# PhishDestroy domain threat record: fiduciaandina.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/fiduciaandina.net/
Machine-readable companion: https://phishdestroy.io/domain/fiduciaandina.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 21:55:08 UTC
- Last availability or vendor check: 2026-10-26 22:00:46 UTC
- Stored record updated: 2026-10-26 23:23:27 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: celer

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-16 07:42:46 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17a3a-05a2-754b-8b3f-ad856459ffa2/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/fiduciaandina.net
- Certificate Transparency search: https://crt.sh/?q=%25.fiduciaandina.net
- Web Archive lookup: https://web.archive.org/web/*/https://fiduciaandina.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed fiduciaandina.net as a suspicious domain based on multiple malicious detections from security engines. The recorded page title is “Fiducia Andina | Plataforma Oficial de Trading con IA”, which presents the site as a crypto‑trading service. The domain was first seen by PhishDestroy on 2026-10-26 and returned an HTTP 200 response on that date. Google Safe Browsing reported no flag and external blocklists showed zero matches on the check date.

How the scam works
The classification reflects a generic risk associated with domains that receive many malicious labels from security vendors. Such domains are often used for phishing, malware distribution, or credential harvesting, but no specific malicious behavior was observed on this page. The assessment therefore highlights the potential for typical scam tactics without attributing a concrete mechanism to this site.

Evidence
VirusTotal recorded 15 malicious and 3 suspicious detections from 92 engines on 2026-10-26, totaling 18 detections. Vendors reporting malicious status include ADMINUSLabs, BitDefender, Fortinet, Kaspersky and others. Google Safe Browsing checked on 2026-10-27 returned no flag. URLScan captured the site on 2026-10-26, gave an overall clean verdict but its engine score flagged it as malicious (score 88). Cloudflare Radar on 2026-10-26 labeled the domain as phishing and malware. OTX listed five pulses referencing the domain. PhishDestroy’s internal blocklist includes the domain, while external blocklists showed zero matches on the check date.

Infrastructure
The domain was registered on 2026-04-16 through Dynadot Inc and was 193 days old at first sighting. The recorded IP address is 158.94.210.119, belonging to ASN 202412 (Omegatech LTD, Netherlands). The site used a Let’s Encrypt TLS certificate valid from 2026-09-01 to 2026-11-30. Open ports observed were 22, 80 and 443. No DNSSEC records were present.

What to do
Visitors should avoid entering credentials, downloading files, or providing payment information on this site; if any credentials were submitted, change the associated passwords immediately. Defenders should block the exact domain, monitor network logs for connections to 158.94.210.119, and add the domain to local blocklists. No wallet‑related actions are required as no wallet interaction was observed.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17a3a-05a2-754b-8b3f-ad856459ffa2/
Cloudflare Radar report: https://radar.cloudflare.com/scan/f7ae5314-993c-4995-bc38-e36296e2aae2
URLQuery report: https://urlquery.net/report/59b39ed3-4a64-4a13-9321-0cf7c4256cb9
Stored capture screenshot: https://i.ibb.co/6cN8sb4f/26e8a35d3a0d.png
Cloudflare Radar screenshot (2026-10-26T21:55:40Z): https://screenshots.phishdestroy.io/cf/f7ae5314-993c-4995-bc38-e36296e2aae2.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/59b39ed3-4a64-4a13-9321-0cf7c4256cb9.png
URLScan screenshot (2026-08-03T13:00:21Z): https://screenshots.phishdestroy.io/us/019fc7b5-e942-75a8-aa29-10c98ef7e6d4.png
URLScan capture report: https://urlscan.io/result/019fc7b5-e942-75a8-aa29-10c98ef7e6d4/
URLScan screenshot (2026-08-04T07:52:49Z): https://screenshots.phishdestroy.io/us/019fcbc2-9a56-71f1-b197-eda8a0a5b2c1.png
URLScan capture report: https://urlscan.io/result/019fcbc2-9a56-71f1-b197-eda8a0a5b2c1/
URLScan screenshot (2026-09-08T01:38:28Z): https://screenshots.phishdestroy.io/us/01a07eaa-8d73-72fb-89fb-624471d9059c.png
URLScan capture report: https://urlscan.io/result/01a07eaa-8d73-72fb-89fb-624471d9059c/
VirusTotal report: https://www.virustotal.com/gui/domain/fiduciaandina.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=fiduciaandina.net
Archived copy: https://web.archive.org/web/20261026215521/https://fiduciaandina.net/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 23:06:11 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/6cN8sb4f/26e8a35d3a0d.png
  Captured: 2026-10-26 22:00:46 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a17a3a-05a2-754b-8b3f-ad856459ffa2.png
  Captured: 2026-10-26 22:00:46 UTC
  Source report: https://urlscan.io/result/01a17a3a-05a2-754b-8b3f-ad856459ffa2/
- URLScan capture 2: https://screenshots.phishdestroy.io/019fcbc2-9a56-71f1-b197-eda8a0a5b2c1.png
  Captured: 2026-10-26 21:55:08 UTC
  Source report: https://urlscan.io/result/01a17a3a-05a2-754b-8b3f-ad856459ffa2/
- URLScan · 2026-08-03: https://screenshots.phishdestroy.io/us/019fc7b5-e942-75a8-aa29-10c98ef7e6d4.png
  Captured: 2026-08-03 13:00:21 UTC
  Source report: https://urlscan.io/result/019fc7b5-e942-75a8-aa29-10c98ef7e6d4/
  SHA-256: f7d5c585286c39d9137eaa9c24802c4393fa65a8438a1b74f206cb48682525b1
- URLScan · 2026-09-08: https://screenshots.phishdestroy.io/us/01a07eaa-8d73-72fb-89fb-624471d9059c.png
  Captured: 2026-09-08 01:38:28 UTC
  Source report: https://urlscan.io/result/01a07eaa-8d73-72fb-89fb-624471d9059c/
  SHA-256: 256c9bed56d4fe204b46d74d5790b4f70b3411de9ba608c50f0c68036a325914
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f7ae5314-993c-4995-bc38-e36296e2aae2.png
  Captured: 2026-10-26 21:55:40 UTC
  Source report: https://radar.cloudflare.com/scan/f7ae5314-993c-4995-bc38-e36296e2aae2
  SHA-256: ee2a018a2144f173218abe90180a168fd1ddc206c361c639db2c29be2c6d2a3b
- URLQuery: https://screenshots.phishdestroy.io/uq/59b39ed3-4a64-4a13-9321-0cf7c4256cb9.png
  Source report: https://urlquery.net/report/59b39ed3-4a64-4a13-9321-0cf7c4256cb9
  SHA-256: 3c1cea1eb0838da66ef98353998a6f706ea4ecfc4b97254eaf83b2169920da94
- URLScan · 2026-08-04: https://screenshots.phishdestroy.io/us/019fcbc2-9a56-71f1-b197-eda8a0a5b2c1.png
  Captured: 2026-08-04 07:52:49 UTC
  Source report: https://urlscan.io/result/019fcbc2-9a56-71f1-b197-eda8a0a5b2c1/
  SHA-256: 9650b9f52fdcd15dfecdb8708e983427321bbe3ca274e42515990d230fae6e3c

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T22:27:38Z",
        "uuid": "01a17a3a-05a2-754b-8b3f-ad856459ffa2",
        "scanned_at": "2026-10-26T21:59:53Z",
        "final_url": "https://fiduciaandina.net/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://fiduciaandina.net/",
                "from": "http://fiduciaandina.net/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "e9232c99b2472d36721d516b9adca4515de61e41d024a09af0373a4f2b11bc86",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "navToggle",
            "navMenu",
            "langSwitcher",
            "langBtn"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "fiduciaandina.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "fiduciaandina.net",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-30T16:06:54Z",
            "valid_from": "2026-09-01T16:06:55Z"
        },
        "domain_age_days": 193,
        "apex_age_days": 193,
        "tls_age_days": 55,
        "tls_valid_days": 89,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 88,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T21:56:02Z",
        "uuid": "f7ae5314-993c-4995-bc38-e36296e2aae2",
        "scanned_at": "2026-10-26T21:55:40Z",
        "final_url": "https://fiduciaandina.net/",
        "status": 200,
        "history": [
            {
                "url": "https://fiduciaandina.net/",
                "status": 200
            }
        ],
        "dom_hash": "50fbc56e05846fd989de62be54c4345217facfb3450caccad2f36f4911201e91",
        "doc_hash": "77721fd5b9a9bd96bc97bd8ce66aac1977b247334b6b5c7659b0b9051c752015",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Scam",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "fiduciaandina.net",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-04-16T09:42:46Z",
            "updated": "2026-08-13T12:30:40Z",
            "expires": "2027-04-16T09:42:46Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T23:03:12Z",
        "analysis_at": "2026-10-26T13:05:11Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 15,
            "suspicious": 3,
            "undetected": 30
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "malicious",
            "Sophos": "phishing",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "SafeToOpen": "phishing",
            "ADMINUSLabs": "malicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-04-16T00:00:00Z",
        "updated": "2026-04-16T00:00:00Z",
        "first_seen": "2026-04-16T09:59:32Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.fiduciaandina.net",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-26T13:10:34Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "fiduciaandina.net"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6c28d665e08878bbb22394b60d659827279",
            "sha256": "b84919b95a1a7a5e7a06840c265b4cbb743a839479fa246c44ba213be971a3f8",
            "subject": "fiduciaandina.net",
            "valid_to": "2026-11-30T16:06:54Z",
            "valid_from": "2026-09-01T16:06:55Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-04-16T09:42:46Z",
                "last changed": "2026-09-01T10:11:19Z",
                "registration": "2026-04-16T09:42:46Z",
                "registrar expiration": "2027-04-16T09:42:46Z",
                "last update of RDAP database": "2026-10-23T10:30:04Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T21:56:15Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "fiduciaandina.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-26T21:55:21Z",
            "first": "2026-10-07T21:00:51Z",
            "changes": 2,
            "days_archived": 3,
            "scans_per_day": 0.11,
            "avg_page_bytes": 22737
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://fiduciaandina.net/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Fiducia Andina | Plataforma Oficial de Trading con IA",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Fiducia Andina: tu aliado de confianza en trading de criptomonedas. IA avanzada, inversiones seguras y rápidas, conectividad con brokers y educación práctica.",
            "canonicalUrl": "https://fiduciaandina.net/"
        },
        "trackers": {
            "requests": 48,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 216,
                "tls": 78,
                "wait": 95,
                "connect": 66,
                "download": 284
            },
            "response_ms": 739
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 88731,
            "co2_grams": 0.0032,
            "cleaner_than": 25
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "fiduciaandina.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "fiduciaandina.net"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.fiduciaandina.net\", \"serial\": 2026090101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://fiduciaandina.net"
            ]
        },
        "linked_pages": {
            "internal_count": 29
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-04-16T09:42:46Z",
            "updated": "2026-08-13T12:30:40Z",
            "expires": "2027-04-16T09:42:46Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```