# PhishDestroy domain threat record: batorhozamsag.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/batorhozamsag.net/
Machine-readable companion: https://phishdestroy.io/domain/batorhozamsag.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 20:48:44 UTC
- Last availability or vendor check: 2026-10-22 22:00:22 UTC
- Stored record updated: 2026-10-22 22:20:47 UTC
- VirusTotal detections in the stored snapshot: 7/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-13 05:44:46 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1439c-959e-73f8-886a-3c60e937f5ed/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/batorhozamsag.net
- Certificate Transparency search: https://crt.sh/?q=%25.batorhozamsag.net
- Web Archive lookup: https://web.archive.org/web/*/https://batorhozamsag.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added batorhozamsag.net to its internal blocklist on 2026-10-22 after an intake review that highlighted five malicious VirusTotal vendor detections. The recorded page title advertises an AI‑platform called “Bátor Hozamság”. The domain was first seen by PhishDestroy on the same day, nine days after its registration on 2026-10-13.

How the scam works
The listing suggests the site could be used for phishing or other fraudulent activity, a common pattern for newly‑registered domains that mimic legitimate services. No specific malicious behavior was observed on the page itself, so the risk is inferred from the detection profile rather than concrete evidence of credential or wallet theft.

Evidence
VirusTotal reported seven detections across 92 engines on 2026-10-22, with five vendors marking the domain as malicious (Forcepoint ThreatSeeker, G‑Data, Kaspersky, SOCRadar, Sophos) and two as suspicious. Google Safe Browsing checked the domain on 2026-10-22 and returned no flag. urlscan captured the site on 2026-10-16, gave an overall clean verdict but its engine scoring flagged it as malicious with a score of 93. Cloudflare Radar scanned the domain on 2026-10-22 and labeled it malicious, categorising it under malware and scam. OTX listed three pulses referencing the domain as of 2026-10-22. PhishDestroy’s internal blocklist marks the domain as present, while external blocklists reported zero hits on the same date.

Infrastructure
The domain was registered with Dynadot Inc on 2026-10-13 and resolves to IP 158.94.210.119, which belongs to Omegatech LTD in the Netherlands (ASN 202412). TLS was provided by Let’s Encrypt, valid from 2026-10-15 to 2027-01-13, and the site served HTTP 200 responses at the time of capture.

What to do
Visitors should avoid entering any credentials or personal data on the site; if such information was submitted, change the associated passwords immediately and monitor accounts for unusual activity. Network defenders can block the exact domain name in firewalls or DNS filters. Administrators should review access logs for connections to 158.94.210.119 and apply standard malware‑prevention policies.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1439c-959e-73f8-886a-3c60e937f5ed/
Cloudflare Radar report: https://radar.cloudflare.com/scan/75a613c7-8181-4625-aa63-d1590891508f
Stored capture screenshot: https://urlscan.io/screenshots/01a1439c-959e-73f8-886a-3c60e937f5ed.png
Cloudflare Radar screenshot (2026-10-22T20:50:34Z): https://screenshots.phishdestroy.io/cf/75a613c7-8181-4625-aa63-d1590891508f.png
URLScan screenshot (2026-10-13T17:45:53Z): https://screenshots.phishdestroy.io/us/01a1365e-cf9e-778d-8339-fc6aac2f3d8a.png
URLScan capture report: https://urlscan.io/result/01a1365e-cf9e-778d-8339-fc6aac2f3d8a/
VirusTotal report: https://www.virustotal.com/gui/domain/batorhozamsag.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=batorhozamsag.net
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 21:20:27 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1439c-959e-73f8-886a-3c60e937f5ed.png
  Captured: 2026-10-22 20:48:44 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1439c-959e-73f8-886a-3c60e937f5ed.png
  Source report: https://urlscan.io/result/01a1439c-959e-73f8-886a-3c60e937f5ed/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/75a613c7-8181-4625-aa63-d1590891508f.png
  Captured: 2026-10-22 20:50:34 UTC
  Source report: https://radar.cloudflare.com/scan/75a613c7-8181-4625-aa63-d1590891508f
  SHA-256: 38849a41f5d0e354e6d86141b6d4d97462a40dee7af9d200c3bfc8ec56aa9e1f
- URLScan · 2026-10-13: https://screenshots.phishdestroy.io/us/01a1365e-cf9e-778d-8339-fc6aac2f3d8a.png
  Captured: 2026-10-13 17:45:53 UTC
  Source report: https://urlscan.io/result/01a1365e-cf9e-778d-8339-fc6aac2f3d8a/
  SHA-256: 56f7acf6aae7a90223e953289eb9825b6b35cb41fc611a4dfe4961d78d629b00

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T20:51:52Z",
        "uuid": "01a1439c-959e-73f8-886a-3c60e937f5ed",
        "scanned_at": "2026-10-16T07:28:25Z",
        "final_url": "https://batorhozamsag.net/",
        "status": 200,
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "a2d6b03fc02b6bb5368d1bc33af00bf43036f89f26c0ad3944fa4383bcc047c4",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.batorhozamsag.net",
                "batorhozamsag.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "batorhozamsag.net",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-13T20:46:11Z",
            "valid_from": "2026-10-15T20:46:12Z"
        },
        "domain_age_days": 2,
        "apex_age_days": 2,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 5,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T20:51:54Z",
        "uuid": "75a613c7-8181-4625-aa63-d1590891508f",
        "scanned_at": "2026-10-22T20:50:34Z",
        "final_url": "https://batorhozamsag.net/",
        "status": 200,
        "history": [
            {
                "url": "https://batorhozamsag.net/",
                "status": 200
            }
        ],
        "dom_hash": "c12641fe5e1c0c9557cf5cbb4be7688ff80e618ee11092b5bd204f8e83969703",
        "doc_hash": "47af57b16cbd059e0cdefc3ac326d228913ae8d4488477f40b17ae4eaa90a12a",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Scam",
            "Security threats",
            "New Domains",
            "Security Risks",
            "Newly Seen Domains",
            "Malware",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "batorhozamsag.net",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-13T07:44:46Z",
            "updated": "2026-10-15T20:28:55Z",
            "expires": "2027-10-13T07:44:46Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T21:19:26Z",
        "analysis_at": "2026-10-19T06:18:33Z",
        "stats": {
            "timeout": 0,
            "harmless": 49,
            "malicious": 5,
            "suspicious": 2,
            "undetected": 36
        },
        "detections": {
            "ESET": "suspicious",
            "G-Data": "phishing",
            "Sophos": "phishing",
            "Fortinet": "spam",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
        },
        "registrar": "Dynadot Inc",
        "created": "2026-10-13T07:44:46Z",
        "expires": "2027-10-13T07:44:46Z",
        "updated": "2026-10-13T07:44:58Z",
        "first_seen": "2026-10-13T09:32:50Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.batorhozamsag.net",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dns_at": "2026-10-19T06:29:25Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.batorhozamsag.net",
                "batorhozamsag.net"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6bfb1ef07392838e813042649c19e9b5287",
            "sha256": "1f8e359622fb945439b580e350676afa02f4fdd15774745277939cbefb5efdc1",
            "subject": "batorhozamsag.net",
            "valid_to": "2027-01-13T20:46:11Z",
            "valid_from": "2026-10-15T20:46:12Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-10-13T07:44:46Z",
            "updated": "2026-10-13T07:44:58Z",
            "expires": "2027-10-13T07:44:46Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "sage.ns.cloudflare.com",
                "teagan.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-13T07:44:46Z",
                "last changed": "2026-10-13T07:44:58Z",
                "registration": "2026-10-13T07:44:46Z",
                "last update of RDAP database": "2026-10-13T09:32:38Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T20:52:08Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "batorhozamsag.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-22T11:37:08Z",
            "first": "2026-10-14T06:23:31Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.12,
            "avg_page_bytes": 11167
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://batorhozamsag.net/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Bátor Hozamság — AI-platform, ami Önnel együtt tanul",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Fedezze fel a Bátor Hozamság adaptív AI-platformját, amely a piaci zajból szűrt jelzéseket az Ön kockázati profiljával ötvözi. Átlátható elemzés, személyre szabott javaslatok, döntés mindig az Öné.",
            "canonicalUrl": "https://batorhozamsag.net/"
        },
        "trackers": {
            "requests": 51,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 181,
                "tls": 91,
                "wait": 86,
                "connect": 67,
                "download": 138
            },
            "response_ms": 563
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 71845,
            "co2_grams": 0.0026,
            "cleaner_than": 29
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "batorhozamsag.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "batorhozamsag.net"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.batorhozamsag.net\", \"serial\": 2026101503, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://batorhozamsag.net"
            ]
        },
        "linked_pages": {
            "internal_count": 8
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-13T07:44:46Z",
            "updated": "2026-10-15T20:28:55Z",
            "expires": "2027-10-13T07:44:46Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```