# PhishDestroy domain threat record: varioninversion.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/varioninversion.com/
Machine-readable companion: https://phishdestroy.io/domain/varioninversion.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 23:22:50 UTC
- Last availability or vendor check: 2026-10-25 23:22:50 UTC
- Stored record updated: 2026-10-26 01:04:03 UTC
- VirusTotal detections in the stored snapshot: 6/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-31 23:52:01 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1755d-dc63-77aa-800e-94c7c09bd4c6/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/varioninversion.com
- Certificate Transparency search: https://crt.sh/?q=%25.varioninversion.com
- Web Archive lookup: https://web.archive.org/web/*/https://varioninversion.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the site as malicious because it presents an AI‑powered multi‑exchange investment offering, a pattern typical of fraudulent schemes. The recorded page title reads “Varion Inversión — Plataforma de IA para gestión multiexchange” and the meta description promotes a free AI‑driven analysis service. The domain was first observed by PhishDestroy on 2026-10-26, returned an HTTP 200 response, and displayed the recorded title at that time.

How the scam works
Fraudulent AI investment sites promise automated, high‑yield trading across multiple cryptocurrency exchanges and lure victims into depositing funds or granting wallet permissions. They rely on the appeal of artificial‑intelligence performance to convince users that their capital will be managed profitably without risk, while operators typically abscond with any deposited assets.

Evidence
VirusTotal recorded six detections from ninety‑two engines on 2026-10-26, with CRDF, Netcraft and Forcepoint labeling the domain malicious and G‑Data, Sophos and URLQuery flagging it as phishing or suspicious. Google Safe Browsing checked the same day and did not flag the site. urlscan.io captured the page on 2026-10-25, reporting a malicious engine score of 89 while its overall verdict was non‑malicious; the scan noted a 307 redirect to HTTPS and tagged the URL as a scam. Cloudflare Radar also marked the URL as a scam on 2026-10-26. OTX listed four pulses referencing the domain. PhishDestroy’s internal blocklist contains the domain, whereas external blocklists (Spamhaus DBL, other resolvers) returned zero hits on the check date.

Infrastructure
The domain was registered with Dynadot Inc on 2026-09-01, 55 days before first detection. The recorded DNS A record pointed to 158.94.210.119, which the scan associated with Omegatech LTD (ASN 202412) in Amsterdam, NL. The TLS certificate, issued by Let’s Encrypt, covered the apex and a wildcard subdomain and was valid until 2027-01-23. Nameservers were ns1.dyna-ns.net and ns2.dyna-ns.net.

What to do
Users should avoid providing any credentials, wallet approvals, or funds to the site and monitor their accounts for unauthorized activity. Organizations should block varioninversion.com at the perimeter, add the domain to internal threat feeds, and review logs for any connections to the recorded address.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1755d-dc63-77aa-800e-94c7c09bd4c6/
Cloudflare Radar report: https://radar.cloudflare.com/scan/a3a03185-c9c9-4482-b811-e8b3856d558d
URLQuery report: https://urlquery.net/report/409feee5-f7f6-4c59-9de9-c3e9772ed3dc
Stored capture screenshot: https://urlscan.io/screenshots/01a1755d-dc63-77aa-800e-94c7c09bd4c6.png
Cloudflare Radar screenshot (2026-10-25T23:55:20Z): https://screenshots.phishdestroy.io/cf/a3a03185-c9c9-4482-b811-e8b3856d558d.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/409feee5-f7f6-4c59-9de9-c3e9772ed3dc.png
URLScan screenshot (2026-10-25T23:26:21Z): https://screenshots.phishdestroy.io/us/01a17562-d913-700a-b9a0-9ffe1c3858d5.png
URLScan capture report: https://urlscan.io/result/01a17562-d913-700a-b9a0-9ffe1c3858d5/
VirusTotal report: https://www.virustotal.com/gui/domain/varioninversion.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=varioninversion.com
Archived copy: https://web.archive.org/web/20261025232415/https://varioninversion.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 00:59:20 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1755d-dc63-77aa-800e-94c7c09bd4c6.png
  Captured: 2026-10-25 23:22:50 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1755d-dc63-77aa-800e-94c7c09bd4c6.png
  Captured: 2026-10-25 23:22:50 UTC
  Source report: https://urlscan.io/result/01a1755d-dc63-77aa-800e-94c7c09bd4c6/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a3a03185-c9c9-4482-b811-e8b3856d558d.png
  Captured: 2026-10-25 23:55:20 UTC
  Source report: https://radar.cloudflare.com/scan/a3a03185-c9c9-4482-b811-e8b3856d558d
  SHA-256: d0adb3a64d6cffef7a390acbc03c0a74ab6b9e4bd4f1a13764e454bd5c2b1c29
- URLQuery: https://screenshots.phishdestroy.io/uq/409feee5-f7f6-4c59-9de9-c3e9772ed3dc.png
  Source report: https://urlquery.net/report/409feee5-f7f6-4c59-9de9-c3e9772ed3dc
  SHA-256: 7b1c3f749eee4f3a6af10ee0e3907d7e692f460146037cf714766361339b8037
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17562-d913-700a-b9a0-9ffe1c3858d5.png
  Captured: 2026-10-25 23:26:21 UTC
  Source report: https://urlscan.io/result/01a17562-d913-700a-b9a0-9ffe1c3858d5/
  SHA-256: a5df1aba19cc77c35ba1645e20a286387fe823c2c9af9b9d89056311c21dac2f

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T23:54:10Z",
        "uuid": "01a1755d-dc63-77aa-800e-94c7c09bd4c6",
        "scanned_at": "2026-10-25T23:20:54Z",
        "final_url": "https://varioninversion.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://varioninversion.com/",
                "from": "http://varioninversion.com/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "216bfcf64689ecbf0041a1a1672bef2ba1dbcdcb2b57d73157d9dc5c5931ef34",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.varioninversion.com",
                "varioninversion.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "varioninversion.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-23T09:10:24Z",
            "valid_from": "2026-10-25T09:10:25Z"
        },
        "domain_age_days": 1975,
        "apex_age_days": 1975,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 89,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T23:56:23Z",
        "uuid": "a3a03185-c9c9-4482-b811-e8b3856d558d",
        "scanned_at": "2026-10-25T23:55:20Z",
        "final_url": "https://varioninversion.com/",
        "status": 200,
        "history": [
            {
                "url": "https://varioninversion.com/",
                "status": 200
            }
        ],
        "dom_hash": "05cdc4f51020758a7d52344ef74afa107c3b9c5279069c0585b3a196f03ca89a",
        "doc_hash": "2fd27b436db794965ccbb07f655db6a04e4d195c1cf7379da3c7204e0fb075e6",
        "url_risks": [
            "Scam"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "varioninversion.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-01T01:52:01Z",
            "updated": "2026-09-01T01:52:13Z",
            "expires": "2027-09-01T01:52:01Z",
            "nameservers": [
                "benedict.ns.cloudflare.com",
                "kia.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T00:57:00Z",
        "analysis_at": "2026-10-25T23:52:23Z",
        "stats": {
            "timeout": 0,
            "harmless": 51,
            "malicious": 5,
            "suspicious": 1,
            "undetected": 35
        },
        "detections": {
            "CRDF": "malicious",
            "G-Data": "phishing",
            "Sophos": "phishing",
            "Netcraft": "malicious",
            "URLQuery": "suspicious",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-09-01T01:52:01Z",
        "expires": "2027-09-01T01:52:01Z",
        "updated": "2026-10-25T10:00:16Z",
        "first_seen": "2026-09-01T02:51:42Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.varioninversion.com",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-25T23:57:40Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.varioninversion.com",
                "varioninversion.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "660539baa6b5a0f9f71f606396aa7630f31",
            "sha256": "5fbbbbc1601df2e48121be98200bdced7c2e7890dd1332050c6fe8cff26f41d3",
            "subject": "varioninversion.com",
            "valid_to": "2027-01-23T09:10:24Z",
            "valid_from": "2026-10-25T09:10:25Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-09-01T01:52:01Z",
            "updated": "2026-10-25T10:00:16Z",
            "expires": "2027-09-01T01:52:01Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-01T01:52:01Z",
                "last changed": "2026-10-25T10:09:03Z",
                "registration": "2026-09-01T01:52:01Z",
                "registrar expiration": "2027-09-01T01:52:01Z",
                "last update of RDAP database": "2026-10-25T10:14:50Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T23:56:37Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "varioninversion.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-25T23:24:15Z",
            "first": "2021-12-22T15:28:27Z",
            "changes": 2,
            "days_archived": 4,
            "scans_per_day": 0,
            "avg_page_bytes": 13138
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://varioninversion.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Varion Inversión — Plataforma de IA para gestión multiexchange",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Varion Inversión centraliza tus operaciones en múltiples exchanges y aplica inteligencia predictiva para planificar el capital con criterios cuantificables. Comienza tu análisis gratuito hoy.",
            "canonicalUrl": "https://varioninversion.com/"
        },
        "trackers": {
            "requests": 45,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 2
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 448,
                "tls": 89,
                "wait": 78,
                "connect": 68,
                "download": 134
            },
            "response_ms": 817
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 77638,
            "co2_grams": 0.0028,
            "cleaner_than": 27
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.25.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "varioninversion.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "varioninversion.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.varioninversion.com\", \"serial\": 2026102503, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://varioninversion.com"
            ]
        },
        "subdomains": {
            "count": 2,
            "subdomains": [
                "baeza.varioninversion.com",
                "www.varioninversion.com"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-09-01T01:52:01Z",
            "updated": "2026-10-25T10:00:16Z",
            "expires": "2027-09-01T01:52:01Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```