# PhishDestroy domain threat record: carolcornils.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/carolcornils.com/ Machine-readable companion: https://phishdestroy.io/domain/carolcornils.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 01:20:26 UTC - Last availability or vendor check: 2026-10-24 10:56:50 UTC - Stored record updated: 2026-10-24 18:21:36 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 177.210.190.237 - Registrar in stored WHOIS data: Gname.com Pte. Ltd. - Registrar country in stored WHOIS data: CN - Last stored HTTP status: 200 - Registration date (registry RDAP, carolcornils.com): 2023-09-22 09:07:11 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16b7e-3fa0-709f-9d6a-81c6ebcefa73/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/carolcornils.com - Certificate Transparency search: https://crt.sh/?q=%25.carolcornils.com - Web Archive lookup: https://web.archive.org/web/*/https://carolcornils.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy classifies carolcornils.com as suspicious based on multiple security‑engine detections. The domain was first seen by PhishDestroy on 2026-10-24 when the intake system recorded thirteen malicious VirusTotal detections. The recorded page title reads "pg国际「中国」官方网站 - pg平台门户网站" and an HTTP 200 response was observed on the same date. How the scam works The high number of phishing‑related detections suggests the site may be used to lure visitors into submitting credentials or personal information under the guise of a legitimate service. No specific malicious behavior was captured on the page, so the exact technique remains unconfirmed. Evidence VirusTotal reported 13 malicious and 4 suspicious detections across 92 engines on 2026-10-24, with vendors such as BitDefender, ESET and Kaspersky marking it as phishing. Google Safe Browsing checked the domain on 2026-10-24 and did not flag it. URLScan’s automated analysis on 2026-10-24 gave a malicious verdict with a score of 100, categorising it as phishing and tagging a generic gambling brand. Cloudflare Radar also returned a malicious verdict and labelled the domain as malware on 2026-10-24. PhishDestroy’s internal blocklist marks the domain as blocked, while external public blocklists showed no entries at the time of checking. Infrastructure The domain was registered on 2023-09-22 through Gname.com Pte. Ltd. and resolves to the IP 177.210.190.237, which is listed as part of a HongKong Service network in Hong Kong. The TLS certificate, issued by Let’s Encrypt / YR1, is valid from 2026-10-17 to 2027-01-15. Nameservers are ns1.julydns.com and ns2.julydns.com and DNSSEC is not enabled. What to do Visitors should avoid entering any credentials or personal data on the site and, if they have already done so, change associated passwords and monitor accounts for suspicious activity. Security teams should block the exact domain name, review logs for connections to 177.210.190.237, and add the domain to internal blocklists to prevent future access. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16b7e-3fa0-709f-9d6a-81c6ebcefa73/ Cloudflare Radar report: https://radar.cloudflare.com/scan/1f8ca41b-8e78-4b95-95a9-632d4274bfe7 URLQuery report: https://urlquery.net/report/3b54e87c-9c83-4529-ae6f-bf03018a30d4 Stored capture screenshot: https://i.ibb.co/cK2DMp5R/9c7a991ed224.png Cloudflare Radar screenshot (2026-10-24T01:20:45Z): https://screenshots.phishdestroy.io/cf/1f8ca41b-8e78-4b95-95a9-632d4274bfe7.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/3b54e87c-9c83-4529-ae6f-bf03018a30d4.png URLScan screenshot (2026-10-24T01:10:20Z): https://screenshots.phishdestroy.io/us/01a16b75-4545-752e-8043-e2d6bb171b54.png URLScan capture report: https://urlscan.io/result/01a16b75-4545-752e-8043-e2d6bb171b54/ VirusTotal report: https://www.virustotal.com/gui/domain/carolcornils.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=carolcornils.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 02:21:26 UTC ## Stored page captures - Primary capture: https://i.ibb.co/cK2DMp5R/9c7a991ed224.png Captured: 2026-10-24 01:20:26 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16b7e-3fa0-709f-9d6a-81c6ebcefa73.png Captured: 2026-10-24 01:20:26 UTC Source report: https://urlscan.io/result/01a16b7e-3fa0-709f-9d6a-81c6ebcefa73/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1f8ca41b-8e78-4b95-95a9-632d4274bfe7.png Captured: 2026-10-24 01:20:45 UTC Source report: https://radar.cloudflare.com/scan/1f8ca41b-8e78-4b95-95a9-632d4274bfe7 SHA-256: 87749c50fa6484a9585543c87585bff43fce64ac248796a0a2b5bb140c0c4b48 - URLQuery: https://screenshots.phishdestroy.io/uq/3b54e87c-9c83-4529-ae6f-bf03018a30d4.png Source report: https://urlquery.net/report/3b54e87c-9c83-4529-ae6f-bf03018a30d4 SHA-256: 686a5210ecfc4c5eab472f59a452404adb15dc4abc519847fa55707065355a44 - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16b75-4545-752e-8043-e2d6bb171b54.png Captured: 2026-10-24 01:10:20 UTC Source report: https://urlscan.io/result/01a16b75-4545-752e-8043-e2d6bb171b54/ SHA-256: b97f0f65175b8f6ac8e335fd0cdd25e4c69fe8da7c0315b78a708ae910cb0c7e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T01:21:10Z", "uuid": "01a16b7e-3fa0-709f-9d6a-81c6ebcefa73", "scanned_at": "2026-10-24T01:20:08Z", "final_url": "https://carolcornils.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://carolcornils.com/", "from": "http://carolcornils.com/", "status": 307 } ], "ip": "177.210.190.237", "domains": [ "hm.baidu.com", "cdn.tailwindcss.com" ], "ips": [ "183.240.98.228", "104.26.2.143", "177.210.190.237" ], "asns": [ "56040", "13335", "134175" ], "countries": [ "CN", "HK" ], "doc_hash": "080e935084cfdf6e90d58074d1a8891a084ac780c7639bd8317a893aedb8f4dd", "script_hashes": [ "baaa692437ee727978a8f18ddd2c26b9473a6ca0e955bc98ceaf7440da027fe5", "c40d8321d2409da88a5ae6e05b1e19d6bc899a435be3f81d23a0c98a561828e3", "896648db123c61c95a781c608df7b422aaf777275e836c5851909cfbe590eb77", "9bbcd9aae247e7241466a971956a26d456507d42c224365c317cb2084bed45fc" ], "globals": [ "tailwind", "/template.html", "__LDY_BAIDU_HM_LOADED__", "_hmt", "_bdhm_loaded_901aa9f4747c52240f7e91a6e3014751", "mini_tangram_log_nv03c4" ], "cookies": [ "HMACCOUNT_BFESS", "Hm_lvt_901aa9f4747c52240f7e91a6e3014751", "Hm_lpvt_901aa9f4747c52240f7e91a6e3014751", "HMACCOUNT" ], "storage_keys": [ "Hm_lpvt_901aa9f4747c52240f7e91a6e3014751", "HMACCOUNT", "Hm_unsent_901aa9f4747c52240f7e91a6e3014751", "Hm_lvt_901aa9f4747c52240f7e91a6e3014751" ], "tls": { "san": [ "carolcornils.com", "m.carolcornils.com", "www.carolcornils.com" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "carolcornils.com", "protocol": "TLS 1.3", "valid_to": "2027-01-15T14:19:50Z", "valid_from": "2026-10-17T14:19:51Z" }, "domain_age_days": 1347, "apex_age_days": 1347, "tls_age_days": 6, "tls_valid_days": 89, "requests": 29, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericgambling" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Gambling" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T01:21:12Z", "uuid": "1f8ca41b-8e78-4b95-95a9-632d4274bfe7", "scanned_at": "2026-10-24T01:20:45Z", "final_url": "https://carolcornils.com/", "status": 200, "history": [ { "url": "https://carolcornils.com/", "status": 200 } ], "dom_hash": "b58f70ea2211354b04f616b7383a0d286aeb699af7fc631587b671dfac2dd6de", "doc_hash": "080e935084cfdf6e90d58074d1a8891a084ac780c7639bd8317a893aedb8f4dd", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "carolcornils.com", "type": "A", "value": "177.210.190.237" } ], "dnssec_valid": false, "ip": "177.210.190.237", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Gname.com Pte. Ltd.", "created": "2023-09-22T09:07:11Z", "updated": "2026-10-17T04:58:41Z", "expires": "2027-09-22T09:07:11Z", "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-24T02:20:58Z", "analysis_at": "2026-10-23T23:40:13Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 4, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "spam", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "ADMINUSLabs": "malicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing, Spam (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "registrar": "Gname.com Pte. Ltd.", "created": "2023-09-22T09:07:11Z", "expires": "2027-09-22T09:07:11Z", "updated": "2026-09-23T08:30:06Z", "first_seen": "2024-03-05T17:46:45Z", "dns": [ { "ttl": 1, "type": "A", "value": "177.210.190.237" }, { "ttl": 600, "type": "SOA", "rname": "master.jmdns.com", "value": "ns1.julydns.com" }, { "ttl": 21600, "type": "NS", "value": "ns2.julydns.com" }, { "ttl": 21600, "type": "NS", "value": "ns1.julydns.com" } ], "dns_at": "2026-10-23T23:40:33Z", "jarm": "2ad2ad0002ad2ad00042d42d00000000f78d2dc0ce6e5bbc5b8149a4872356", "cert": { "san": [ "carolcornils.com", "m.carolcornils.com", "www.carolcornils.com" ], "issuer": "Let's Encrypt / YR1", "serial": "5779bff4a1c5130f1aa5c92498b8dbf37b8", "sha256": "7c0894d6a48c12286dc9ee17107a95a8727d86e05383117cd4e9a5c36f4ca93d", "subject": "carolcornils.com", "valid_to": "2027-01-15T14:19:50Z", "valid_from": "2026-10-17T14:19:51Z" }, "whois": { "registrar": "Gname.com Pte. Ltd.", "registrar_iana_id": "1923", "registrar_url": "http://www.gname.com", "created": "2023-09-22T09:07:11Z", "updated": "2026-09-23T08:30:06Z", "expires": "2027-09-22T09:07:11Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "expire1.gname-dns.com", "expire2.gname-dns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-09-22T09:07:11Z", "registration": "2023-09-22T09:07:11Z", "last update of RDAP database": "2026-10-17T15:04:48Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T01:21:34Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "carolcornils.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2025-07-11T00:43:22Z", "first": "2013-11-15T16:50:23Z", "changes": 7, "days_archived": 16, "scans_per_day": 0, "avg_page_bytes": 1224 }, "robots_txt": { "agents": [ "*" ], "present": true }, "sitemap": { "present": true, "url_count": 4 }, "social_tags": { "ogUrl": "https://carolcornils.com", "title": "pg国际「中国」官方网站 - pg平台门户网站", "ogType": "website", "ogImage": "https://carolcornils.com/assets/images/coverpic/cover-1.webp", "ogTitle": "pg国际「中国」官方网站 - pg平台门户网站", "keywords": "pg国际网,竖屏片段,种草清单,实拍测评,好物清单,短片段,最新动态", "ogSiteName": "pg国际网", "description": "pg国际网把零散的好内容收拢到一处：竖屏片段按场景和时长排开，种草清单把每一步拆成能照着做的条目，最新动态记录每天值得留意的更新。你可以在导航中间的搜索框输入片段、清单或具体问题，再从分类标签里缩小范围，找到四十秒讲清一件事的实拍片段、带价格与使用周期的选购清单，以及发布后仍在持续补充说明的条目。每个片段卡都标注时长与播放量，每条清单行都写清适用人群和注意点，最新动态里可以看到发布时间与所属分类。页面还提供常见问题、使用反馈与订阅入口，方便你在手机上随时回看与对照。内容持续更新，欢迎收藏页面，或通过页脚的联系方式告诉我们你想看的方向。", "twitterCard": "summary_large_image", "ogDescription": "用四十秒看完一段实测，用一页清单对照下单。pg国际网收录竖屏片段、可执行清单与每日最新动态，支持搜索、分类筛选与手机端回看。「pg国际网」持续整理实用信息、精选入口与阅读指引，覆盖分类浏览、更新提醒、热门推荐和常见问题解答，帮助你更快找到感兴趣的内容，并了解相关动态与专题。页面内容围绕「pg国际网」展开，提供清晰导航、精选清单、场景说明与更新节奏，适合快速筛选、对照查看和持续关注；同时补充适用人群、使用方式与常见疑问，让信息更完整、更好懂。" }, "trackers": { "requests": 26, "trackers": [ { "name": "Baidu Ads", "company": "Baidu", "country": "CN", "category": "Advertising", "requests": 2 } ] }, "mixed_content": { "no_sri": [ "https://cdn.tailwindcss.com/" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 689, "tls": 247, "wait": 324, "connect": 243, "download": 237 }, "response_ms": 1740 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 34151, "co2_grams": 0.0012, "cleaner_than": 45 }, "dns_server": { "ns": [ { "ip": "162.159.48.223", "host": "ns1.julydns.com" }, { "ip": "162.159.27.251", "host": "ns2.julydns.com" } ], "zone": "carolcornils.com" }, "cookies": { "cookies": [ { "name": "HMACCOUNT_BFESS", "secure": true, "same_site": "None" }, { "name": "Hm_lvt_901aa9f4747c52240f7e91a6e3014751" }, { "name": "Hm_lpvt_901aa9f4747c52240f7e91a6e3014751", "session": true }, { "name": "HMACCOUNT", "session": true } ] }, "location": { "ip": "177.210.190.237", "asn": "134175", "org": "HongKong Service", "city": "Mong Kok", "country": "HK" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "carolcornils.com" }, "dns": { "A": [ "177.210.190.237" ], "NS": [ "ns1.julydns.com", "ns2.julydns.com" ], "SOA": "{\"nsname\": \"ns1.julydns.com\", \"hostmaster\": \"master.jmdns.com\", \"serial\": 1792249451, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "177.210.190.237", "family": 4 }, "redirects": { "chain": [ "https://carolcornils.com" ] }, "subdomains": { "count": 2, "subdomains": [ "m.carolcornils.com", "www.carolcornils.com" ] }, "linked_pages": { "internal_count": 8 }, "whois": { "registrar": "Gname.com Pte. Ltd.", "created": "2023-09-22T09:07:11Z", "updated": "2026-10-17T04:58:41Z", "expires": "2027-09-22T09:07:11Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.julydns.com", "ns2.julydns.com" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8" } } } } ```