# PhishDestroy domain threat record: ayurvedamare.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/ayurvedamare.com/
Machine-readable companion: https://phishdestroy.io/domain/ayurvedamare.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 06:50:58 UTC
- Last availability or vendor check: 2026-10-22 11:01:55 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 82.197.69.107
- Registrar in stored WHOIS data: ENOM, INC.
- Registrar country in stored WHOIS data: IT
- Last stored HTTP status: 200
- Registration date (registry RDAP, ayurvedamare.com): 2019-11-29 15:10:59 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1625f-7c95-743c-b928-960fd01cc292/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/ayurvedamare.com
- Certificate Transparency search: https://crt.sh/?q=%25.ayurvedamare.com
- Web Archive lookup: https://web.archive.org/web/*/https://ayurvedamare.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed ayurvedamare.com as a suspicious domain based on its intake criteria. The domain was first seen by PhishDestroy on 2026-10-22 and returned an HTTP 200 response on that date. The recorded page title advertises a gaming server: “GATOTKACA123 : Menggunakan Server V 3.2 Level Tertinggi Dunia #1”.

How the scam works
The available evidence does not demonstrate a specific malicious action, and the listing does not confirm any particular fraud technique. Domains flagged as suspicious are often used to lure visitors into providing credentials or downloading unwanted files, but no credential‑collection form or download was observed on the captured page.

Evidence
VirusTotal analysis on 2026-10-19 reported 13 malicious and 3 suspicious detections out of 92 engines, with vendors such as BitDefender, Fortinet, G‑Data and Kaspersky labeling it phishing. Google Safe Browsing checked on 2026-10-22 did not flag the site. urlscan.io capture on 2026-10-22 showed a malicious engine score of 99 but an overall benign verdict. OTX listed four pulses referencing the domain as of 2026-10-22. PhishDestroy’s internal blocklist marks the domain as malicious, while external blocklists returned zero hits except a single CloudFlare Family block.

Infrastructure
The domain was registered on 2019-11-29 through eNom, Inc. and uses the nameservers ns1.greengeeks.net and ns2.greengeeks.net. The recorded IP address is 82.197.69.107, associated with Contabo Asia Private Limited in Singapore. TLS was provided by Let’s Encrypt, valid from 2026-09-22 to 2026-12-21, and the web server identified itself as Apache. Open ports observed in the scan included 21, 22, 80 and 443.

What to do
Visitors should avoid entering any credentials or downloading files from ayurvedamare.com; if credentials were submitted, change them on the affected service immediately. Security teams can block the domain, monitor DNS queries for it, and review server logs for connections to 82.197.69.107. Adding the domain to web‑filter deny lists will help prevent accidental access.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1625f-7c95-743c-b928-960fd01cc292/
Cloudflare Radar report: https://radar.cloudflare.com/scan/e32bc881-f28a-4822-b5c8-c67a7949bb28
URLQuery report: https://urlquery.net/report/fdf44dfb-daeb-4355-bf43-18ad17072e73
Stored capture screenshot: https://i.ibb.co/ynwYNVFL/c7c3ec84e168.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/fdf44dfb-daeb-4355-bf43-18ad17072e73.png
URLScan screenshot (2026-10-22T06:38:13Z): https://screenshots.phishdestroy.io/us/01a16254-aac4-742d-b789-a8f90342ea83.png
URLScan capture report: https://urlscan.io/result/01a16254-aac4-742d-b789-a8f90342ea83/
URLScan screenshot (2026-10-22T06:43:19Z): https://screenshots.phishdestroy.io/us/01a16259-5bea-7384-815f-f298ab9a316f.png
URLScan capture report: https://urlscan.io/result/01a16259-5bea-7384-815f-f298ab9a316f/
URLScan screenshot (2026-10-22T06:43:22Z): https://screenshots.phishdestroy.io/us/01a16258-f6de-7603-8f64-b6952013e3da.png
URLScan capture report: https://urlscan.io/result/01a16258-f6de-7603-8f64-b6952013e3da/
VirusTotal report: https://www.virustotal.com/gui/domain/ayurvedamare.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ayurvedamare.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 07:22:52 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/ynwYNVFL/c7c3ec84e168.png
  Captured: 2026-10-22 06:50:58 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1625f-7c95-743c-b928-960fd01cc292.png
  Captured: 2026-10-22 06:50:58 UTC
  Source report: https://urlscan.io/result/01a1625f-7c95-743c-b928-960fd01cc292/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e32bc881-f28a-4822-b5c8-c67a7949bb28.png
  Captured: 2026-10-22 07:21:20 UTC
  Source report: https://radar.cloudflare.com/scan/e32bc881-f28a-4822-b5c8-c67a7949bb28
  SHA-256: 532ef8f0bbe4eec237ec81f22fb62029e027df4ef53c5689f8b0ffed586f688d
- URLQuery: https://screenshots.phishdestroy.io/uq/fdf44dfb-daeb-4355-bf43-18ad17072e73.png
  Source report: https://urlquery.net/report/fdf44dfb-daeb-4355-bf43-18ad17072e73
  SHA-256: a2fcd91560cbcae60d51254e75c88a45d60621dd86ec890e3b189c0f855350e9
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16254-aac4-742d-b789-a8f90342ea83.png
  Captured: 2026-10-22 06:38:13 UTC
  Source report: https://urlscan.io/result/01a16254-aac4-742d-b789-a8f90342ea83/
  SHA-256: ee9dd0c1e3a3757c186193d793a073d6f79ece450f23bc27cfd78c6c9cb8da6c
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16259-5bea-7384-815f-f298ab9a316f.png
  Captured: 2026-10-22 06:43:19 UTC
  Source report: https://urlscan.io/result/01a16259-5bea-7384-815f-f298ab9a316f/
  SHA-256: 2d0ec531dddd248a0018836a8260bdb8989edd70ceb2c8a2aa067a6e68b3426b
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16258-f6de-7603-8f64-b6952013e3da.png
  Captured: 2026-10-22 06:43:22 UTC
  Source report: https://urlscan.io/result/01a16258-f6de-7603-8f64-b6952013e3da/
  SHA-256: 156262a0d1cb30bad873bb078ff385cc48bbd76dc6953556a2c15428c45d1ab6

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T07:20:46Z",
        "uuid": "01a1625f-7c95-743c-b928-960fd01cc292",
        "scanned_at": "2026-10-22T06:50:03Z",
        "final_url": "https://ayurvedamare.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://ayurvedamare.com/",
                "from": "http://ayurvedamare.com/",
                "status": 307
            }
        ],
        "ip": "82.197.69.107",
        "ptr": "vmi3483354.contaboserver.net",
        "domains": [
            "dsuown9evwz4y.cloudfront.net",
            "i.imgur.com",
            "api2-jns.imgnxb.com",
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.26.2.54",
            "199.232.192.193",
            "52.85.30.129",
            "104.16.79.73",
            "82.197.69.107"
        ],
        "asns": [
            "13335",
            "54113",
            "16509",
            "141995"
        ],
        "countries": [
            "US",
            "SG"
        ],
        "link_domains": [
            "spade-event.com",
            "public.pg-demo.com",
            "history.jlfafafa3.com",
            "10e20.net",
            "fastspinpromotion.com",
            "www.368connect.com",
            "d24m60q82dzu8y.cloudfront.net",
            "ambengine.com"
        ],
        "doc_hash": "c60c202e520151bd79f6b1aa438074114fd17010cb42e93bd8f27cbcd0030610",
        "script_hashes": [
            "8f88b5cfff588c52207f83d4a21ca48904824000ed5f9668f1b4c4b9035cf8c7",
            "529c17f22dd887b55d8a3d50c87461186d7de84ec2d2c7475e0ac47a014e3554",
            "cadd7cff8030723056e8dfb09d65ca0d06ed6f7818f768298766ab6078a20194",
            "1697b5d38adb67de8ba24d1aac8edb870a9ffef15938f692e4d4f8156dc5712c",
            "41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4"
        ],
        "globals": [
            "currencyOptions",
            "forgotPasswordOptions",
            "$jscomp",
            "html5",
            "Modernizr",
            "yepnope",
            "$",
            "jQuery",
            "ThumbmarkJS",
            "moment",
            "introJs",
            "Decimal",
            "formatCurrency",
            "formatNumber",
            "thousandSeparator",
            "conversionRate",
            "toLocalCurrencyFormat",
            "initializeThumbmark",
            "insertPseudoEventListener",
            "initializeCopyButton",
            "addCopyAction",
            "initializeQrButton",
            "addQrAction",
            "initializeCountryCodeDropdown",
            "initializeReportingOverlayItemEvent",
            "initializeReportingPopupItemEvent",
            "initializePendingTransactionDetail",
            "__cfBeacon",
            "onRegisterAjaxRequestSuccess",
            "initializePasswordValidation",
            "initializeRegisterInfo",
            "initializeBonusSelection",
            "onAjaxRequestSuccess",
            "onAjaxRequestBegin",
            "onAjaxRequestComplete",
            "changeLanguage",
            "openedWindowsSet",
            "closeWindows",
            "closeWindowsAndIframe",
            "openPopup"
        ],
        "cookies": [
            "client-timezone"
        ],
        "storage_keys": [
            "modernizr"
        ],
        "tls": {
            "san": [
                "ayurvedamare.com",
                "www.ayurvedamare.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YR2",
            "subject": "ayurvedamare.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-21T22:59:49Z",
            "valid_from": "2026-09-22T22:59:50Z"
        },
        "domain_age_days": 2339,
        "apex_age_days": 2339,
        "tls_age_days": 29,
        "tls_valid_days": 89,
        "requests": 311,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Apache",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T07:31:18Z",
        "uuid": "e32bc881-f28a-4822-b5c8-c67a7949bb28",
        "scanned_at": "2026-10-22T07:21:20Z",
        "final_url": "https://ayurvedamare.com/",
        "status": 200,
        "history": [
            {
                "url": "https://ayurvedamare.com/",
                "status": 200
            }
        ],
        "dom_hash": "dca3659741d8b9843b3cea9b205ac222ff3d06be45bb44d97e12916dd980132b",
        "doc_hash": "c60c202e520151bd79f6b1aa438074114fd17010cb42e93bd8f27cbcd0030610",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "ayurvedamare.com",
                "type": "A",
                "value": "82.197.69.107"
            }
        ],
        "dnssec_valid": false,
        "ip": "82.197.69.107",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "eNom, LLC",
            "created": "2019-11-29T15:10:59Z",
            "updated": "2025-11-30T08:39:54Z",
            "expires": "2026-11-29T15:10:59Z",
            "nameservers": [
                "ns1.greengeeks.net",
                "ns2.greengeeks.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T07:21:16Z",
        "analysis_at": "2026-10-19T17:50:33Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "popularity": {
            "Alexa": 590285,
            "Statvoo": 590285
        },
        "registrar": "ENOM, INC.",
        "created": "2019-11-29T15:10:59Z",
        "expires": "2026-11-29T15:10:59Z",
        "updated": "2026-10-02T15:20:17Z",
        "first_seen": "2024-02-27T05:31:51Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "root.chi210.greengeeks.net",
                "value": "ns1.greengeeks.net"
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "v=spf1 +a +mx +ip4:108.178.43.106 include:spf.greengeeks.net ~all"
            },
            {
                "ttl": 14400,
                "type": "A",
                "value": "82.197.69.107"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "ayurvedamare.com",
                "priority": 0
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.greengeeks.net"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.greengeeks.net"
            }
        ],
        "dns_at": "2026-10-19T17:56:08Z",
        "jarm": "3fd3fd16d3fd3fd21c42d42d000000a8d52b2e606af78e33e5cbcbcdeb78a6",
        "cert": {
            "san": [
                "ayurvedamare.com",
                "www.ayurvedamare.com"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "680cec24ff984b2b3459165d46ae67f0def",
            "sha256": "46a00c886e5cd555ec20f190795f8be95bc6c878b57ecc552342bc1008a438b9",
            "subject": "ayurvedamare.com",
            "valid_to": "2026-12-21T22:59:49Z",
            "valid_from": "2026-09-22T22:59:50Z"
        },
        "whois": {
            "registrar": "ENOM, INC.",
            "registrar_iana_id": "48",
            "registrar_url": "WWW.ENOMDOMAINS.COM",
            "created": "2019-11-29T15:10:00Z",
            "updated": "2025-11-30T08:39:54Z",
            "expires": "2026-11-29T15:10:59Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.greengeeks.net",
                "ns2.greengeeks.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-10-19T17:56:08Z",
                "registration": "2019-11-29T15:10:00Z",
                "registrar expiration": "2026-11-29T15:10:59Z",
                "last update of RDAP database": "2026-10-19T17:56:08Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T07:22:18Z",
        "mail_config": {
            "mx": [
                "ayurvedamare.com"
            ],
            "spf": "v=spf1 +a +mx +ip4:108.178.43.106 include:spf.greengeeks.net ~all",
            "dkim": [
                "default"
            ],
            "dmarc": true,
            "dkim_bits": 2048,
            "spf_lookups": 4
        },
        "caa_records": {
            "domain": "ayurvedamare.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-14T21:34:17Z",
            "first": "2021-01-18T10:02:19Z",
            "changes": 24,
            "days_archived": 26,
            "scans_per_day": 0.01,
            "avg_page_bytes": 6177
        },
        "robots_txt": {
            "present": true
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "ogUrl": "https://ayurvedamare.com/",
            "title": "GATOTKACA123 : Menggunakan Server V 3.2 Level Tertinggi Dunia #1",
            "ogType": "website",
            "ogTitle": "GATOTKACA123 : Menggunakan Server V 3.2 Level Tertinggi Dunia #1",
            "ogSiteName": "GATOTKACA123",
            "themeColor": "DarkRed",
            "description": "GATOTKACA123 kini sudah menggunakan server terbaik v 3.2 yang sudah masuk ke level tertinggi dunia yang semua game yang disediakan mudah sekali untuk meraih berbagai macam hadiah besar yang memang disediakan buat anda semua yang setia bermain di sini.",
            "canonicalUrl": "https://ayurvedamare.com/",
            "ogDescription": "GATOTKACA123 kini sudah menggunakan server terbaik v 3.2 yang sudah masuk ke level tertinggi dunia yang semua game yang disediakan mudah sekali untuk meraih berbagai macam hadiah besar yang memang disediakan buat anda semua yang setia bermain di sini."
        },
        "trackers": {
            "requests": 103,
            "trackers": [
                {
                    "name": "Amazon CloudFront",
                    "company": "Amazon",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 89
                },
                {
                    "name": "Imgur",
                    "company": "Imgur",
                    "country": "US",
                    "category": "Misc",
                    "requests": 1
                },
                {
                    "name": "Cloudflare Insights",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 11,
                "tls": 163,
                "wait": 164,
                "connect": 160,
                "download": 853
            },
            "response_ms": 1351
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 793646,
            "co2_grams": 0.029,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "75.2.69.7",
                    "host": "ns1.greengeeks.net"
                },
                {
                    "ip": "99.83.188.187",
                    "host": "ns2.greengeeks.net"
                }
            ],
            "zone": "ayurvedamare.com"
        },
        "location": {
            "ip": "82.197.69.107",
            "asn": "141995",
            "org": "Contabo Asia Private Limited",
            "city": "Singapore",
            "country": "SG"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "ayurvedamare.com"
        },
        "dns": {
            "A": [
                "82.197.69.107"
            ],
            "MX": [
                "{\"exchange\": \"ayurvedamare.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns1.greengeeks.net",
                "ns2.greengeeks.net"
            ],
            "SOA": "{\"nsname\": \"ns1.greengeeks.net\", \"hostmaster\": \"root.chi210.greengeeks.net\", \"serial\": 2026092209, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
            "TXT": [
                "v=spf1 +a +mx +ip4:108.178.43.106 include:spf.greengeeks.net ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "82.197.69.107",
            "family": 4
        },
        "whois": {
            "registrar": "eNom, LLC",
            "created": "2019-11-29T15:10:59Z",
            "updated": "2025-11-30T08:39:54Z",
            "expires": "2026-11-29T15:10:59Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.greengeeks.net",
                "ns2.greengeeks.net"
            ]
        },
        "headers": {
            "headers": {
                "server": "Apache",
                "content-type": "text/html"
            }
        }
    }
}
```