# PhishDestroy domain threat record: azcompany.live Content language: English Canonical HTML report: https://phishdestroy.io/domain/azcompany.live/ Machine-readable companion: https://phishdestroy.io/domain/azcompany.live/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 20:45:28 UTC - Last availability or vendor check: 2026-10-22 22:00:27 UTC - Stored record updated: 2026-10-22 22:20:47 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: gmail ## Stored infrastructure - Observed IP address: 188.114.96.1 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 301 - Registration date in stored WHOIS data: 2026-07-28 14:23:25 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0136b-02f4-73c7-8c85-a9c4bc5eba7e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/azcompany.live - Certificate Transparency search: https://crt.sh/?q=%25.azcompany.live - Web Archive lookup: https://web.archive.org/web/*/https://azcompany.live/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy has listed azcompany.live as a suspicious domain. The recorded page title advertises a Polish dance‑school, “Szkoła tańca Szczepankowo Poznań | AZ Dance”. PhishDestroy first observed the domain on 2026-10-22. How the scam works The multiple phishing and malware detections associated with the domain indicate it could be used to lure visitors into credential harvesting or deliver malicious payloads, but no such behavior was observed in the captured page snapshot. Evidence VirusTotal scanned the domain on 2026-10-20 (retrieved 2026-10-22) and reported 13 malicious and 3 suspicious detections out of 92 engines, totaling 16 detections. Google Safe Browsing checked on 2026-10-22 and returned no warning. urlscan captured the site on 2026-08-18 (retrieved 2026-10-22); its overall verdict was clean while its engine analysis marked the URL as malicious with a score of 83. OTX listed one pulse referencing the domain on 2026-10-22. Cloudflare Radar scanned the domain on 2026-10-22 and flagged it as malicious for malware. PhishDestroy’s internal blocklist contains the domain, and external blocklists showed zero matches except a block by Cloudflare Family. Infrastructure The domain was registered on 2026-07-28 through Dynadot Inc. Hosting is provided via Cloudflare, with a recorded IP of 188.114.96.1 belonging to the CloudFLARENET-EU network in GB. The certificate check found a Google Trust Services TLS 1.3 certificate covering azcompany.live and *.azcompany.live, valid from 2026-07-28 to 2026-10-26. What to do Treat the site as untrusted and avoid entering any credentials or downloading files from it. If any login information was submitted, change the associated passwords immediately and run a malware scan on the device. Defenders should block azcompany.live at the network perimeter and monitor logs for connections to the recorded IP or Cloudflare endpoints. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0136b-02f4-73c7-8c85-a9c4bc5eba7e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/b33508f2-5f19-463d-80bb-849e3323464c Stored capture screenshot: https://urlscan.io/screenshots/01a0136b-02f4-73c7-8c85-a9c4bc5eba7e.png Cloudflare Radar screenshot (2026-10-22T20:46:38Z): https://screenshots.phishdestroy.io/cf/b33508f2-5f19-463d-80bb-849e3323464c.png URLScan screenshot (2026-08-17T20:00:38Z): https://screenshots.phishdestroy.io/us/01a0114f-b490-759e-b8dd-e260b0b109c9.png URLScan capture report: https://urlscan.io/result/01a0114f-b490-759e-b8dd-e260b0b109c9/ VirusTotal report: https://www.virustotal.com/gui/domain/azcompany.live Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=azcompany.live Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 20:48:43 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a0136b-02f4-73c7-8c85-a9c4bc5eba7e.png Captured: 2026-10-22 20:45:28 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a0136b-02f4-73c7-8c85-a9c4bc5eba7e.png Source report: https://urlscan.io/result/01a0136b-02f4-73c7-8c85-a9c4bc5eba7e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b33508f2-5f19-463d-80bb-849e3323464c.png Captured: 2026-10-22 20:46:38 UTC Source report: https://radar.cloudflare.com/scan/b33508f2-5f19-463d-80bb-849e3323464c SHA-256: 280bf23de57a89126bd170def549f8e09c90fedd7268d5409db4ab9ac8e04d98 - URLScan · 2026-08-17: https://screenshots.phishdestroy.io/us/01a0114f-b490-759e-b8dd-e260b0b109c9.png Captured: 2026-08-17 20:00:38 UTC Source report: https://urlscan.io/result/01a0114f-b490-759e-b8dd-e260b0b109c9/ SHA-256: 1f3ad9db3beb089b524f948201f57ccacfc3bb2f73ff7643e7389a7461f64b66 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T20:47:35Z", "uuid": "01a0136b-02f4-73c7-8c85-a9c4bc5eba7e", "scanned_at": "2026-08-18T05:49:42Z", "final_url": "https://azcompany.live/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://azcompany.live/", "from": "http://azcompany.live/", "status": 307 } ], "ip": "188.114.97.3", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com", "s.w.org", "www.google.se", "stats.g.doubleclick.net", "region1.analytics.google.com", "www.googletagmanager.com" ], "ips": [ "192.0.77.48", "142.251.127.156", "216.239.32.36", "142.251.13.94", "142.251.13.95", "142.251.127.97", "188.114.97.3" ], "asns": [ "2635", "15169", "13335" ], "countries": [ "US" ], "link_domains": [ "www.google.com", "www.facebook.com", "www.instagram.com" ], "social": [ "https://www.facebook.com/AZCompany", "https://www.instagram.com/az_dance_company" ], "doc_hash": "c4f8063f5c8b0248f25d8e98a8b58a25fa724f13c99335f019e0a2d053af09ce", "script_hashes": [ "97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264", "1fc3505cf0c731c4df44dc0b6be364ab61edd8847aa8fb6262f283513b710ccf", "a8c2b783dfb2a8ae80f75f9b271024777ef513e93fe8b220c0df95ed8fe3a4a0", "dcacba7bc2cd88af90643a62401488370319920d1f8081904e1f9a8e7a0fa385", "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "9aa9bb8be2b834059533ce5de7eed3a662ad3d3e70643bbe5f75265075e9bd28", "d4666d95e2a69b762241ad7257fb0efb87be752836a9d3ef36ec132ba5e8b271", "444fd683ff211c738b77027bce1edac9f200ab0981c218ce176cf8c80d49ad0d", "214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0" ], "globals": [ "fence", "gtag", "dataLayer", "a", "___FONT_AWESOME___", "fontawesome-free-shims", "c", "ZakraNavHelper", "zakraNavHelper", "ZakraFrontend", "zakraFrontend", "jQuery", "webpackChunkelementor", "elementorModules", "Waypoint", "Swiper", "ShareLink", "DialogsManager", "elementorFrontendConfig", "elementorFrontend", "google_tag_data", "google_tag_manager", "onYouTubeIframeAPIReady", "gaGlobal", "_wpemojiSettings", "waypointContextKey", "twemoji", "wp" ], "cookies": [ "_ga_V1BCHX2KZS", "_ga" ], "storage_keys": [ "wpEmojiSettingsSupports" ], "tls": { "san": [ "azcompany.live", "*.azcompany.live" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "azcompany.live", "protocol": "TLS 1.3", "valid_to": "2026-10-26T16:32:47Z", "valid_from": "2026-07-28T15:34:16Z" }, "domain_age_days": 20, "apex_age_days": 20, "tls_age_days": 20, "tls_valid_days": 90, "requests": 63, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 83, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/7.4.23" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T20:47:37Z", "uuid": "b33508f2-5f19-463d-80bb-849e3323464c", "scanned_at": "2026-10-22T20:46:38Z", "final_url": "https://azcompany.live/", "status": 200, "history": [ { "url": "https://azcompany.live/", "status": 200 } ], "dom_hash": "7bf03d9364995b0d271fba8104d6c55f0013fc5ccf168cb4326a749e48fd1e1b", "doc_hash": "4291b92a4c00ecc7eebd170bfa6ce0c6f5dcc31c012e4db7cd0baa71d61e813d", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "azcompany.live", "type": "A", "value": "104.21.6.59" }, { "name": "azcompany.live", "type": "A", "value": "172.67.154.249" }, { "name": "azcompany.live", "type": "AAAA", "value": "2606:4700:3033::6815:63b" }, { "name": "azcompany.live", "type": "AAAA", "value": "2606:4700:3030::ac43:9af9" } ], "dnssec_valid": false, "ip": "104.21.6.59", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-28T16:23:25Z", "updated": "2026-08-12T05:09:18Z", "expires": "2027-07-28T16:23:25Z", "nameservers": [ "ryan.ns.cloudflare.com", "laylah.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T20:46:28Z", "analysis_at": "2026-10-20T12:00:41Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "first_seen": "2026-07-28T16:54:17Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.154.249" }, { "ttl": 300, "type": "A", "value": "104.21.6.59" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "laylah.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "ryan.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:63b" }, { "ttl": 21600, "type": "NS", "value": "laylah.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::ac43:9af9" } ], "dns_at": "2026-10-20T12:03:17Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "azcompany.live", "*.azcompany.live" ], "issuer": "Google Trust Services / WE1", "serial": "66f2fe52950ae0b13d83a54d4bbcc73", "sha256": "fd5f0aba12cbc742da9e0e3e032800ac8090be36e216b3ccfcee060c8207973b", "subject": "azcompany.live", "valid_to": "2026-12-24T17:20:31Z", "valid_from": "2026-09-25T16:22:55Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-07-28T16:23:25Z", "last changed": "2026-07-28T16:42:45Z", "registration": "2026-07-28T16:23:25Z", "registrar expiration": "2027-07-28T16:23:25Z", "last update of RDAP database": "2026-10-16T07:27:41Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T20:47:59Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "azcompany.live" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T20:47:23Z", "first": "2026-10-14T01:26:14Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.11, "avg_page_bytes": 33421 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://azcompany.live/sitemap_index.xml" ] }, "sitemap": { "present": true, "url_count": 71 }, "social_tags": { "ogUrl": "https://azcompany.live/", "title": "Szkoła tańca Szczepankowo Poznań | AZ Dance", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://azcompany.live/wp-content/uploads/2025/09/line-pattern-01.png", "ogTitle": "Szkoła tańca Szczepankowo Poznań | AZ Dance", "generator": "WordPress 7.1.3", "ogSiteName": "AZ Dance", "description": "Szkoła tańca Szczepankowo Poznań – AZ Dance. Zajęcia dla dzieci od 3 lat, młodzieży i dorosłych, grupy turniejowe, akrobatyka i aerial silks. Zapisz się!", "twitterCard": "summary_large_image", "canonicalUrl": "https://azcompany.live/", "ogDescription": "Szkoła tańca Szczepankowo Poznań – AZ Dance. Zajęcia dla dzieci od 3 lat, młodzieży i dorosłych, grupy turniejowe, akrobatyka i aerial silks. Zapisz się!" }, "trackers": { "requests": 100, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 7 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 14, "wait": 1420, "connect": 9, "download": 26 }, "response_ms": 1471 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 275986, "co2_grams": 0.0101, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "108.162.195.229", "host": "ryan.ns.cloudflare.com" }, { "ip": "172.64.34.230", "host": "laylah.ns.cloudflare.com" } ], "zone": "azcompany.live" }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "azcompany.live" }, "dns": { "A": [ "188.114.96.9", "188.114.97.9" ], "NS": [ "laylah.ns.cloudflare.com", "ryan.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"laylah.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415842686, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::9", "2a06:98c1:3121::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::9", "family": 6 }, "redirects": { "chain": [ "https://azcompany.live" ] }, "tech_stack": { "technologies": [ "WordPress", "MySQL", "PHP", "Hello Elementor", "ElementsKit", "Elementor Header & Footer Builder", "Elementor", "Contact Form 7", "Yoast SEO", "Twitter Emoji (Twemoji)", "jQuery UI", "jQuery Migrate", "jQuery", "core-js", "Swiper", "Priority Hints", "Lightbox", "Google Font API", "Cloudflare", "RSS", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://www.facebook.com/AZCompany/", "https://www.instagram.com/az_dance_poznan/", "https://www.tiktok.com/@azdancecompany", "https://www.youtube.com/@azdancecompany", "https://www.azcompany.live/", "https://www.instagram.com/house_ofweb/" ], "external_count": 6, "internal_count": 71 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.3.35" } } } } ```