# adi-panwar.github.io: Recorded Microsoft 365 homepage content | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/adi-panwar.github.io/ Machine-readable companion: https://phishdestroy.io/domain/adi-panwar.github.io/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Unverified - First observed by PhishDestroy: 2026-10-22 17:42:34 UTC - Selected availability observation: 2026-11-09T02:58:40Z - Stored record updated: 2026-11-09 09:29:48 UTC - VirusTotal detections in the stored snapshot: 11/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): xbox ## Stored infrastructure - Observed IP address: 185.199.108.153 - Registrar in stored WHOIS data: GitHub, Inc. - Registration date (registry RDAP, github.io): 2013-03-08 19:12:48 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a164b4-07ae-770d-8096-5f656266f694/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/adi-panwar.github.io - Certificate Transparency search: https://crt.sh/?q=%25.adi-panwar.github.io - Web Archive lookup: https://web.archive.org/web/*/https://adi-panwar.github.io/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records adi-panwar.github.io serving a Microsoft-branded homepage promoting Microsoft 365 productivity plans, cloud storage, and Copilot features. On 2026-10-22, adi-panwar.github.io displayed a Microsoft-branded homepage at the same host, with a navigation bar listing Microsoft 365, Azure, Copilot, Windows, Surface, Xbox, and Support. The hero section reads "Your productivity, supercharged" and describes Microsoft 365 as delivering cloud storage, advanced security, and Copilot in one plan, alongside a "Shop Microsoft 365" button. Below, links offer choices for Microsoft 365, Xbox, Windows 11, and Surface devices, with product cards showing laptops and Xbox consoles. The stored VirusTotal domain result reports 11 detections out of 92 engines. ESET reported "phishing"; G-Data reported "phishing". Package revision: 8f6141a47675b41b46e375d21f4dd461a34ac6ae48ee5992fa2bba5cf3644c24 Text generated (not scan time): 2026-11-04 07:27:36 Reviewed evidence snapshot: {"domain":"adi-panwar.github.io","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"adi-panwar.github.io","final_host":"adi-panwar.github.io","redirects":[{"to":"https://adi-panwar.github.io/Microsoft","from":"http://adi-panwar.github.io/Microsoft","status":307},{"to":"https://adi-panwar.github.io/Microsoft/","from":"https://adi-panwar.github.io/Microsoft","status":301}],"captured_at":"2026-10-22T17:41:28.640000Z","uuid":"01a164b4-07ae-770d-8096-5f656266f694","report_url":"https://urlscan.io/result/01a164b4-07ae-770d-8096-5f656266f694/","sha256":"1309d36455a1946ec16affcfad630bf93e0318e7016ba9efbaa81eba2498297d","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":11,"engines":92,"malicious":11,"suspicious":0,"analysis_date":"2026-10-22","retrieved_date":"2026-10-22","vendor_labels":{"ESET":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Gridinsoft":"phishing","MalwareURL":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["ESET","G-Data","Lionic","Sophos","CyRadar","Webroot","Gridinsoft","MalwareURL","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 11 detections out of 92 engines. ESET reported \"phishing\"; G-Data reported \"phishing\".","page_paragraph_target_characters":548} Source facts (timestamps as stored): {"record_id":1633954,"first_recorded_at":"2026-10-22 19:42:34","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":11,"denominator":92,"malicious":11,"suspicious":0,"vendors":{"ESET":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Gridinsoft":"phishing","MalwareURL":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-22T18:28:39Z","checked_at":null,"fetched_at":"2026-10-22T19:13:23Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":12,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CyRadar","ESET","Forcepoint ThreatSeeker","G-Data","Gridinsoft","Lionic","MalwareURL","SOCRadar","Sophos","Webroot"],"observed_at":"2026-10-22 18:28:39","checked_at":"2026-10-24 20:00:24","fetched_at":"2026-10-24 18:00:30","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"ESET":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Gridinsoft":"phishing","MalwareURL":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["ESET","G-Data","Lionic","Sophos","CyRadar","Webroot","Gridinsoft","MalwareURL","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":48,"malicious":11,"suspicious":0,"undetected":33}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-04 12:02:02"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-22 20:30:21"},"availability":{"state":"unknown","label_key":"availability.unverified","detail_key":"detail.inconclusive","params":[],"source":"current_http_probe","record_id":1633954,"scope":"checked_url","observed_at":"2026-11-09T02:58:40Z","http_status":null,"http_observed_at":"2026-11-09T02:58:40Z","stored_http_code":0,"stored_http_observed_at":"2026-11-09T02:58:40Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":"2026-11-09T02:58:40Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - Stored capture: https://i.ibb.co/M523BrBp/ed734a562d12.png - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/01a164b4-07ae-770d-8096-5f656266f694.png Captured: 2026-10-22 17:41:28 UTC Source report: https://urlscan.io/result/01a164b4-07ae-770d-8096-5f656266f694/ - URLScan · 2026-09-22: https://screenshots.phishdestroy.io/us/01a0c6a0-c80e-71bb-8358-051892ce5c65.png Captured: 2026-09-22 01:00:27 UTC Source report: https://urlscan.io/result/01a0c6a0-c80e-71bb-8358-051892ce5c65/ SHA-256: 1309d36455a1946ec16affcfad630bf93e0318e7016ba9efbaa81eba2498297d - URLQuery: https://screenshots.phishdestroy.io/uq/b69879ce-eb35-4efd-b9ef-8a7fc4893b69.png Captured: 2026-10-25 12:41:56 UTC Source report: https://urlquery.net/report/b69879ce-eb35-4efd-b9ef-8a7fc4893b69 SHA-256: d75f224f28108909111d07dcb3909de4c6d16b10dcbcd40e6615ae9dddd5ea0e - URLScan · 2026-08-08: https://screenshots.phishdestroy.io/us/019fe1a4-de3b-761a-9e10-644848d346e5.png Captured: 2026-08-08 13:51:57 UTC Source report: https://urlscan.io/result/019fe1a4-de3b-761a-9e10-644848d346e5/ SHA-256: 1309d36455a1946ec16affcfad630bf93e0318e7016ba9efbaa81eba2498297d - URLScan · 2026-09-22: https://screenshots.phishdestroy.io/us/01a0cad4-b422-7391-9857-f63dc35f1c4b.png Captured: 2026-09-22 20:35:39 UTC Source report: https://urlscan.io/result/01a0cad4-b422-7391-9857-f63dc35f1c4b/ SHA-256: 6f8cf461abf6f0981fbdf94a9989850c5ea3b679650ebe74f85399fed3922ea9 - URLScan · 2026-09-23: https://screenshots.phishdestroy.io/us/01a0cf28-8933-73cb-bf5b-3354db98bc92.png Captured: 2026-09-23 16:45:43 UTC Source report: https://urlscan.io/result/01a0cf28-8933-73cb-bf5b-3354db98bc92/ SHA-256: 1309d36455a1946ec16affcfad630bf93e0318e7016ba9efbaa81eba2498297d - URLScan · 2026-09-26: https://screenshots.phishdestroy.io/us/01a0db13-05b1-7525-894e-2ec75b7719e5.png Captured: 2026-09-26 00:17:41 UTC Source report: https://urlscan.io/result/01a0db13-05b1-7525-894e-2ec75b7719e5/ SHA-256: 1309d36455a1946ec16affcfad630bf93e0318e7016ba9efbaa81eba2498297d - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a164ae-7e49-7479-be62-aa00007602a4.png Captured: 2026-10-22 17:35:25 UTC Source report: https://urlscan.io/result/01a164ae-7e49-7479-be62-aa00007602a4/ SHA-256: 1309d36455a1946ec16affcfad630bf93e0318e7016ba9efbaa81eba2498297d - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/dcd4c081-7384-4f5a-9299-1ea8d797a3e9.png Captured: 2026-10-24 14:21:17 UTC Source report: https://radar.cloudflare.com/scan/dcd4c081-7384-4f5a-9299-1ea8d797a3e9 SHA-256: 044f029a882364cc282e02c3464dd54f7194cb3d9574cdef689adf7722f5c774 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T18:50:25Z", "uuid": "01a164b4-07ae-770d-8096-5f656266f694", "scanned_at": "2026-10-22T17:41:28Z", "final_url": "https://adi-panwar.github.io/Microsoft/", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://adi-panwar.github.io/Microsoft", "from": "http://adi-panwar.github.io/Microsoft", "status": 307 }, { "to": "https://adi-panwar.github.io/Microsoft/", "from": "https://adi-panwar.github.io/Microsoft", "status": 301 } ], "ip": "2606:50c0:8001::153", "domains": [ "cdn.tailwindcss.com", "cdnjs.cloudflare.com" ], "ips": [ "2606:4700:20::681a:38f", "104.17.25.14", "2606:50c0:8001::153" ], "asns": [ "13335", "54113" ], "countries": [ "US" ], "doc_hash": "09997ec3c73276936940aba22f7ae21b7dc0be06004d7896b719da9809469da2", "globals": [ "tailwind", "/template.html" ], "tls": { "san": [ "*.github.com", "*.github.io", "*.githubusercontent.com", "github.com", "github.io", "githubusercontent.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "*.github.io", "protocol": "TLS 1.3", "valid_to": "2026-12-29T23:44:45Z", "valid_from": "2026-09-30T23:44:46Z" }, "domain_age_days": 219, "apex_age_days": 219, "tls_age_days": 21, "tls_valid_days": 89, "requests": 26, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "GitHub.com", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31556952", "via": "1.1 varnish", "x-cache": "MISS", "x-cache-hits": "0", "x-served-by": "cache-ams-eham8680087-AMS" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T14:42:45Z", "uuid": "dcd4c081-7384-4f5a-9299-1ea8d797a3e9", "scanned_at": "2026-10-24T14:21:17Z", "final_url": "https://adi-panwar.github.io/", "status": 404, "redirected": "https-only", "history": [ { "url": "http://adi-panwar.github.io/", "status": 307 }, { "url": "https://adi-panwar.github.io/", "status": 404 } ], "dom_hash": "35bbdd99a249decabdc93f6b809b030db834533d4d78fe69529a214489fae670", "doc_hash": "70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "adi-panwar.github.io", "type": "A", "value": "185.199.110.153" }, { "name": "adi-panwar.github.io", "type": "A", "value": "185.199.111.153" }, { "name": "adi-panwar.github.io", "type": "A", "value": "185.199.109.153" }, { "name": "adi-panwar.github.io", "type": "A", "value": "185.199.108.153" }, { "name": "adi-panwar.github.io", "type": "AAAA", "value": "2606:50c0:8000::153" }, { "name": "adi-panwar.github.io", "type": "AAAA", "value": "2606:50c0:8001::153" }, { "name": "adi-panwar.github.io", "type": "AAAA", "value": "2606:50c0:8002::153" }, { "name": "adi-panwar.github.io", "type": "AAAA", "value": "2606:50c0:8003::153" } ], "dnssec_valid": false, "ip": "185.199.110.153", "whois": { "registrar": "MarkMonitor Inc.", "created": "2013-03-08T19:12:48Z", "updated": "2026-08-12T09:08:04Z", "expires": "2027-03-08T19:12:48Z", "nameservers": [ "ns-692.awsdns-22.net", "ns-1622.awsdns-10.co.uk", "dns1.p05.nsone.net", "dns2.p05.nsone.net", "dns3.p05.nsone.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T19:13:23Z", "analysis_at": "2026-10-22T18:28:39Z", "stats": { "timeout": 0, "harmless": 48, "malicious": 11, "suspicious": 0, "undetected": 33 }, "detections": { "ESET": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Gridinsoft": "phishing", "MalwareURL": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "MarkMonitor Inc.", "created": "2013-03-08T19:41:10Z", "expires": "2027-03-08T19:12:48Z", "updated": "2026-08-12T09:08:04Z", "first_seen": "2026-05-31T01:32:09Z", "dns": [ { "ttl": 3600, "type": "CAA", "value": "digicert.com" }, { "ttl": 3600, "type": "CAA", "value": "letsencrypt.org" }, { "ttl": 3600, "type": "A", "value": "185.199.111.153" }, { "ttl": 3600, "type": "AAAA", "value": "2606:50c0:8001::153" }, { "ttl": 3600, "type": "AAAA", "value": "2606:50c0:8002::153" }, { "ttl": 3600, "type": "CAA", "value": "sectigo.com" }, { "ttl": 3600, "type": "A", "value": "185.199.108.153" }, { "ttl": 3600, "type": "A", "value": "185.199.109.153" }, { "ttl": 3600, "type": "AAAA", "value": "2606:50c0:8000::153" }, { "ttl": 3600, "type": "CAA", "value": "digicert.com" }, { "ttl": 3600, "type": "AAAA", "value": "2606:50c0:8003::153" }, { "ttl": 3600, "type": "CAA", "value": "letsencrypt.org" }, { "ttl": 3600, "type": "CAA", "value": "sectigo.com" }, { "ttl": 3600, "type": "A", "value": "185.199.110.153" } ], "dns_at": "2026-10-22T18:34:13Z", "jarm": "29d3fd00029d29d00041d41d00041d6b5eefa2404a56c2ced79a0d16afe36c", "cert": { "san": [ "*.github.com", "*.github.io", "*.githubusercontent.com", "github.com", "github.io", "githubusercontent.com" ], "issuer": "Let's Encrypt / YR1", "serial": "6a65e5d3279ba564a4de74eb5d64478dbb8", "sha256": "f2f9a159ce50a0a168b3eaeaf2fced5addd49ba38e2bf63248f057a139fc7856", "subject": "*.github.io", "valid_to": "2026-12-29T23:44:45Z", "valid_from": "2026-09-30T23:44:46Z" }, "whois": { "registrar": "MarkMonitor Inc.", "registrar_iana_id": "292", "registrar_url": "http://www.markmonitor.com", "created": "2013-03-08T19:12:48Z", "updated": "2025-02-25T20:53:31Z", "expires": "2027-03-08T00:00:00Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "dns1.p05.nsone.net", "dns2.p05.nsone.net", "dns3.p05.nsone.net", "ns-1622.awsdns-10.co.uk", "ns-692.awsdns-22.net" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T21:57:01Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "count": 6, "domain": "adi-panwar.github.io", "issuers": [ "letsencrypt.org", "sectigo.com", "digicert.com" ] }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "dns_server": { "ns": [ { "ip": "205.251.198.86", "host": "ns-1622.awsdns-10.co.uk" }, { "ip": "198.51.44.5", "host": "dns1.p05.nsone.net" }, { "ip": "205.251.197.59", "host": "ns-1339.awsdns-39.org" }, { "ip": "198.51.45.5", "host": "dns2.p05.nsone.net" }, { "ip": "205.251.194.180", "host": "ns-692.awsdns-22.net" }, { "ip": "198.51.45.69", "host": "dns4.p05.nsone.net" }, { "ip": "198.51.44.69", "host": "dns3.p05.nsone.net" }, { "ip": "205.251.193.137", "host": "ns-393.awsdns-49.com" } ], "zone": "github.io" }, "location": { "ip": "2606:50c0:8000::153", "asn": "54113", "org": "Fastly, Inc.", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "*.github.io" }, "dns": { "A": [ "185.199.109.153", "185.199.111.153", "185.199.108.153", "185.199.110.153" ], "AAAA": [ "2606:50c0:8001::153", "2606:50c0:8000::153", "2606:50c0:8002::153", "2606:50c0:8003::153" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": "default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'", "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2606:50c0:8003::153", "family": 6 }, "headers": { "headers": { "server": "GitHub.com", "content-type": "text/html; charset=utf-8", "content-security-policy": "default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'", "via": "1.1 varnish", "x-cache": "HIT", "x-cache-hits": "4", "x-served-by": "cache-par-lfpg1960045-PAR" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/01a164b4-07ae-770d-8096-5f656266f694.png","source":"URLScan","report_url":"https://urlscan.io/result/01a164b4-07ae-770d-8096-5f656266f694/","captured_at":"2026-10-22T17:41:28Z","sha256":"1309d36455a1946ec16affcfad630bf93e0318e7016ba9efbaa81eba2498297d","model_image_sha256":"f9ab6d2b18043f15901890fed908816522cc1d72abf66954431a855293e81560","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/adi-panwar.github.io/records.json?source=content&format=json ## Dated availability observation The latest stored response was inconclusive ```json { "state": "unknown", "label_key": "availability.unverified", "detail_key": "detail.inconclusive", "params": [], "source": "current_http_probe", "record_id": 1633954, "scope": "checked_url", "observed_at": "2026-11-09T02:58:40Z", "http_status": null, "http_observed_at": "2026-11-09T02:58:40Z", "stored_http_code": 0, "stored_http_observed_at": "2026-11-09T02:58:40Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": "2026-11-09T02:58:40Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```