‑malicious. OTX listed five pulses referencing the domain as of 2026-10-26, and PhishDestroy’s internal blocklist marked it as suspicious on 2026-10-26.

Infrastructure
evelunec.net was registered with Dynadot Inc on 2026-09-15. The domain resolved to Cloudflare IP addresses 172.67.212.104 and 104.21.37.187, recorded in Canada. TLS was provided by Let’s Encrypt, valid from 2026-09-15 to 2026-12-14, and DNSSEC was not enabled. Open ports observed in the scan were 80, 443 and 8080.

What to do
Visitors should avoid entering any personal, login or financial data on the site and refrain from downloading files. If any credentials were submitted, change the associated passwords and monitor accounts for unauthorized activity. Defenders should block evelunec.net at network perimeters, add the domain to threat‑intel feeds, and review logs for connections to the recorded IP addresses.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17550-92d8-74fb-95bd-4e8c0979cda2/
Cloudflare Radar report: https://radar.cloudflare.com/scan/fb780187-e400-47de-9a40-fdf2002b3dbb
URLQuery report: https://urlquery.net/report/c1625a1b-a7e2-470c-bb81-ee51f8b0fd2a
Stored capture screenshot: https://urlscan.io/screenshots/01a17550-92d8-74fb-95bd-4e8c0979cda2.png
Cloudflare Radar screenshot (2026-10-25T23:39:43Z): https://screenshots.phishdestroy.io/cf/fb780187-e400-47de-9a40-fdf2002b3dbb.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/c1625a1b-a7e2-470c-bb81-ee51f8b0fd2a.png
VirusTotal report: https://www.virustotal.com/gui/domain/evelunec.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=evelunec.net
Archived copy: https://web.archive.org/web/20261025230910/https://evelunec.net/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 23:40:37 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17550-92d8-74fb-95bd-4e8c0979cda2.png
  Captured: 2026-10-25 23:08:19 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17550-92d8-74fb-95bd-4e8c0979cda2.png
  Captured: 2026-10-25 23:08:19 UTC
  Source report: https://urlscan.io/result/01a17550-92d8-74fb-95bd-4e8c0979cda2/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/fb780187-e400-47de-9a40-fdf2002b3dbb.png
  Captured: 2026-10-25 23:39:43 UTC
  Source report: https://radar.cloudflare.com/scan/fb780187-e400-47de-9a40-fdf2002b3dbb
  SHA-256: 0e821f062ed532ced49ae1e62a093ee053becf2bb892fce1a5130280a37b59b5
- URLQuery: https://screenshots.phishdestroy.io/uq/c1625a1b-a7e2-470c-bb81-ee51f8b0fd2a.png
  Source report: https://urlquery.net/report/c1625a1b-a7e2-470c-bb81-ee51f8b0fd2a
  SHA-256: 1ce1f750012d6cfab12094df5197159641a8a3b86dcc6934baa92fae67b09f1c
- URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10af8-98d8-773f-9baa-8a3b959a11d7.png
  Captured: 2026-10-05 07:30:33 UTC
  Source report: https://urlscan.io/result/01a10af8-98d8-773f-9baa-8a3b959a11d7/
  SHA-256: b1121c1485e1994e534bb27139999bb680c3706f5f24863182bef71d0276df5c
- URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10c05-f75e-7174-977e-1a16090dc486.png
  Captured: 2026-10-05 12:24:55 UTC
  Source report: https://urlscan.io/result/01a10c05-f75e-7174-977e-1a16090dc486/
  SHA-256: 87816591a34402c7c00b7a6b0e37dafce1463666f2d39b377f15645fd2f9782a
- URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a1111c-c4e5-707d-80ed-83eb07815155.png
  Captured: 2026-10-06 12:07:48 UTC
  Source report: https://urlscan.io/result/01a1111c-c4e5-707d-80ed-83eb07815155/
  SHA-256: 2957b0babe28b48ffdaae79c78a1e31fc2328fcc9d7d6378ae8c4f96d23cc687
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1755b-36aa-750d-abdc-33750787ff05.png
  Captured: 2026-10-25 23:18:00 UTC
  Source report: https://urlscan.io/result/01a1755b-36aa-750d-abdc-33750787ff05/
  SHA-256: b1f058a0fe40e00f1d5b8c0d0a0367de6c95d7d691f9b4c11571393b530b8bb8

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T23:39:57Z",
        "uuid": "01a17550-92d8-74fb-95bd-4e8c0979cda2",
        "scanned_at": "2026-10-25T23:06:25Z",
        "final_url": "https://evelunec.net/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://evelunec.net/",
                "from": "http://evelunec.net/",
                "status": 307
            }
        ],
        "ip": "104.21.37.187",
        "domains": [
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.16.79.73",
            "104.21.37.187"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "2503c4efb5ccf41db73d88a9634f1f3d3fd1d30dcb305ea31f58eadded130f21",
        "script_hashes": [
            "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8",
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "__cfBeacon",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.evelunec.net",
                "evelunec.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "evelunec.net",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-14T14:50:04Z",
            "valid_from": "2026-09-15T14:50:05Z"
        },
        "domain_age_days": 40,
        "apex_age_days": 40,
        "tls_age_days": 40,
        "tls_valid_days": 89,
        "requests": 12,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 81,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T23:39:58Z",
        "uuid": "fb780187-e400-47de-9a40-fdf2002b3dbb",
        "scanned_at": "2026-10-25T23:39:43Z",
        "final_url": "https://evelunec.net/",
        "status": 200,
        "history": [
            {
                "url": "https://evelunec.net/",
                "status": 200
            }
        ],
        "dom_hash": "98fc5c9912caf794820cbdfe3362a50228d254538c742ca8dfc6db7726d1aab5",
        "doc_hash": "7de7dc9c6d6eb01388e38cfc6f9ae249014e3c5179c6f916626d6d0fe88710af",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Scam",
            "Security threats",
            "Malware",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "evelunec.net",
                "type": "A",
                "value": "104.21.37.187"
            },
            {
                "name": "evelunec.net",
                "type": "A",
                "value": "172.67.212.104"
            },
            {
                "name": "evelunec.net",
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:d468"
            },
            {
                "name": "evelunec.net",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:25bb"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.37.187",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-15T15:46:11Z",
            "updated": "2026-09-15T15:46:24Z",
            "expires": "2027-09-15T15:46:11Z",
            "nameservers": [
                "connie.ns.cloudflare.com",
                "jonah.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T23:39:11Z",
        "analysis_at": "2026-10-25T09:21:05Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 14,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-09-15T15:46:11Z",
        "expires": "2027-09-15T15:46:11Z",
        "updated": "2026-09-15T15:46:24Z",
        "first_seen": "2026-09-15T17:04:23Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=EyVcLS5RCnSgsszWXK0MooTkHnWFmEMp6T3Jch9TpAw"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:d468"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "connie.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:25bb"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "connie.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.212.104"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jonah.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.37.187"
            }
        ],
        "dns_at": "2026-10-25T09:26:37Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.evelunec.net",
                "evelunec.net"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "604eb5e51f01ef191e17b8dbd288449b9cd",
            "sha256": "d8a661485fc4c69e3ef1d3e232a48fe229a7144311dde8320ba98ef253925dfe",
            "subject": "evelunec.net",
            "valid_to": "2026-12-14T14:50:04Z",
            "valid_from": "2026-09-15T14:50:05Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-09-15T15:46:11Z",
            "updated": "2026-09-15T15:46:24Z",
            "expires": "2027-09-15T15:46:11Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "connie.ns.cloudflare.com",
                "jonah.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-15T15:46:11Z",
                "last changed": "2026-09-15T15:46:24Z",
                "registration": "2026-09-15T15:46:11Z",
                "registrar expiration": "2027-09-15T15:46:11Z",
                "last update of RDAP database": "2026-10-23T11:14:09Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T23:40:11Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "evelunec.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T23:09:10Z",
            "first": "2026-09-15T18:51:00Z",
            "changes": 2,
            "days_archived": 3,
            "scans_per_day": 0.05,
            "avg_page_bytes": 13091
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://evelunec.net/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Evelunec — Plateforme IA d'investissement sans complexité",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Evelunec : plateforme IA qui analyse les signaux de marché et adapte votre portefeuille à votre profil de risque. Optimisez votre capital sans expertise technique.",
            "canonicalUrl": "https://evelunec.net/"
        },
        "trackers": {
            "requests": 45,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 2
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 28,
                "tls": 26,
                "wait": 197,
                "connect": 12,
                "download": 3
            },
            "response_ms": 266
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 64999,
            "co2_grams": 0.0024,
            "cleaner_than": 31
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.32.247",
                    "host": "connie.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.193.186",
                    "host": "jonah.ns.cloudflare.com"
                }
            ],
            "zone": "evelunec.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3030::ac43:d468",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "evelunec.net"
        },
        "dns": {
            "A": [
                "172.67.212.104",
                "104.21.37.187"
            ],
            "NS": [
                "connie.ns.cloudflare.com",
                "jonah.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"connie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416184788, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=EyVcLS5RCnSgsszWXK0MooTkHnWFmEMp6T3Jch9TpAw"
            ],
            "AAAA": [
                "2606:4700:3030::ac43:d468",
                "2606:4700:3037::6815:25bb"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3037::6815:25bb",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://evelunec.net"
            ]
        },
        "linked_pages": {
            "internal_count": 9
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-15T15:46:11Z",
            "updated": "2026-09-15T15:46:24Z",
            "expires": "2027-09-15T15:46:11Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "connie.ns.cloudflare.com",
                "jonah.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```