# PhishDestroy domain threat record: fineonix.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/fineonix.shop/
Machine-readable companion: https://phishdestroy.io/domain/fineonix.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 21:56:46 UTC
- Last availability or vendor check: 2026-10-26 23:00:34 UTC
- Stored record updated: 2026-10-26 23:00:34 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.58.101
- Registrar in stored WHOIS data: Dynadot Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-29 06:09:33 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a022e0-5f99-72aa-bda2-ed22e2ff2792/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/fineonix.shop
- Certificate Transparency search: https://crt.sh/?q=%25.fineonix.shop
- Web Archive lookup: https://web.archive.org/web/*/https://fineonix.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed fineonix.shop as a suspicious domain based on multiple vendor detections. The recorded page title was “Fineonix | AI Trading Platform | Official Website”. The domain was first seen by PhishDestroy on 2026-10-26 when an HTTP 200 response was recorded.

How the scam works
The vendor detections label the site as phishing or fraud, which typically involves a convincing façade that tries to obtain credentials or financial information from visitors. No concrete malicious behavior was observed on the captured page, so the assessment relies on the vendor classifications rather than direct evidence.

Evidence
VirusTotal scanned the domain on 2026-10-24 (retrieved 2026-10-26) and reported 14 malicious and 3 suspicious detections out of 92 engines, with vendors such as BitDefender, ESET and Fortinet flagging it as phishing. Google Safe Browsing checked on 2026-10-26 and did not flag the site. urlscan captured the page on 2026-08-21; its engine score was 98 (malicious) while the overall verdict was clean. OTX listed one pulse referencing the domain as of 2026-10-26, and PhishDestroy’s internal blocklist marks the domain as blocked; external blocklists showed no matches.

Infrastructure
The domain was registered on 2026-03-29 through Dynadot Inc. The recorded IP address 185.62.58.101 is associated with Snel.com B.V. in the Netherlands and the site is served via Cloudflare. The TLS certificate, issued by ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2, is valid from 2026-10-20 to 2027-01-18 for the fineonix.shop hostname.

What to do
Visitors should avoid entering any credentials, personal data, or financial information on the site; if such data was submitted, change related passwords immediately. Organizations can block the domain at DNS or web‑filter level and monitor for outbound connections to the recorded IP address. Security teams should log any access attempts and treat the domain as potentially malicious in line with PhishDestroy’s classification.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a022e0-5f99-72aa-bda2-ed22e2ff2792/
Cloudflare Radar report: https://radar.cloudflare.com/scan/5c9be150-c9a3-49af-99ce-fa07df916169
Stored capture screenshot: https://urlscan.io/screenshots/01a022e0-5f99-72aa-bda2-ed22e2ff2792.png
Cloudflare Radar screenshot: https://screenshots.phishdestroy.io/cf/5c9be150-c9a3-49af-99ce-fa07df916169.png
URLScan screenshot (2026-08-20T12:15:29Z): https://screenshots.phishdestroy.io/us/01a01f18-e273-7540-aaf4-aef97f594439.png
URLScan capture report: https://urlscan.io/result/01a01f18-e273-7540-aaf4-aef97f594439/
VirusTotal report: https://www.virustotal.com/gui/domain/fineonix.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=fineonix.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 22:00:08 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a022e0-5f99-72aa-bda2-ed22e2ff2792.png
  Captured: 2026-10-26 21:56:46 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a022e0-5f99-72aa-bda2-ed22e2ff2792.png
  Source report: https://urlscan.io/result/01a022e0-5f99-72aa-bda2-ed22e2ff2792/
- URLScan · 2026-08-20: https://screenshots.phishdestroy.io/us/01a01f18-e273-7540-aaf4-aef97f594439.png
  Captured: 2026-08-20 12:15:29 UTC
  Source report: https://urlscan.io/result/01a01f18-e273-7540-aaf4-aef97f594439/
  SHA-256: 60e31f40f67f67dacaa31b1f9c5765c98ed6ca8a9df57432b8d2ab1c3126e44e
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5c9be150-c9a3-49af-99ce-fa07df916169.png
  Captured: 2026-10-26 21:58:26 UTC
  Source report: https://radar.cloudflare.com/scan/5c9be150-c9a3-49af-99ce-fa07df916169
  SHA-256: 946922d1f700a782a92a4165f6de91505277ca045fed2beaa143cc18f5c9aba6

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T21:59:05Z",
        "uuid": "01a022e0-5f99-72aa-bda2-ed22e2ff2792",
        "scanned_at": "2026-08-21T05:52:11Z",
        "final_url": "https://fineonix.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://fineonix.shop/",
                "from": "http://fineonix.shop/",
                "status": 307
            }
        ],
        "ip": "104.21.17.181",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.17.208.5",
            "142.251.14.95",
            "104.17.25.14",
            "104.21.17.181"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "a95343ccc4f400c543ce9830c8ccb0b02e33e6999c801a0d64f5bd49f2207589",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_agnnzspk",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "fineonix.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "fineonix.shop",
            "protocol": "QUIC",
            "valid_to": "2026-10-23T14:25:17Z",
            "valid_from": "2026-07-25T13:25:20Z"
        },
        "domain_age_days": 144,
        "apex_age_days": 144,
        "tls_age_days": 26,
        "tls_valid_days": 90,
        "requests": 17,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net; frame-ancestors 'self'; default-src 'self'; img-src 'self' data: blob:; style-src 'self' 'unsafe",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "no-referrer-when-downgrade",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T22:27:39Z",
        "uuid": "5c9be150-c9a3-49af-99ce-fa07df916169",
        "scanned_at": "2026-10-26T21:58:26Z",
        "final_url": "https://fineonix.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://fineonix.shop/",
                "status": 200
            }
        ],
        "dom_hash": "d0a502c74e861698613384243be4882d83036d8027bbd4a28c78435888bae656",
        "doc_hash": "49bc34461749ef313bdbc418bab06c73a76469ad1117478b6b257289cd70d26d",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "fineonix.shop",
                "type": "A",
                "value": "185.62.58.101"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.58.101",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T21:57:53Z",
        "analysis_at": "2026-10-23T23:44:14Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 14,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Sophos": "phishing and fraud",
            "Webroot": "Phishing and Other Frauds",
            "alphaMountain.ai": "Phishing (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "phishing and other frauds"
        },
        "created": "2026-03-29T00:00:00Z",
        "updated": "2026-03-29T00:00:00Z",
        "first_seen": "2026-03-29T14:06:46Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "tom.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.58.101"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jean.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "jean.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-23T23:44:30Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "fineonix.shop"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "c680116dab69dbdc8cb96ef5d0c13a67",
            "sha256": "b7aa218e36a6d33262a25c5afd7f94060bfb89903f7cd816458324102112112c",
            "subject": "fineonix.shop",
            "valid_to": "2027-01-18T23:59:59Z",
            "valid_from": "2026-10-20T00:00:00Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T21:59:26Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "fineonix.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-26T21:58:42Z",
            "first": "2026-10-26T21:58:42Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 12609
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://fineonix.shop/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 175
        },
        "social_tags": {
            "ogUrl": "https://fineonix.shop/",
            "title": "Fineonix | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Fineonix | Premier AI-Driven Automated Trading Platform",
            "ogSiteName": "Fineonix",
            "themeColor": "#111111",
            "description": "Fineonix delivers a premium overview of AI-powered automated trading bots, execution workflows, risk controls, and operational features for modern markets.",
            "twitterCard": "summary",
            "canonicalUrl": "https://fineonix.shop/",
            "ogDescription": "Fineonix delivers a premium overview of AI-powered automated trading bots, execution workflows, risk controls, and operational features for modern markets."
        },
        "trackers": {
            "requests": 20,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 9,
                "tls": 36,
                "wait": 25,
                "connect": 16,
                "download": 16
            },
            "response_ms": 102
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 46671,
            "co2_grams": 0.0017,
            "cleaner_than": 38
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.33.147",
                    "host": "tom.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.121",
                    "host": "jean.ns.cloudflare.com"
                }
            ],
            "zone": "fineonix.shop"
        },
        "location": {
            "ip": "185.62.58.101",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "fineonix.shop"
        },
        "dns": {
            "A": [
                "185.62.58.101"
            ],
            "NS": [
                "jean.ns.cloudflare.com",
                "tom.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"jean.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416886291, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.58.101",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://fineonix.shop"
            ]
        },
        "linked_pages": {
            "internal_count": 45
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```