# agyiwadistributionz.com — Recorded security evidence | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/agyiwadistributionz.com/
Machine-readable companion: https://phishdestroy.io/domain/agyiwadistributionz.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Reachable · access restricted
- First observed by PhishDestroy: 2026-11-11 03:34:17 UTC
- Selected availability observation: 2026-11-11T03:47:27Z
- Stored record updated: 2026-11-11 05:09:46 UTC
- VirusTotal detections in the stored snapshot: 11/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored infrastructure
- Observed IP address: 104.21.15.139
- Registrar in stored WHOIS data: Dominet (HK) Limited
- Last stored HTTP status: 403 (observed: 2026-11-11T03:47:27Z)
- Registration date in stored WHOIS data: 2024-09-06 05:07:04 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a1c8b5-e07a-72bd-ae3c-b11ba5738550/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/agyiwadistributionz.com
- Certificate Transparency search: https://crt.sh/?q=%25.agyiwadistributionz.com
- Web Archive lookup: https://web.archive.org/web/*/https://agyiwadistributionz.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy stores a record for agyiwadistributionz.com. Source observations are dated separately; missing checks do not establish safety.
PhishDestroy stores a record for agyiwadistributionz.com. Source observations are dated separately; missing checks do not establish safety.
A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: 2311318a39afa815e5b17f5f437cd7ac23f3c74a35bdde97172105c85cee591d
Source facts (timestamps as stored): {"record_id":1911986,"first_recorded_at":"2026-11-11 04:34:17","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":11,"denominator":92,"malicious":10,"suspicious":1,"vendors":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","Kaspersky":"phishing","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-07T23:22:11Z","checked_at":null,"fetched_at":"2026-11-11T03:35:58Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":11,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CyRadar","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Sophos","VIPRE"],"observed_at":"2026-11-07 23:22:11","checked_at":"2026-11-11 04:35:59","fetched_at":"2026-11-11 03:35:59","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","Kaspersky":"phishing","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["VIPRE","G-Data","Lionic","Sophos","CyRadar","Fortinet","Kaspersky","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":49,"malicious":10,"suspicious":1,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-11 06:08:53"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"restricted","label_key":"availability.access_restricted","detail_key":"detail.restricted","params":[],"source":"current_http_probe","record_id":1911986,"scope":"checked_url","observed_at":"2026-11-11T03:47:27Z","http_status":403,"http_observed_at":"2026-11-11T03:47:27Z","stored_http_code":403,"stored_http_observed_at":"2026-11-11T03:47:27Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan · 2026-11-11: https://screenshots.phishdestroy.io/us/01a1c8b5-e07a-72bd-ae3c-b11ba5738550.png
Captured: 2026-11-11 03:45:37 UTC
Source report: https://urlscan.io/result/01a1c8b5-e07a-72bd-ae3c-b11ba5738550/
SHA-256: a1ca004497c4902df48b5ead884f53034ed28f483e4c869ab04b43d647da7190
- URLScan · 2026-08-04: https://screenshots.phishdestroy.io/us/019fcd21-6e2d-732e-952c-2c31df83b8be.png
Captured: 2026-08-04 14:16:00 UTC
Source report: https://urlscan.io/result/019fcd21-6e2d-732e-952c-2c31df83b8be/
SHA-256: 802202431739591091bf4d93d3e99afa271b01a43fe194293fa42cafbb4c5d37
- URLScan · 2026-05-27 · via cdsg.com.mm: https://screenshots.phishdestroy.io/us/019e6989-4f2d-72ab-9581-6da0cd792766.png
Captured: 2026-05-27 13:04:49 UTC
Source report: https://urlscan.io/result/019e6989-4f2d-72ab-9581-6da0cd792766/
SHA-256: a6252882527945723a5c7c901e97f444249e667b379977a225fa533595b382a7
- URLScan · 2026-05-27: https://screenshots.phishdestroy.io/us/019e69a1-b55d-7458-9359-8d2a295a4c7c.png
Captured: 2026-05-27 13:31:12 UTC
Source report: https://urlscan.io/result/019e69a1-b55d-7458-9359-8d2a295a4c7c/
SHA-256: a6252882527945723a5c7c901e97f444249e667b379977a225fa533595b382a7
- URLScan · 2026-05-29: https://screenshots.phishdestroy.io/us/019e72f6-50c4-746d-b04a-a7d973b0b285.png
Captured: 2026-05-29 09:00:24 UTC
Source report: https://urlscan.io/result/019e72f6-50c4-746d-b04a-a7d973b0b285/
SHA-256: 95290d9cd73b795a331e527586edc48e29d88624c3b844611e9ca7d7ecd3c8a9
- URLScan · 2026-05-31: https://screenshots.phishdestroy.io/us/019e7ed2-48b9-73bd-af2d-59081fe58a5d.png
Captured: 2026-05-31 16:16:18 UTC
Source report: https://urlscan.io/result/019e7ed2-48b9-73bd-af2d-59081fe58a5d/
SHA-256: 11a29ecbcec610cceae24ffd2f5507711348763c7be9173599a343f640e57f68
- URLScan · 2026-05-31: https://screenshots.phishdestroy.io/us/019e7ed5-0489-73bc-b2fe-1f040fb7d13d.png
Captured: 2026-05-31 16:19:15 UTC
Source report: https://urlscan.io/result/019e7ed5-0489-73bc-b2fe-1f040fb7d13d/
SHA-256: c9e211b71c3e4fe59ed874873d2836bdb7a141a9da4aa0ddbe9202a5fe6b1d42
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/df0892c1-8804-4e5d-b74d-47abcea044d0.png
Captured: 2026-11-11 03:38:05 UTC
Source report: https://radar.cloudflare.com/scan/df0892c1-8804-4e5d-b74d-47abcea044d0
SHA-256: f880affe808bd85046df77002ba097270c28d2244d696d1f212f8973d6756e0c
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-11T03:51:18Z",
"uuid": "01a1c8b5-e07a-72bd-ae3c-b11ba5738550",
"scanned_at": "2026-11-11T03:45:37Z",
"final_url": "https://www.agyiwadistributionz.com/",
"status": 200,
"redirected": "https-only",
"redirects": [
{
"to": "https://www.agyiwadistributionz.com/",
"from": "http://www.agyiwadistributionz.com/",
"status": 307
}
],
"ip": "172.67.162.172",
"domains": [
"sp-ao.shortpixel.ai",
"cdn.jsdelivr.net",
"region1.google-analytics.com",
"www.googletagmanager.com"
],
"ips": [
"2001:4860:4802:34::36",
"2400:52e0:1e00:2::1328:1",
"2a00:1450:4001:c17::61",
"2606:4700::6810:b370",
"172.67.162.172"
],
"asns": [
"15169",
"60068",
"13335"
],
"countries": [
"US",
"DE"
],
"doc_hash": "b2f9d4d761948622a74cdbe1e044d0159307d850af42f5873a7ecab39c496c2f",
"script_hashes": [
"d6c5fcf31163754d89b30c0a8660cf0c6589306806e5ea0b22ce37ce49b25a91",
"6523cf2538369df200c37432fc1d633428cebfd4cf49fe65031b77c7bceb37f5",
"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54",
"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8",
"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1",
"4494fa43e8d69d576264c795d1f163dd025698e162a3627a9f6501ab25dbf210",
"b374e10bcffae8cceceba134d3e33a9fc0d92a18d4cb5285ffa8242bebb96aae",
"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474",
"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76",
"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813"
],
"globals": [
"lazySizesConfig",
"wp",
"$",
"jQuery",
"Swiper",
"___FONT_AWESOME___",
"fontawesome-free-shims",
"google_tag_data",
"google_tag_manager",
"dataLayer",
"gtag",
"onYouTubeIframeAPIReady",
"lazySizes",
"uidEvent",
"bootstrap",
"webpackChunkelementorFrontend",
"elementorModules",
"elementorFrontendConfig",
"elementorFrontend",
"EvEmitter",
"imagesLoaded",
"webpackChunkelementor_pro",
"ElementorProFrontendConfig",
"elementorProFrontend",
"gaGlobal"
],
"cookies": [
"_ga_P031WD9B05",
"_ga",
"cf_clearance"
],
"storage_keys": [
"elementor"
],
"tls": {
"san": [
"agyiwadistributionz.com",
"*.agyiwadistributionz.com"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "agyiwadistributionz.com",
"protocol": "QUIC",
"valid_to": "2026-12-16T16:55:03Z",
"valid_from": "2026-09-17T15:55:14Z"
},
"domain_age_days": 257,
"apex_age_days": 794,
"tls_age_days": 54,
"tls_valid_days": 90,
"requests": 99,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 73,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"x-powered-by": "PHP/8.5.12",
"strict-transport-security": "max-age=63072000; includeSubDomains",
"x-frame-options": "SAMEORIGIN",
"x-content-type-options": "nosniff",
"priority": "u=0,i",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n200000"
},
"dns": [
{
"name": "agyiwadistributionz.com",
"type": "A",
"value": "172.67.162.172"
},
{
"name": "agyiwadistributionz.com",
"type": "A",
"value": "104.21.15.139"
},
{
"name": "agyiwadistributionz.com",
"type": "AAAA",
"value": "2606:4700:3037::ac43:a2ac"
},
{
"name": "agyiwadistributionz.com",
"type": "AAAA",
"value": "2606:4700:3035::6815:f8b"
}
],
"dnssec_valid": false,
"ip": "127.0.1.7",
"whois": {
"registrar": "Dominet (HK) Limited",
"created": "2024-09-06T07:07:04Z",
"updated": "2026-09-01T10:09:18Z",
"expires": "2027-09-06T07:07:04Z",
"nameservers": [
"craig.ns.cloudflare.com",
"oaklyn.ns.cloudflare.com"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-11T03:35:58Z",
"analysis_at": "2026-11-07T23:22:11Z",
"stats": {
"timeout": 0,
"harmless": 49,
"malicious": 10,
"suspicious": 1,
"undetected": 32
},
"detections": {
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Fortinet": "phishing",
"Kaspersky": "phishing",
"Gridinsoft": "suspicious",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
},
"reputation": 0,
"categories": {
"Sophos": "phishing and fraud",
"BitDefender": "filesharing",
"alphaMountain.ai": "Phishing (alphaMountain.ai)",
"Forcepoint ThreatSeeker": "phishing and other frauds"
},
"registrar": "Dominet (HK) Limited",
"created": "2024-09-06T07:07:04Z",
"expires": "2027-09-06T07:07:04Z",
"updated": "2026-09-01T10:09:18Z",
"first_seen": "2024-09-08T16:03:25Z",
"dns": [
{
"ttl": 300,
"type": "A",
"value": "104.21.15.139"
},
{
"ttl": 300,
"type": "TXT",
"value": "google-site-verification=LQi9pK3iT_i8c42juxbAvPcPiGGfBRAJWpT5On9LHqc"
},
{
"ttl": 21600,
"type": "NS",
"value": "craig.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3035::6815:f8b"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3037::ac43:a2ac"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "craig.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "TXT",
"value": "v=spf1 +a +mx +ip4:103.227.176.26 include:spf.supercp.com ~all"
},
{
"ttl": 300,
"type": "MX",
"value": "mail.agyiwadistributionz.com",
"priority": 0
},
{
"ttl": 300,
"type": "A",
"value": "172.67.162.172"
},
{
"ttl": 21600,
"type": "NS",
"value": "oaklyn.ns.cloudflare.com"
}
],
"dns_at": "2026-11-07T23:22:24Z",
"jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
"cert": {
"san": [
"agyiwadistributionz.com",
"*.agyiwadistributionz.com"
],
"issuer": "Google Trust Services / WE1",
"serial": "f4c62ca1947095331372ac3ef9bb2ac3",
"sha256": "9031496c9a6450b8b1c7e05e5e87002bd67c03047240f2937ed980ca95435a8a",
"subject": "agyiwadistributionz.com",
"valid_to": "2026-12-16T16:55:03Z",
"valid_from": "2026-09-17T15:55:14Z",
"observed_at": "2026-11-07T23:22:24Z"
},
"whois": {
"registrar": "Dominet (HK) Limited",
"registrar_iana_id": "3775",
"registrar_url": "http://www.alibabacloud.com",
"created": "2024-09-06T07:07:04Z",
"updated": "2025-09-02T06:13:30Z",
"expires": "2027-09-06T07:07:04Z",
"status": [
"ok"
],
"nameservers": [
"craig.ns.cloudflare.com",
"oaklyn.ns.cloudflare.com"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"active"
],
"events": {
"expiration": "2027-09-06T07:07:04Z",
"registration": "2024-09-06T07:07:04Z",
"registrar expiration": "2027-09-06T07:07:04Z",
"last update of RDAP database": "2024-09-06T07:07:05Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-11T03:45:54Z",
"mail_config": {
"mx": [
"mail.agyiwadistributionz.com"
],
"spf": "v=spf1 +a +mx +ip4:103.227.176.26 include:spf.supercp.com ~all",
"dkim": [
"default"
],
"dkim_bits": 2048,
"spf_lookups": 4
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-11-11T03:44:19Z",
"first": "2025-02-20T23:36:20Z",
"changes": 3,
"days_archived": 6,
"scans_per_day": 0.01,
"avg_page_bytes": 6231
},
"robots_txt": {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://www.agyiwadistributionz.com/sitemap_index.xml"
]
},
"trackers": {
"requests": 56,
"trackers": [
{
"name": "Google Tag",
"company": "Google",
"country": "US",
"category": "Advertising",
"requests": 1
},
{
"name": "jsDelivr",
"company": "jsDelivr",
"category": "Hosting",
"requests": 2
}
]
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
80,
443,
8080
]
},
"dns_server": {
"ns": [
{
"ip": "172.64.34.90",
"host": "oaklyn.ns.cloudflare.com"
},
{
"ip": "108.162.195.192",
"host": "craig.ns.cloudflare.com"
}
],
"zone": "agyiwadistributionz.com"
},
"location": {
"ip": "2606:4700:3037::ac43:a2ac",
"asn": "13335",
"org": "Cloudflare, Inc.",
"city": "Toronto",
"country": "CA"
},
"ssl": {
"issuer": "Google Trust Services / WE1",
"subject": "agyiwadistributionz.com"
},
"dns": {
"A": [
"104.21.15.139",
"172.67.162.172"
],
"MX": [
"{\"exchange\": \"mail.agyiwadistributionz.com\", \"priority\": 0}"
],
"NS": [
"craig.ns.cloudflare.com",
"oaklyn.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"craig.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415149829, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"TXT": [
"google-site-verification=LQi9pK3iT_i8c42juxbAvPcPiGGfBRAJWpT5On9LHqc",
"v=spf1 +a +mx +ip4:103.227.176.26 include:spf.supercp.com ~all"
],
"AAAA": [
"2606:4700:3035::6815:f8b",
"2606:4700:3037::ac43:a2ac"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"firewall": {
"waf": "Cloudflare",
"has_waf": true
},
"get_ip": {
"ip": "2606:4700:3037::ac43:a2ac",
"family": 6
},
"tech_stack": {
"technologies": [
"WordPress",
"MySQL",
"PHP",
"Bootstrap",
"Elementor",
"Yoast SEO",
"LazySizes",
"jQuery UI",
"jQuery",
"core-js",
"Swiper",
"Priority Hints",
"jsDelivr",
"Font Awesome",
"Google Analytics",
"HSTS",
"Cloudflare",
"Webpack",
"Open Graph",
"Module Federation",
"HTTP/3"
]
},
"whois": {
"registrar": "Dominet (HK) Limited",
"created": "2024-09-06T07:07:04Z",
"updated": "2026-09-01T10:09:18Z",
"expires": "2027-09-06T07:07:04Z",
"status": [
"ok https://icann.org/epp"
],
"nameservers": [
"craig.ns.cloudflare.com",
"oaklyn.ns.cloudflare.com"
]
},
"headers": {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"content-security-policy": "default-src 'none'; script-src 'nonce-VZE6fVHR8x3fdWusphrdQZ' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenge",
"x-frame-options": "SAMEORIGIN",
"x-content-type-options": "nosniff",
"referrer-policy": "same-origin",
"permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*",
"cross-origin-opener-policy": "same-origin",
"cross-origin-resource-policy": "same-origin",
"cross-origin-embedder-policy": "require-corp"
}
}
}
}
```
## Complete dated records
Availability observations: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/agyiwadistributionz.com/records.json?source=content&format=json
## Dated availability observation
Reachable response; page content was not verified
```json
{
"state": "restricted",
"label_key": "availability.access_restricted",
"detail_key": "detail.restricted",
"params": [],
"source": "current_http_probe",
"record_id": 1911986,
"scope": "checked_url",
"observed_at": "2026-11-11T03:47:27Z",
"http_status": 403,
"http_observed_at": "2026-11-11T03:47:27Z",
"stored_http_code": 403,
"stored_http_observed_at": "2026-11-11T03:47:27Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```