VirusTotal
4 / 92 детектов движков
Открыть отчёт“Aurex Trade AI Official Platform 2026 | Nowoczesna Platforma Handlowa z Zaawansowaną Analizą Rynku”
aurex-trade-ai-poland.sbs — страница, имитирующая Ethereum, по данным PhishDestroy (критический риск, оценка 76/100). VirusTotal 4/92. Регистратор Dynadot.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
4 / 92 детектов движков
Открыть отчётОбнаружений: 2
Открыть отчётПубликаций сообщества: 5
Открыть отчётОтчёт сканера
Открыть отчётБез отметки об угрозе
Открыть отчётСнимок страницы
Открыть отчётРезультаты относятся к моменту сбора. Нулевое число детектов не гарантирует безопасность. Упоминания OTX — публикации сообщества.
Отчёт PhishDestroy об угрозе
PhishDestroy listed aurex-trade-ai-poland.sbs as a suspicious domain based on vendor detections. The recorded page title advertises “Aurex Trade AI Official Platform 2026”. The domain was first seen by PhishDestroy on 2026-10-22 and returned an HTTP 200 response at that time.
The listing reflects a generic risk where attackers create sites that mimic legitimate trading platforms to lure visitors into providing credentials or personal data. Such sites may use persuasive language and branding to appear authentic, but no specific credential‑harvesting form was observed on the captured page.
VirusTotal scanned the domain on 2026-10-22 and reported four detections: three malicious (alphaMountain.ai, CyRadar, SOCRadar) and one suspicious (DNS8) from 92 engines. Google Safe Browsing checked on the same date and did not flag the site. urlscan captured the page on 2026-10-22; its overall verdict was clean while its engine analysis marked it malicious with a score of 100. Cloudflare Radar flagged the domain as malware and phishing, OTX listed five pulses referencing it, PhishDestroy’s internal blocklist includes the domain, and external blocklists showed no entries at the time of checking.
The domain was registered with Dynadot Inc on 2026-08-17, giving it an age of 65 days at first sighting. The recorded IP was 172.67.200.225, which belongs to Cloudflare, Inc. in Canada. The TLS certificate, issued by Google Trust Services, covered the domain and its wildcard and was valid until 2027-01-13. DNSSEC was not enabled for the domain.
Visitors should avoid entering any credentials or personal information on the site; if they have already done so, they should change affected passwords and monitor accounts for unusual activity. Organizations can add the exact domain to blocklists or firewall rules and review logs for connections to the recorded IP address. Continue monitoring security feeds for updates on this domain’s status. No further action is required if no interaction occurred.
Сохранённые сведения о странице, сети и результатах проверок — с источниками и временем наблюдения.
Наблюдение: · Получено:
| Uuid | 01a16223-c15b-77bb-9e9b-d64cfd710367 |
|---|---|
| Final url | https://aurex-trade-ai-poland.sbs/ |
| Статус | 200 |
| Перенаправлен | https-only |
| Redirects | [
{
"to": "https://aurex-trade-ai-poland.sbs/",
"from": "http://aurex-trade-ai-poland.sbs/",
"status": 307
}
] |
| Ip | 172.67.200.225 |
| Contacted domains | [
"fonts.gstatic.com",
"cdn.jsdelivr.net",
"cdnjs.cloudflare.com",
"modernroomdesigns.com",
"fonts.googleapis.com"
] |
| Contacted IP addresses | [
"142.251.20.94",
"104.17.208.5",
"2606:4700:3031::6815:266e",
"104.17.24.14",
"2606:4700::6811:cf05",
"2a00:1450:4001:c25::5f",
"172.67.200.225"
] |
| Asns | [
"15169",
"13335"
] |
| Countries | [
"US",
"DE"
] |
| Document hash | 6f9ec1fa582a1e219f10303a8d9c3017c929af36b189d124bae6894a0a04e9c3 |
| Script hashes | [
"4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885"
] |
| Globals | [
"polylang",
"_language",
"_loader",
"GEO_API_URL",
"_phone_error",
"_form_unknown_error",
"__offerChatWidgetMounted",
"intlTelInput"
] |
| Файлы cookie | [
"_subid",
"csrftoken"
] |
| Tls | {
"san": [
"aurex-trade-ai-poland.sbs",
"*.aurex-trade-ai-poland.sbs"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "aurex-trade-ai-poland.sbs",
"protocol": "QUIC",
"valid_to": "2027-01-13T14:29:23Z",
"valid_from": "2026-10-15T13:31:48Z"
} |
| Domain age days | 65 |
| Apex age days | 65 |
| Tls age days | 6 |
| Tls valid days | 90 |
| Requests | 17 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 100,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-frame-options": "DENY",
"x-content-type-options": "nosniff",
"referrer-policy": "same-origin",
"cross-origin-opener-policy": "same-origin"
} |
Наблюдение: · Получено:
| Uuid | bb0bede4-0131-4534-a690-32d99eed09e6 |
|---|---|
| Final url | https://aurex-trade-ai-poland.sbs/ |
| Статус | 200 |
| History | [
{
"url": "https://aurex-trade-ai-poland.sbs/",
"status": 200
}
] |
| DOM structure hash | 86a03739eb04f006ac97debe0d6fc32d004b2d39f9eab809e6e3db37dba97e6f |
| Document hash | aaec4e47a7c2ecec0f93f2552644947cad3f04a31d1852a2735f92d85b0ef4ae |
| Phishing v2 | [
"phishing"
] |
| Domain risks | [
"Malware",
"Security threats",
"CIPA Filter",
"CIPA"
] |
| Radar rank | {
"bucket": ">200000"
} |
| DNS records | [
{
"name": "aurex-trade-ai-poland.sbs",
"type": "A",
"value": "172.67.200.225"
},
{
"name": "aurex-trade-ai-poland.sbs",
"type": "A",
"value": "104.21.52.152"
},
{
"name": "aurex-trade-ai-poland.sbs",
"type": "AAAA",
"value": "2606:4700:3033::6815:3498"
},
{
"name": "aurex-trade-ai-poland.sbs",
"type": "AAAA",
"value": "2606:4700:3032::ac43:c8e1"
}
] |
| Dnssec valid | false |
| Ip | 172.67.200.225 |
| Verdict | {
"tags": [
"malware"
],
"malicious": true,
"categories": [
"malware"
]
} |
| Registration record | {
"registrar": "Dynadot Inc",
"created": "2026-08-17T13:22:44Z",
"updated": "2026-08-22T13:27:14Z",
"expires": "2027-08-17T23:59:59Z",
"nameservers": [
"maisie.ns.cloudflare.com",
"mcgrory.ns.cloudflare.com"
]
} |
Наблюдение: · Получено:
| Vendor result counts | {
"timeout": 0,
"harmless": 54,
"malicious": 3,
"suspicious": 1,
"undetected": 34
} |
|---|---|
| Vendor labels | {
"DNS8": "suspicious",
"CyRadar": "phishing",
"SOCRadar": "phishing",
"alphaMountain.ai": "phishing"
} |
| Reputation | 0 |
| Categories | {
"alphaMountain.ai": "Phishing (alphaMountain.ai)"
} |
| Регистратор | Dynadot Inc |
| Создано | 2026-08-17T13:22:44Z |
| Expires | 2027-08-17T23:59:59Z |
| Updated | 2026-08-22T13:27:14Z |
| First seen | 2026-08-17T14:09:03Z |
| DNS records | [
{
"ttl": 21600,
"type": "NS",
"value": "maisie.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3033::6815:3498"
},
{
"ttl": 300,
"type": "A",
"value": "104.21.52.152"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "maisie.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3032::ac43:c8e1"
},
{
"ttl": 21600,
"type": "NS",
"value": "mcgrory.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.200.225"
}
] |
| Dns at | 2026-10-19T04:35:29Z |
| Jarm | 27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c |
| Certificate | {
"san": [
"aurex-trade-ai-poland.sbs",
"*.aurex-trade-ai-poland.sbs"
],
"issuer": "Google Trust Services / WE1",
"serial": "3284cdee6542c21b13d63cff1436226b",
"sha256": "4bb36889865c11be1b8bbde969f0ae5fa4b88b7573dcf4f2f9af668d1964c2a5",
"subject": "aurex-trade-ai-poland.sbs",
"valid_to": "2027-01-13T14:29:23Z",
"valid_from": "2026-10-15T13:31:48Z"
} |
| Registration record | {
"registrar": "Dynadot Inc",
"registrar_iana_id": "472",
"registrar_url": "http://www.dynadot.com",
"created": "2026-08-17T13:22:44Z",
"updated": "2026-08-22T13:27:14Z",
"expires": "2027-08-17T23:59:59Z",
"status": [
"clientTransferProhibited",
"serverTransferProhibited"
],
"nameservers": [
"maisie.ns.cloudflare.com",
"mcgrory.ns.cloudflare.com"
],
"dnssec": "unsigned"
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| Caa records | {
"domain": "aurex-trade-ai-poland.sbs"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
} |
| Web archive observations | {
"last": "2026-10-22T05:19:15Z",
"first": "2026-10-12T09:12:46Z",
"changes": 2,
"days_archived": 3,
"scans_per_day": 0.2,
"avg_page_bytes": 19558
} |
| Crawler rules | {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://aurex-trade-ai-poland.sbs/sitemap.xml"
]
} |
| Sitemap | {
"present": true,
"url_count": 10
} |
| Page title and metadata | {
"ogUrl": "https://aurex-trade-ai-poland.sbs/",
"title": "Aurex Trade AI Official Platform 2026 | Nowoczesna Platforma Handlowa z Zaawansowaną Analizą Rynku",
"ogType": "website",
"robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
"ogImage": "https://aurex-trade-ai-poland.sbs/static/template_18/zeongrow/image.png",
"ogTitle": "Aurex Trade AI Official Platform 2026 | Nowoczesna Platforma Handlowa z Zaawansowaną Analizą Rynku",
"ogSiteName": "Aurex Trade AI",
"themeColor": "#f4f6fb",
"description": "Aurex Trade AI oferuje nowoczesną platformę handlową z danymi rynkowymi w czasie rzeczywistym, interaktywnymi wykresami, narzędziami analizy technicznej oraz intuicyjnym interfejsem wspierającym efektywny handel online.",
"twitterCard": "summary_large_image",
"canonicalUrl": "https://aurex-trade-ai-poland.sbs/",
"ogDescription": "Aurex Trade AI oferuje nowoczesną platformę handlową z danymi rynkowymi w czasie rzeczywistym, interaktywnymi wykresami, narzędziami analizy technicznej oraz intuicyjnym interfejsem wspierającym efektywny handel online."
} |
| Trackers | {
"requests": 12,
"trackers": [
{
"name": "Cloudflare",
"company": "Cloudflare",
"country": "US",
"category": "Hosting",
"requests": 2
},
{
"name": "Google Fonts",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
},
{
"name": "Google Static",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 2
},
{
"name": "jsDelivr",
"company": "jsDelivr",
"category": "Hosting",
"requests": 3
}
]
} |
| Forms and mixed content | {
"no_sri": [
"https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js"
],
"third_party_scripts": 1
} |
| Статус | {
"up": true,
"code": 200,
"timings": {
"dns": 3,
"tls": 17,
"wait": 574,
"connect": 6,
"download": 6
},
"response_ms": 606
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
80,
443,
8080
]
} |
| Carbon | {
"bytes": 75827,
"co2_grams": 0.0028,
"cleaner_than": 28
} |
| Dns server | {
"ns": [
{
"ip": "108.162.195.170",
"host": "mcgrory.ns.cloudflare.com"
},
{
"ip": "108.162.194.89",
"host": "maisie.ns.cloudflare.com"
}
],
"zone": "aurex-trade-ai-poland.sbs"
} |
| Файлы cookie | {
"cookies": [
{
"name": "_subid",
"session": true
},
{
"name": "csrftoken",
"same_site": "Lax"
}
]
} |
| Location | {
"ip": "2606:4700:3032::ac43:c8e1",
"asn": "13335",
"org": "Cloudflare, Inc.",
"city": "Toronto",
"country": "CA"
} |
| Ssl | {
"issuer": "Google Trust Services / WE1",
"subject": "aurex-trade-ai-poland.sbs"
} |
| DNS records | {
"A": [
"104.21.52.152",
"172.67.200.225"
],
"NS": [
"maisie.ns.cloudflare.com",
"mcgrory.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"maisie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417560422, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"AAAA": [
"2606:4700:3033::6815:3498",
"2606:4700:3032::ac43:c8e1"
]
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"message": "Site does not serve any HSTS headers."
} |
| HTTP security policies | {
"xFrameOptions": "DENY",
"referrerPolicy": "same-origin",
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": "nosniff",
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": "same-origin",
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Firewall | {
"waf": "Cloudflare",
"has_waf": true
} |
| Get ip | {
"ip": "2606:4700:3032::ac43:c8e1",
"family": 6
} |
| Redirects | {
"chain": [
"https://aurex-trade-ai-poland.sbs"
]
} |
| Tech stack | {
"technologies": [
"Python",
"Django",
"jsDelivr",
"Google Font API",
"cdnjs",
"Cloudflare",
"Open Graph",
"HTTP/3"
]
} |
| Page links | {
"internal_count": 10
} |
| Registration record | {
"registrar": "Dynadot Inc",
"created": "2026-08-17T13:22:44Z",
"updated": "2026-08-22T13:27:14Z",
"expires": "2027-08-17T23:59:59Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"maisie.ns.cloudflare.com",
"mcgrory.ns.cloudflare.com"
]
} |
| HTTP headers | {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-frame-options": "DENY",
"x-content-type-options": "nosniff",
"referrer-policy": "same-origin",
"cross-origin-opener-policy": "same-origin"
}
} |
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Репутация Edge-IP не связана с этим доменом.
maisie.ns.cloudflare.commcgrory.ns.cloudflare.comLocation describes the IP network.
4bb36889865c11be1b8bbde969f0ae5fa4b88b7573dcf4f2f9af668d1964c2a5aurex-trade-ai-poland.sbs*.aurex-trade-ai-poland.sbsSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of aurex-trade-ai-poland.sbs · checked Oct 22, 2026
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
http://aurex-trade-ai-poland.sbs/Content-Type: text/html; charset=utf-8Server: cloudflareCF-Cache-Status: DYNAMICContent-Encoding: gzipsummary_large_imageh2=":443"; ma=60DYNAMICa4e609a77bb5db08-FRAkeep-alivegziptext/html; charset=utf-8same-originThu, 22 Oct 2026 05:17:48 GMT{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}same-origin{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yK%2B4FGki1Q0Nx7pIvHAtppQQBaQ3fQiRylww9%2BiVTtfJOYGqRPDHjAiBHf3lm6EIuqhuGkUUU%2BY5TlHnjea7Fw5lx3nKdhFVzpdck1wdBbXsgbWDrPsls%2BcDomcuu06A5iDwem7cloudflarechunkedCookienosniffDENYValues retained by the collector; long values may be shortened during collection.
5 публикации сообщества
Открыть источникБез отметки об угрозе
Открыть источник4/92 детектов движков
Открыть источникPD-20261022-C58FBF
Снимок страницы сохранён
Открыть источникaurex-trade-ai-poland.sbs
Открыть источникСохранено 52 похожих домена
Сравнить ответы браузеру и сканеру и проверить признаки маршрутизации трафика Keitaro.
aurex-trade-ai-poland.sbs
PD-20261022-C58FBF Recipient: abuse@dynadot.com Registrar: Dynadot LLC / Dynadot Inc (United States) Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Template-based draft · optional AI wording assistance requires separate consent
Выберите действия в зависимости от того, какие данные вы передали. Сохраните этот отчёт вместе со своими доказательствами.
Прекратите пользоваться подозрительным сайтом. Откройте настоящий сервис через его официальное приложение или знакомый адрес.
Сохраните оригиналы писем, чеки, сообщения и скриншоты в безопасном месте. Хронология событий поможет получателю заявления понять, что произошло. IC3 evidence guidance ↗
aurex-trade-ai-poland.sbs)Даже если у вас нет всех подробностей — в любом случае подать заявление. Даже неполная информация по-прежнему помогает расследованию.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Подробнее: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасДобавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
ОтчётНедавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьОтслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание
Отчёт объединяет сохранённые снимки страниц, сведения о регистрации и сети, результаты сканеров и историю жалоб PhishDestroy. Для каждого источника указана собственная дата наблюдения. Исходный результат доступен по ссылке на отчёт источника.
Анализ с помощью ИИ создан . Он описывает доказательства, доступные в тот момент; результаты последующих проверок могут измениться.
Снимок фиксирует содержимое страницы. Результат сканера отражает оценку конкретного источника на момент проверки. Действующий сертификат и нулевое число детектов не гарантируют безопасность.