VirusTotal
8 / 91
PhishDestroy first observed artistictilecollection.shop on Oct 3, 2026. Current evidence score: 78/100 (critical).
Positive findings are stored from 2 sources: VirusTotal and URLQuery. VirusTotal recorded 8 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet, G-Data, Gridinsoft, Netcraft on Oct 3, 2026 at 18:29 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Additional recorded evidence: AlienVault OTX listed 4 community pulse references (not vendor detections) on Oct 3, 2026 at 18:30 UTC. URLScan captured the page on Oct 3, 2026 at 17:01 UTC.
The collector marked the hostname reachable on Oct 3, 2026 at 17:01 UTC, but did not retain the HTTP response code. Latest classified outcome: unknown; cause probe inconclusive on Oct 3, 2026 at 15:01 UTC. At collection time, the hostname resolved to 5.255.61.51 (AS199242 Malakmadze Web LLC). The recorded endpoint location is Los Angeles, US. DOM analysis on Oct 3, 2026 at 18:20 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 3 visual captures from PhishDestroy and URLScan; the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt / YE2 as the certificate issuer with validity through Dec 16, 2026; checked Oct 3, 2026 at 19:02 UTC.
The record contains 2 positive source findings supporting the current phishing classification.
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
ns1.dyna-ns.netns2.dyna-ns.netLocation describes the IP network.
7639ca851cb9be7285cb6b44512a22d7aa359a4b4344776b8c411537b32c9daeSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of artistictilecollection.shop · checked Oct 3, 2026
5.255.61.51. 8 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Select your country to get official cybercrime contacts, or create a complaint draft →.
Template-based draft · optional AI wording assistance requires separate consent
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowSubmit suspicious domains to our threat database — protect the community
ReportRecent phishing reports and observed availability changes
MonitorMonitor live threats or contest this listing if you believe it's a false positive