# PhishDestroy domain threat record: azerbaky.top

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/azerbaky.top/
Machine-readable companion: https://phishdestroy.io/domain/azerbaky.top/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-20 22:37:43 UTC
- Last availability or vendor check: 2026-10-22 10:42:53 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: solana

## Stored infrastructure

- Observed IP address: 104.21.18.31
- Registrar in stored WHOIS data: PDR Ltd
- Registrar country in stored WHOIS data: IN
- Last stored HTTP status: 200
- Registration date (registry RDAP, azerbaky.top): 2026-10-04 13:32:47 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15b79-a585-725e-8ff4-b40adfe719d0/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/azerbaky.top
- Certificate Transparency search: https://crt.sh/?q=%25.azerbaky.top
- Web Archive lookup: https://web.archive.org/web/*/https://azerbaky.top/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has added azerbaky.top to its internal blocklist as a suspicious domain. The recorded page title is “DUAL — 3D Reward Spin”. The domain was first seen by PhishDestroy on 2026-10-21.

How the scam works
Because the site is flagged only as suspicious, no concrete scam type can be confirmed. In general, domains that advertise reward spins may be used to lure users into clicking ads, downloading unwanted software, or submitting personal information. Without observed malicious behavior, the exact tactic remains uncertain.

Evidence
VirusTotal retrieved a scan on 2026-10-21 that showed 0 detections out of 92 engines (analysis performed on 2026-10-15). Google Safe Browsing checked on 2026-10-21 did not flag the URL. External blocklists checked on 2026-10-20 returned no matches, while PhishDestroy’s internal list marked the domain as suspicious on 2026-10-20. OTX checked on 2026-10-21 reported zero pulses.

Infrastructure
The domain was registered on 2026-10-04 through PDR Ltd. The recorded IP address for the site is 172.67.179.233, which belongs to a content‑delivery network.

What to do
Visiting the site does not prove compromise, but users should avoid entering credentials or personal data. If any credentials were submitted, change the associated passwords immediately. Defenders should block azerbaky.top at the network perimeter and review logs for connections to 172.67.179.233.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15a3f-bd64-7648-85e0-933f0d6a9a89/
VirusTotal report: https://www.virustotal.com/gui/domain/azerbaky.top
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=azerbaky.top
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-20 22:40:08 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/RGtnB2Qm/87094152c731.png
  Captured: 2026-10-20 22:42:33 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a15b79-a585-725e-8ff4-b40adfe719d0.png
  Captured: 2026-10-20 22:42:33 UTC
  Source report: https://urlscan.io/result/01a15b79-a585-725e-8ff4-b40adfe719d0/
- URLScan capture 2: https://screenshots.phishdestroy.io/01a15a3f-bd64-7648-85e0-933f0d6a9a89.png
  Captured: 2026-10-20 22:37:43 UTC
  Source report: https://urlscan.io/result/01a15b79-a585-725e-8ff4-b40adfe719d0/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d6c1f9a9-ef7e-4110-a212-ea6ff88b8253.png
  Captured: 2026-10-20 22:38:50 UTC
  Source report: https://radar.cloudflare.com/scan/d6c1f9a9-ef7e-4110-a212-ea6ff88b8253
  SHA-256: 5b389eaa1dd298729c8d1f1ae155ea6b6e220db715cfb9a136e3bd28b25940ef
- URLQuery: https://screenshots.phishdestroy.io/uq/122a72ba-9e09-40ac-9652-99ca3f1a9019.png
  Source report: https://urlquery.net/report/122a72ba-9e09-40ac-9652-99ca3f1a9019
  SHA-256: 700b4079d89fc2e18eeaa6ffbf5bcfac698d0706346da8dea7ef171959895414
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15a3f-bd64-7648-85e0-933f0d6a9a89.png
  Captured: 2026-10-20 16:58:16 UTC
  Source report: https://urlscan.io/result/01a15a3f-bd64-7648-85e0-933f0d6a9a89/
  SHA-256: d24e684426426bd2fe104c17511b079d9e083003343be297151e07a0de8b5749
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15b7b-2e7f-75bb-b1e0-1b24ab728a09.png
  Captured: 2026-10-20 22:42:48 UTC
  Source report: https://urlscan.io/result/01a15b7b-2e7f-75bb-b1e0-1b24ab728a09/
  SHA-256: cd542e76364cb4749d1de45f48f35922235c9c003ecbd42d6fc7bcd6054d39c6

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T23:43:32Z",
        "uuid": "01a15b79-a585-725e-8ff4-b40adfe719d0",
        "scanned_at": "2026-10-20T22:41:07Z",
        "final_url": "https://azerbaky.top/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://azerbaky.top/",
                "from": "http://azerbaky.top/",
                "status": 307
            }
        ],
        "ip": "172.67.179.233",
        "domains": [
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.127.95",
            "172.67.179.233"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "e9bc35114e6d8b12256f9f9ab0ae2f3707151c6fc847891c688fbf7eb2ba83fa",
        "script_hashes": [
            "68aca49eae51242ab668d286b00306bce4f318a7ab9590758b6df253738b1c8a",
            "2ad0d9044114016282b34367124612149d2f92acb256c484dacb8d6941aa305c"
        ],
        "globals": [
            "walletConnect",
            "_3akj",
            "litPropertyMetadata",
            "reactiveElementVersions",
            "litHtmlVersions",
            "litElementVersions"
        ],
        "storage_keys": [
            "_0x12",
            "_0x5"
        ],
        "tls": {
            "san": [
                "*.azerbaky.top",
                "azerbaky.top"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "azerbaky.top",
            "protocol": "QUIC",
            "valid_to": "2027-01-18T03:52:13Z",
            "valid_from": "2026-10-20T03:52:14Z"
        },
        "domain_age_days": 15,
        "apex_age_days": 15,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 14,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T00:21:19Z",
        "uuid": "d6c1f9a9-ef7e-4110-a212-ea6ff88b8253",
        "scanned_at": "2026-10-20T22:38:50Z",
        "final_url": "https://azerbaky.top/",
        "status": 200,
        "history": [
            {
                "url": "https://azerbaky.top/",
                "status": 200
            }
        ],
        "dom_hash": "a07515916f50247c6ed4593833180eb09d43f58af9f2847fbbfe0402e8490c24",
        "doc_hash": "e9bc35114e6d8b12256f9f9ab0ae2f3707151c6fc847891c688fbf7eb2ba83fa",
        "domain_risks": [
            "New Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "azerbaky.top",
                "type": "A",
                "value": "104.21.18.31"
            },
            {
                "name": "azerbaky.top",
                "type": "A",
                "value": "172.67.179.233"
            },
            {
                "name": "azerbaky.top",
                "type": "AAAA",
                "value": "2606:4700:3033::6815:121f"
            },
            {
                "name": "azerbaky.top",
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:b3e9"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.18.31",
        "whois": {
            "registrar": "PDR Ltd.",
            "created": "2026-10-04T13:32:47Z",
            "updated": "2026-10-19T16:27:59Z",
            "expires": "2027-10-04T13:32:47Z",
            "nameservers": [
                "garrett.ns.cloudflare.com.",
                "grannbo.ns.cloudflare.com."
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T00:27:50Z",
        "analysis_at": "2026-10-20T23:05:31Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 38
        },
        "reputation": 0,
        "registrar": "PDR Ltd",
        "created": "2026-10-04T13:32:47Z",
        "expires": "2027-10-04T13:32:47Z",
        "updated": "2026-10-04T13:32:48Z",
        "first_seen": "2026-10-04T14:40:25Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:b3e9"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "garrett.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "grannbo.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.179.233"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "garrett.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.18.31"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:121f"
            }
        ],
        "dns_at": "2026-10-20T23:10:46Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.azerbaky.top",
                "azerbaky.top"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "65b306bd1203f5fc95ca8a06793d3759ccd",
            "sha256": "aee9596b7b34bd750a4fce30d358816a11308924da7fdde3c444df7f92f79275",
            "subject": "azerbaky.top",
            "valid_to": "2027-01-18T03:52:13Z",
            "valid_from": "2026-10-20T03:52:14Z"
        },
        "whois": {
            "registrar": "PDR Ltd",
            "registrar_iana_id": "303",
            "registrar_url": "http://publicdomainregistry.com",
            "created": "2026-10-04T13:32:47Z",
            "updated": "2026-10-04T13:32:48Z",
            "expires": "2027-10-04T13:32:47Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.cloudflare.com",
                "ns2.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-04T13:32:47Z",
                "last changed": "2026-10-05T16:58:08Z",
                "registration": "2026-10-04T13:32:47Z",
                "last update of RDAP database": "2026-10-15T22:17:11Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T01:25:11Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "azerbaky.top"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "social_tags": {
            "title": "DUAL — 3D Reward Spin",
            "themeColor": "#050505"
        },
        "trackers": {
            "requests": 9,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 15,
                "tls": 13,
                "wait": 1077,
                "connect": 25,
                "download": 1
            },
            "response_ms": 1131
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 6556,
            "co2_grams": 0.0002,
            "cleaner_than": 81
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.195",
                    "host": "garrett.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.34.150",
                    "host": "grannbo.ns.cloudflare.com"
                }
            ],
            "zone": "azerbaky.top"
        },
        "location": {
            "ip": "2606:4700:3034::ac43:b3e9",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "azerbaky.top"
        },
        "dns": {
            "A": [
                "104.21.18.31",
                "172.67.179.233"
            ],
            "NS": [
                "grannbo.ns.cloudflare.com",
                "garrett.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"garrett.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417984536, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3034::ac43:b3e9",
                "2606:4700:3033::6815:121f"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3033::6815:121f",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://azerbaky.top"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Node.js",
                "Vue.js",
                "Nuxt.js",
                "lit-html",
                "lit-element",
                "Cloudflare",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 2
        },
        "whois": {
            "registrar": "PDR Ltd",
            "created": "2026-10-04T13:32:47Z",
            "updated": "2026-10-19T16:27:59Z",
            "expires": "2027-10-04T13:32:47Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "garrett.ns.cloudflare.com",
                "grannbo.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```