# PhishDestroy domain threat record: app.docspo.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/app.docspo.com/ Machine-readable companion: https://phishdestroy.io/domain/app.docspo.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 20:49:42 UTC - Last availability or vendor check: 2026-10-22 10:49:31 UTC - Stored record updated: 2026-10-22 19:38:34 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 192.165.83.70 - Registrar in stored WHOIS data: NAMECHEAP INC - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date (registry RDAP, docspo.com): 2020-06-04 19:56:10 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16038-3fd4-7780-b54d-b16ef611e4af/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/app.docspo.com - Certificate Transparency search: https://crt.sh/?q=%25.app.docspo.com - Web Archive lookup: https://web.archive.org/web/*/https://app.docspo.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16038-3fd4-7780-b54d-b16ef611e4af.png Captured: 2026-10-21 20:49:42 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16038-3fd4-7780-b54d-b16ef611e4af.png Captured: 2026-10-21 20:49:42 UTC Source report: https://urlscan.io/result/01a16038-3fd4-7780-b54d-b16ef611e4af/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5f785076-c7b8-478b-aecd-1f8ffe3e5ea8.png Captured: 2026-10-21 21:25:06 UTC Source report: https://radar.cloudflare.com/scan/5f785076-c7b8-478b-aecd-1f8ffe3e5ea8 SHA-256: d652919ed8e897b68db707dfac08945941f5c364e754598a7eaf7204034a3b7a - URLQuery: https://screenshots.phishdestroy.io/uq/898c4919-f34c-4a11-8c04-b9c8910b4f1f.png Source report: https://urlquery.net/report/898c4919-f34c-4a11-8c04-b9c8910b4f1f SHA-256: dbe617e7c3bd02b7243b8973e307653100bb578dbe8b3d2ed34b127ce3f8174e - URLScan · 2026-10-07: https://screenshots.phishdestroy.io/us/01a115ab-36f9-717b-9b2b-725f115fb288.png Captured: 2026-10-07 09:21:51 UTC Source report: https://urlscan.io/result/01a115ab-36f9-717b-9b2b-725f115fb288/ SHA-256: 54b9a2d7d7ca3ef483316472f9f8c906e967b2bc878f5996ed74b9275fa59576 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a16039-f247-775e-9c45-c1329565143d.png Captured: 2026-10-21 20:49:40 UTC Source report: https://urlscan.io/result/01a16039-f247-775e-9c45-c1329565143d/ SHA-256: 559b36658b8a1fbb8f71d0f84ef4a5e7efaaa367d13c9fa65f0e959994417361 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T21:16:19Z", "uuid": "01a16038-3fd4-7780-b54d-b16ef611e4af", "scanned_at": "2026-10-21T20:47:51Z", "final_url": "https://app.docspo.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://app.docspo.com/", "from": "http://app.docspo.com/", "status": 307 } ], "ip": "192.165.83.38", "domains": [ "cdn.jsdelivr.net", "accounts.google.com", "fortnox.containers.piwik.pro", "fortnox.piwik.pro", "o4507146791747584.ingest.de.sentry.io" ], "ips": [ "142.251.179.84", "88.80.0.132", "34.160.81.0", "104.17.207.5", "192.165.83.38" ], "asns": [ "15169", "48579", "396982", "13335", "216350" ], "countries": [ "US", "SE" ], "link_domains": [ "apps.fortnox.se", "piwik.pro" ], "doc_hash": "e59f34689d222c9dfab9bb9ef4e003a7a0c5aff9a1f166c6018580d231ea76c7", "script_hashes": [ "3a845103e5eda80d1d0e13424700f00e7b8f4fae13bfb28ebe8858cc949b8b26", "1e3d658f616bb9f7f0a2c053db36555a2f447250a6a5c5234d37af8a709281a6", "553199c4b016998a0b79d317bdfe976758747b3dded4f0d72721b44aebbc3664", "72bf830d5d58b92a343d810f41c2119f2ccb551dd74c0a44660c473fa1ed0519", "c3540b1719ed90e7f1757f14618de931365f6f44292e107ba9466bcc8300d674", "422e882cae027f0d96f14c866f91ba4b8265da46dc75cbd0d58747e7afa0dc8a", "d0acf1bb58f851e10d0c67a079853876dfe879a0427c2ffccc8c0d2ac8a6b10e" ], "globals": [ "doForceReload", "SENTRY_RELEASE", "_sentryDebugIds", "_sentryDebugIdIdentifier", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "VimeoPlayerResizeEmbeds_", "VimeoSeoMetadataAppended", "VimeoCheckedUrlTimeParam", "__VUE__", "Velocity", "__SENTRY__", "enableChat", "enableTracker", "dataLayer", "ppms", "App", "default_gsi", "_F_toggles_default_gsi", "google", "closure_lm_810229", "__G_ID_CLIENT__", "sevenTag", "wgxpath", "_paq", "Piwik", "AnalyticsTracker", "piwik_log" ], "cookies": [ "g_state", "_pk_id.8506966f-4802-4f59-9092-421623856f55.e0f7", "_pk_ses.8506966f-4802-4f59-9092-421623856f55.e0f7", "ppms_privacy_8506966f-4802-4f59-9092-421623856f55" ], "storage_keys": [ "i18next.translate.boo", "test", "i18nextLng", "@@", "vuex", "lastPath", "__sak" ], "tls": { "san": [ "*.docspo.com", "docspo.com" ], "cipher": "AES_128_GCM", "issuer": "Sectigo Public Server Authentication CA DV R36", "subject": "*.docspo.com", "protocol": "TLS 1.3", "valid_to": "2026-11-09T23:59:59Z", "valid_from": "2025-10-10T00:00:00Z" }, "domain_age_days": 2250, "apex_age_days": 2273, "tls_age_days": 376, "tls_valid_days": 395, "requests": 38, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -58, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Fortnox", "content-type": "text/html", "strict-transport-security": "max-age=31536000; includeSubdomains", "content-security-policy": "connect-src 'self' blob: data: wss://localhost:* wss://127.0.0.1:* fortnox.piwik.pro fortnox.containers.piwik.pro fonts.googleapis.com fonts.gstatic.com accounts.google.com themes.googleusercontent.co", "x-frame-options": "sameorigin", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T21:26:45Z", "uuid": "5f785076-c7b8-478b-aecd-1f8ffe3e5ea8", "scanned_at": "2026-10-21T21:25:06Z", "final_url": "https://app.docspo.com/", "status": 200, "history": [ { "url": "https://app.docspo.com/", "status": 200 } ], "dom_hash": "2de09579a1a8d74ba45c84157cb5d94704918349df8902eedf020de695a76051", "doc_hash": "e59f34689d222c9dfab9bb9ef4e003a7a0c5aff9a1f166c6018580d231ea76c7", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "app.docspo.com", "type": "A", "value": "192.165.83.198" }, { "name": "app.docspo.com", "type": "A", "value": "192.165.83.70" }, { "name": "app.docspo.com", "type": "A", "value": "192.165.83.38" }, { "name": "app.docspo.com", "type": "A", "value": "192.165.83.102" }, { "name": "app.docspo.com", "type": "A", "value": "192.165.83.166" }, { "name": "app.docspo.com", "type": "A", "value": "192.165.83.134" } ], "dnssec_valid": false, "ip": "192.165.83.198", "whois": { "registrar": "NameCheap, Inc.", "created": "2020-06-04T19:56:10Z", "updated": "2026-04-29T06:36:59Z", "expires": "2027-06-04T19:56:10Z", "nameservers": [ "ns-1172.awsdns-18.org", "ns-126.awsdns-15.com", "ns-1545.awsdns-01.co.uk", "ns-802.awsdns-36.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T19:37:53Z", "analysis_at": "2026-10-12T15:49:47Z", "stats": { "timeout": 0, "harmless": 57, "malicious": 1, "suspicious": 0, "undetected": 34 }, "detections": { "Gridinsoft": "phishing" }, "reputation": 0, "registrar": "NAMECHEAP INC", "created": "2020-06-04T19:56:10Z", "expires": "2027-06-04T19:56:10Z", "updated": "2026-04-29T06:36:59Z", "first_seen": "2023-12-14T20:10:43Z", "dns": [ { "ttl": 300, "type": "TXT", "value": "crdf-verify-a2d31e48b82060e0" }, { "ttl": 300, "type": "A", "value": "192.165.83.38" }, { "ttl": 300, "type": "A", "value": "192.165.83.166" }, { "ttl": 300, "type": "A", "value": "192.165.83.102" }, { "ttl": 300, "type": "A", "value": "192.165.83.134" }, { "ttl": 300, "type": "A", "value": "192.165.83.70" }, { "ttl": 300, "type": "A", "value": "192.165.83.198" } ], "dns_at": "2026-10-12T15:50:03Z", "jarm": "29d29d00029d29d00042d43d00041d84fd2e709818761f1864a7b8fb66ae0f", "cert": { "san": [ "*.docspo.com", "docspo.com" ], "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36", "serial": "e9e100ca0b170760634312ee790e8746", "sha256": "79eac24a65438df421ee806d930871ed7f8758f4943540f254b41b2f507889ab", "subject": "*.docspo.com", "valid_to": "2026-11-09T23:59:59Z", "valid_from": "2025-10-10T00:00:00Z" }, "whois": { "registrar": "NAMECHEAP INC", "registrar_iana_id": "1068", "registrar_url": "http://www.namecheap.com", "created": "2020-06-04T19:56:10Z", "updated": "2026-04-29T06:36:59Z", "expires": "2027-06-04T19:56:10Z", "status": [ "ok" ], "nameservers": [ "ns-1172.awsdns-18.org", "ns-126.awsdns-15.com", "ns-1545.awsdns-01.co.uk", "ns-802.awsdns-36.net" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T21:25:32Z", "caa_records": { "domain": "app.docspo.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-21T20:52:04Z", "first": "2021-02-26T20:10:58Z", "changes": 6, "days_archived": 7, "scans_per_day": 0, "avg_page_bytes": 3186 }, "robots_txt": { "agents": [ "*" ], "present": true }, "security_txt": { "present": true, "found_in": "/.well-known/security.txt" }, "social_tags": { "title": "Docspo" }, "trackers": { "requests": 27, "trackers": [ { "name": "Piwik PRO Analytics Suite", "company": "Cookie Information", "country": "DK", "category": "Site Analytics", "requests": 2 }, { "name": "Google Accounts", "company": "Google", "country": "US", "category": "Utilities", "requests": 3 }, { "name": "Piwik PRO Tag Manager", "company": "Cookie Information", "country": "DK", "category": "Utilities", "requests": 3 }, { "name": "Sentry", "company": "Sentry", "country": "US", "category": "Utilities", "requests": 1 } ] }, "mixed_content": { "upgrade_insecure": true, "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 27, "tls": 42, "wait": 46, "connect": 37, "download": 0 }, "response_ms": 152 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 5814, "co2_grams": 0.0002, "cleaner_than": 84 }, "dns_server": { "ns": [ { "ip": "205.251.196.148", "host": "ns-1172.awsdns-18.org" }, { "ip": "205.251.192.126", "host": "ns-126.awsdns-15.com" }, { "ip": "205.251.198.9", "host": "ns-1545.awsdns-01.co.uk" }, { "ip": "205.251.195.34", "host": "ns-802.awsdns-36.net" } ], "zone": "docspo.com" }, "cookies": { "cookies": [ { "name": "g_state" }, { "name": "_pk_id.8506966f-4802-4f59-9092-421623856f55.e0f7", "same_site": "Lax" }, { "name": "_pk_ses.8506966f-4802-4f59-9092-421623856f55.e0f7", "same_site": "Lax" }, { "name": "ppms_privacy_8506966f-4802-4f59-9092-421623856f55", "same_site": "Strict" } ] }, "location": { "ip": "192.165.83.102", "asn": "216350", "org": "Fortnox Aktiebolag", "city": "Örebro", "country": "SE" }, "ssl": { "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36", "subject": "*.docspo.com" }, "dns": { "A": [ "192.165.83.198", "192.165.83.70", "192.165.83.134", "192.165.83.102", "192.165.83.166", "192.165.83.38" ], "TXT": [ "crdf-verify-a2d31e48b82060e0" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubdomains", "message": "HSTS header does not contain the preload directive." }, "http_security": { "xFrameOptions": "sameorigin", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": "0", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "connect-src 'self' blob: data: wss://localhost:* wss://127.0.0.1:* fortnox.piwik.pro fortnox.containers.piwik.pro fonts.", "strictTransportPolicy": "max-age=31536000; includeSubdomains", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "192.165.83.70", "family": 4 }, "redirects": { "chain": [ "https://app.docspo.com" ] }, "tech_stack": { "technologies": [ "Amazon Web Services", "Sectigo", "HSTS", "Amazon S3" ] }, "whois": { "registrar": "NameCheap, Inc.", "created": "2020-06-04T19:56:10Z", "updated": "2026-04-29T06:36:59Z", "expires": "2027-06-04T19:56:10Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "ns-1172.awsdns-18.org", "ns-126.awsdns-15.com", "ns-1545.awsdns-01.co.uk", "ns-802.awsdns-36.net" ] }, "headers": { "headers": { "server": "Fortnox", "content-type": "text/html", "strict-transport-security": "max-age=31536000; includeSubdomains", "content-security-policy": "connect-src 'self' blob: data: wss://localhost:* wss://127.0.0.1:* fortnox.piwik.pro fortnox.containers.piwik.pro fonts.googleapis.com fonts.gstatic.com accounts.google.com themes.googleusercontent.com www.googleapis.com *.ingest.de.sentry.io *.vimeo.com api.unsplash.com api.pexels.com cdn.zapier.co", "x-frame-options": "sameorigin", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } } } } ```