# PhishDestroy domain threat record: fenixrendorio.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/fenixrendorio.digital/
Machine-readable companion: https://phishdestroy.io/domain/fenixrendorio.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-26 20:43:11 UTC
- Stored record updated: 2026-10-26 21:26:39 UTC
- VirusTotal detections in the stored snapshot: 2/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.1
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-13 09:32:29 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0806b-e586-70dc-8fe4-37217b977116/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/fenixrendorio.digital
- Certificate Transparency search: https://crt.sh/?q=%25.fenixrendorio.digital
- Web Archive lookup: https://web.archive.org/web/*/https://fenixrendorio.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed fenixrendorio.digital as a suspicious domain after VirusTotal reported two malicious detections on 2026-10-20. The recorded page title claims to be an "AI Trading Platform" and the site returned HTTP 200 on 2026-10-26. The domain was first seen by PhishDestroy on 2026-10-26.

How the scam works
The listing reflects automated detections of suspicious content or behavior; it does not establish a specific fraud mechanism such as credential theft or malware delivery. A trading-related title alone does not prove affiliation with any real platform.

Evidence
VirusTotal analysis on 2026-10-20 detected the domain as malicious for two vendors, Gridinsoft and SOCRadar, out of 92 engines. Google Safe Browsing checked on 2026-10-26 did not flag the domain. URLScan captured the site on 2026-09-08, returned an overall clean verdict but labeled its engine score malicious with a 100. OTX listed three pulses referencing the domain as of 2026-10-26. PhishDestroy’s internal blocklist marks the domain as blocked, while external blocklists returned zero hits, with one block by CloudFlare Family.

Infrastructure
The domain was registered on 2026-08-13 through Dynadot Inc, 74 days before first detection, and is hosted behind Cloudflare with recorded IPv4 188.114.96.1 and IPv6 2a06:98c1:3121::3. TLS 1.3 was observed, issued by Google Trust Services on 2026-08-13 and valid until 2026-11-11. Nameservers are irma.ns.cloudflare.com and nikon.ns.cloudflare.com, and DNSSEC was not enabled.

What to do
Avoid entering any credentials or personal information on the site; if you have already done so, change related passwords and monitor accounts for unusual activity. Report the domain to PhishDestroy and consider adding it to local blocklists. Security teams should log any connections to the recorded IP addresses and enforce blocking for fenixrendorio.digital specifically.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0806b-e586-70dc-8fe4-37217b977116/
Cloudflare Radar report: https://radar.cloudflare.com/scan/f3879da2-6508-4116-b772-1a901542b725
Stored capture screenshot: https://urlscan.io/screenshots/01a0806b-e586-70dc-8fe4-37217b977116.png
Cloudflare Radar screenshot (2026-10-26T20:52:54Z): https://screenshots.phishdestroy.io/cf/f3879da2-6508-4116-b772-1a901542b725.png
URLScan screenshot (2026-09-07T08:31:48Z): https://screenshots.phishdestroy.io/us/01a07afe-9daf-719e-97d3-6e20d66b98ab.png
URLScan capture report: https://urlscan.io/result/01a07afe-9daf-719e-97d3-6e20d66b98ab/
URLScan screenshot (2026-10-26T20:51:56Z): https://screenshots.phishdestroy.io/us/01a179fb-bd7d-74b9-80e5-e49b04679dc9.png
URLScan capture report: https://urlscan.io/result/01a179fb-bd7d-74b9-80e5-e49b04679dc9/
VirusTotal report: https://www.virustotal.com/gui/domain/fenixrendorio.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=fenixrendorio.digital
Archived copy: https://web.archive.org/web/20261026204408/https://fenixrendorio.digital/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 21:24:27 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0806b-e586-70dc-8fe4-37217b977116.png
  Captured: 2026-10-26 20:43:11 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a0806b-e586-70dc-8fe4-37217b977116.png
  Source report: https://urlscan.io/result/01a0806b-e586-70dc-8fe4-37217b977116/
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07afe-9daf-719e-97d3-6e20d66b98ab.png
  Captured: 2026-09-07 08:31:48 UTC
  Source report: https://urlscan.io/result/01a07afe-9daf-719e-97d3-6e20d66b98ab/
  SHA-256: 1d6508b490cd82bc9ba7fd278c2625b78ab1bb7706179530e29d44cf4bedaac3
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179fb-bd7d-74b9-80e5-e49b04679dc9.png
  Captured: 2026-10-26 20:51:56 UTC
  Source report: https://urlscan.io/result/01a179fb-bd7d-74b9-80e5-e49b04679dc9/
  SHA-256: c72d93af5c45e2b44cf3c2667c61642449b71a854e14def9428beae62c194671
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f3879da2-6508-4116-b772-1a901542b725.png
  Captured: 2026-10-26 20:52:54 UTC
  Source report: https://radar.cloudflare.com/scan/f3879da2-6508-4116-b772-1a901542b725
  SHA-256: 4fa08039e1e36bad31b3b92d81b80e88f2dc49f8f51bf2d8cffb565d960e3e03

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:56:44Z",
        "uuid": "01a0806b-e586-70dc-8fe4-37217b977116",
        "scanned_at": "2026-09-08T09:49:16Z",
        "final_url": "https://fenixrendorio.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://fenixrendorio.digital/",
                "from": "http://fenixrendorio.digital/",
                "status": 307
            }
        ],
        "ip": "2a06:98c1:3121::3",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "188.114.96.3",
            "2606:4700::6811:cf05",
            "2a00:1450:4001:c17::5f",
            "104.17.25.14",
            "2a06:98c1:3121::3"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "6e02aed098dc0333b705c9821222eba000fb3786048a47dec541360ae4939556",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_vzsn5bk2",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "fenixrendorio.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "fenixrendorio.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-11T11:52:59Z",
            "valid_from": "2026-08-13T10:53:01Z"
        },
        "domain_age_days": 25,
        "apex_age_days": 25,
        "tls_age_days": 25,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "frame-ancestors 'self'; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T20:56:46Z",
        "uuid": "f3879da2-6508-4116-b772-1a901542b725",
        "scanned_at": "2026-10-26T20:52:54Z",
        "final_url": "https://fenixrendorio.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://fenixrendorio.digital/",
                "status": 200
            }
        ],
        "dom_hash": "61c33b8558e26b9d3ea1726472bfc0cdc12199447173a17ae97f1ef02e9e52e2",
        "doc_hash": "572ade516221ca6d4bc055d9b06043b6288a2043ba9c309b102e204847dcb20a",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "fenixrendorio.digital",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "fenixrendorio.digital",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "fenixrendorio.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            },
            {
                "name": "fenixrendorio.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.97.0",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-13T11:32:29Z",
            "updated": "2026-08-18T11:32:59Z",
            "expires": "2027-08-13T11:32:29Z",
            "nameservers": [
                "irma.ns.cloudflare.com",
                "nikon.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T21:21:36Z",
        "analysis_at": "2026-10-20T05:39:13Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 2,
            "suspicious": 0,
            "undetected": 35
        },
        "detections": {
            "SOCRadar": "phishing",
            "Gridinsoft": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Sophos": "phishing and fraud",
            "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
        },
        "first_seen": "2026-08-13T12:19:30Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.47.228"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:2fe4"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nikon.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "irma.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.173.210"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "irma.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:add2"
            }
        ],
        "dns_at": "2026-10-20T05:39:51Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "fenixrendorio.digital"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "77c7b26c66ab227d0ebb9febe67a34f3",
            "sha256": "02d2b5acf9d4f2a45d492a7b9e994d4b9c18e4166b5590642c5790bb4f528650",
            "subject": "fenixrendorio.digital",
            "valid_to": "2027-01-09T12:26:22Z",
            "valid_from": "2026-10-11T11:26:24Z"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-13T11:32:29Z",
                "last changed": "2026-08-13T11:36:07Z",
                "registration": "2026-08-13T11:32:29Z",
                "registrar expiration": "2027-08-13T11:32:29Z",
                "last update of RDAP database": "2026-10-16T07:31:56Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:57:04Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "fenixrendorio.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-26T20:44:08Z",
            "first": "2026-10-26T20:44:08Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 43785
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true,
            "sitemaps": [
                "https://fenixrendorio.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://fenixrendorio.digital/",
            "title": "Fênix Rendório | AI Trading Platform | Authorized Platform",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Fênix Rendório | Premier AI Trading Platform",
            "ogSiteName": "Fênix Rendório",
            "themeColor": "#070B1E",
            "description": "Fênix Rendório delivers AI-powered trading support, automated strategies, portfolio insights, and streamlined market workflows for today's digital asset participants.",
            "twitterCard": "summary",
            "canonicalUrl": "https://fenixrendorio.digital/",
            "ogDescription": "Fênix Rendório delivers AI-powered trading support, automated strategies, portfolio insights, and streamlined market workflows for today's digital asset participants."
        },
        "trackers": {
            "requests": 20,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 24,
                "wait": 233,
                "connect": 6,
                "download": 27
            },
            "response_ms": 292
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 146133,
            "co2_grams": 0.0053,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.192.166",
                    "host": "irma.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.176",
                    "host": "nikon.ns.cloudflare.com"
                }
            ],
            "zone": "fenixrendorio.digital"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "fenixrendorio.digital"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "irma.ns.cloudflare.com",
                "nikon.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"irma.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086267, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=15552000; includeSubDomains; preload",
            "message": "HSTS max-age is 15552000, below the 31536000 minimum."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.goog",
            "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://fenixrendorio.digital"
            ]
        },
        "tech_stack": {
            "technologies": [
                "jsDelivr",
                "Cloudflare Turnstile",
                "Cloudflare Rocket Loader",
                "ClientJS",
                "Priority Hints",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
                "content-security-policy": "frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```