# cjkoster.com: Private Casino Event Hire and Party Planning Site | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/cjkoster.com/ Machine-readable companion: https://phishdestroy.io/domain/cjkoster.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-11 07:58:11 UTC - Selected availability observation: 2026-11-11T08:00:42Z - Stored record updated: 2026-11-11 08:38:34 UTC - VirusTotal detections in the stored snapshot: 12/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 94.237.59.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 (observed: 2026-11-11T08:00:42Z) - Registration date in stored WHOIS data: 2023-12-21 18:09:20 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1c99d-b80b-77f9-a75a-e55a6e09f340/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/cjkoster.com - Certificate Transparency search: https://crt.sh/?q=%25.cjkoster.com - Web Archive lookup: https://web.archive.org/web/*/https://cjkoster.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records cjkoster.com as a page presenting private casino event hire, with roulette, blackjack and poker tables for UK occasions. On 2026-11-11, cjkoster.com displayed a landing page for CJ Koster, an agency offering private casino-style events. The hero section shows a photograph of guests at a gaming table with the headline "Good company. Great nights." and describes real tables, brilliant hosts, and roulette, blackjack and poker brought to private events across the UK, with private hire from £450 for adults 18+. Navigation links include The collection, Event packages, The details and Get in touch, alongside a "Plan a good night" button. The stored VirusTotal domain result reports 12 detections out of 92 engines. DNS8 reported "suspicious"; VIPRE reported "malware". Package revision: e55d9ddda8a68381c011cb68b7973a89a0713912e5af12ea9140459a86c6f025 Text generated (not scan time): 2026-11-11 09:32:57 Reviewed evidence snapshot: {"domain":"cjkoster.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"cjkoster.com","final_host":"cjkoster.com","redirects":[],"captured_at":"2026-11-11T08:00:52Z","uuid":"142f1e13-e17d-4c57-a61e-73dd9aed6ff9","report_url":"https://radar.cloudflare.com/scan/142f1e13-e17d-4c57-a61e-73dd9aed6ff9","sha256":"7952e987c20fcd57fd8e16b807d36f38717e04b78acd31fc579c1ff3624e301e","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":12,"engines":92,"malicious":10,"suspicious":2,"analysis_date":"2026-11-08","retrieved_date":"2026-11-11","vendor_labels":{"DNS8":"suspicious","VIPRE":"malware","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","Netcraft":"malicious","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"flagging_vendors":["DNS8","VIPRE","Lionic","Sophos","CyRadar","Fortinet","Netcraft","Kaspersky","Seclookup","Gridinsoft","Chong Lua Dao","alphaMountain.ai"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 12 detections out of 92 engines. DNS8 reported \"suspicious\"; VIPRE reported \"malware\".","page_paragraph_target_characters":548} Source facts (timestamps as stored): {"record_id":1915771,"first_recorded_at":"2026-11-11 08:58:11","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":12,"denominator":92,"malicious":10,"suspicious":2,"vendors":{"DNS8":"suspicious","VIPRE":"malware","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","Netcraft":"malicious","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"observed_at":"2026-11-08T10:44:42Z","checked_at":null,"fetched_at":"2026-11-11T07:59:40Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":12,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Chong Lua Dao","CyRadar","DNS8","Fortinet","Gridinsoft","Kaspersky","Lionic","Netcraft","Seclookup","Sophos","VIPRE"],"observed_at":"2026-11-08 10:44:42","checked_at":"2026-11-11 08:59:40","fetched_at":"2026-11-11 07:59:41","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"suspicious","VIPRE":"malware","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","Netcraft":"malicious","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"vendor_names":["DNS8","VIPRE","Lionic","Sophos","CyRadar","Fortinet","Netcraft","Kaspersky","Seclookup","Gridinsoft","Chong Lua Dao","alphaMountain.ai"],"stats":{"timeout":0,"harmless":49,"malicious":10,"suspicious":2,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-11 09:30:55"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1915771,"scope":"checked_url","observed_at":"2026-11-11T08:00:42Z","http_status":200,"http_observed_at":"2026-11-11T08:00:42Z","stored_http_code":200,"stored_http_observed_at":"2026-11-11T08:00:42Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-11: https://screenshots.phishdestroy.io/us/01a1c99d-b80b-77f9-a75a-e55a6e09f340.png Captured: 2026-11-11 07:58:45 UTC Source report: https://urlscan.io/result/01a1c99d-b80b-77f9-a75a-e55a6e09f340/ SHA-256: de952a1025106abe030c6d9c1ebbc8562bfea71784bc5b7604a42a4f25414b3e - URLScan · 2026-07-28: https://screenshots.phishdestroy.io/us/019faa27-1086-723d-aa56-fd9444de9666.png Captured: 2026-07-28 19:15:23 UTC Source report: https://urlscan.io/result/019faa27-1086-723d-aa56-fd9444de9666/ SHA-256: 1e313c7d8c87e58e92cf3c54c223683a6134ff263dac60258baba9cda31d6366 - URLScan · 2026-07-29: https://screenshots.phishdestroy.io/us/019fad1e-1125-7257-9f19-3c3d0798cd2d.png Captured: 2026-07-29 09:04:35 UTC Source report: https://urlscan.io/result/019fad1e-1125-7257-9f19-3c3d0798cd2d/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-07-29: https://screenshots.phishdestroy.io/us/019fb04d-1b3a-76ee-8e1f-943a8fcf355a.png Captured: 2026-07-29 23:54:38 UTC Source report: https://urlscan.io/result/019fb04d-1b3a-76ee-8e1f-943a8fcf355a/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-10-22 → forsale.dynadot.com: https://screenshots.phishdestroy.io/us/01a161b8-73f7-731c-a1bc-13a030abcc36.png Captured: 2026-10-22 03:47:29 UTC Source report: https://urlscan.io/result/01a161b8-73f7-731c-a1bc-13a030abcc36/ SHA-256: 02142c24d93c1d4b70126a2dbe3a42884efb700996290addc739077a69b3a15c - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/142f1e13-e17d-4c57-a61e-73dd9aed6ff9.png Captured: 2026-11-11 08:00:52 UTC Source report: https://radar.cloudflare.com/scan/142f1e13-e17d-4c57-a61e-73dd9aed6ff9 SHA-256: 7952e987c20fcd57fd8e16b807d36f38717e04b78acd31fc579c1ff3624e301e - URLQuery: https://screenshots.phishdestroy.io/uq/8026fa57-9f87-4a68-8f46-de8673f057ef.png Source report: https://urlquery.net/report/8026fa57-9f87-4a68-8f46-de8673f057ef SHA-256: 5cae664c9ef2335dc998c14dbabd4762d9db0814ffce6e3a5e65fc4760e0c575 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-11T08:03:07Z", "uuid": "01a1c99d-b80b-77f9-a75a-e55a6e09f340", "scanned_at": "2026-11-11T07:58:45Z", "final_url": "https://www.cjkoster.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://www.cjkoster.com/", "from": "http://www.cjkoster.com/", "status": 307 } ], "ip": "94.237.59.119", "ptr": "94-237-59-119.uk-lon1.upcloud.host", "ips": [ "94.237.59.119" ], "asns": [ "202053" ], "countries": [ "GB" ], "link_domains": [ "www.gamblingcommission.gov.uk", "www.begambleaware.org", "www.gamcare.org.uk" ], "doc_hash": "3b87e5ad980e0cc0e9d7a21d2fec7078c8ec971e151564ca29d82a7544e06d80", "script_hashes": [ "65bb9acaf694e2efd11397ea82e89782d30dab7ff4059059aea9ffe556dd27c9" ], "globals": [ "closeMenu", "menuButton", "nav", "banner", "preference", "form", "phone", "dialog", "previousFocus" ], "cookies": [ "cjkoster_session" ], "tls": { "san": [ "cjkoster.com", "www.cjkoster.com" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL RSA DV SSL CA 2", "subject": "cjkoster.com", "protocol": "TLS 1.3", "valid_to": "2027-01-29T23:59:59Z", "valid_from": "2026-10-31T00:00:00Z" }, "domain_age_days": 1495, "apex_age_days": 2205, "tls_age_days": 11, "tls_valid_days": 90, "requests": 15, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": -29, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "CyberPanel-OLS/2.5.5", "content-security-policy": "default-src 'self'; img-src 'self' data:; font-src 'self'; style-src 'self'; script-src 'self'; connect-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } }, "cf": { "v": 1, "fetched_at": "2026-11-11T08:06:04Z", "uuid": "142f1e13-e17d-4c57-a61e-73dd9aed6ff9", "scanned_at": "2026-11-11T08:00:52Z", "final_url": "https://cjkoster.com/", "status": 200, "history": [ { "url": "https://cjkoster.com/", "status": 200 } ], "dom_hash": "735840956f1bdb60b276995cf8620c1960d4818c479aee7f8dac5b6ebb502831", "doc_hash": "28894e2660dd32578b962ed7ffa41bb52d86bed9fee64cd7fdf2b7761150949a", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "cjkoster.com", "type": "A", "value": "94.237.59.119" } ], "dnssec_valid": false, "ip": "127.0.1.6", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2023-12-21T19:09:20Z", "updated": "2026-11-11T05:29:36Z", "expires": "2026-12-21T19:09:20Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-11T07:59:40Z", "analysis_at": "2026-11-08T10:44:42Z", "stats": { "timeout": 0, "harmless": 49, "malicious": 10, "suspicious": 2, "undetected": 31 }, "detections": { "DNS8": "suspicious", "VIPRE": "malware", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "popularity": { "Alexa": 447347, "Statvoo": 493602 }, "created": "2023-12-21T00:00:00Z", "updated": "2026-01-30T00:00:00Z", "first_seen": "2023-10-30T13:40:24Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "94.237.59.119" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.cjkoster.com", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" } ], "dns_at": "2026-11-08T10:45:00Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "cjkoster.com", "www.cjkoster.com" ], "issuer": "ZeroSSL GmbH / ZeroSSL RSA DV SSL CA 2", "serial": "9f45bfa926b1c7233a5bd4c60498dee", "sha256": "1867fc27bce9e7b725a409f3f0d25f55e5abf54cbcb678906d0666b13378b8f4", "subject": "cjkoster.com", "valid_to": "2027-01-29T23:59:59Z", "valid_from": "2026-10-31T00:00:00Z", "observed_at": "2026-11-08T10:45:00Z" }, "whois": [], "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2026-12-21T19:09:20Z", "last changed": "2026-11-05T21:39:31Z", "registration": "2023-12-21T19:09:20Z", "registrar expiration": "2026-12-21T19:09:20Z", "last update of RDAP database": "2026-11-06T11:20:35Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-11T08:06:46Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-11-11T07:59:00Z", "first": "2008-11-23T05:47:00Z", "changes": 92, "days_archived": 109, "scans_per_day": 0.02, "avg_page_bytes": -61481343 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://cjkoster.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 4 }, "social_tags": { "ogUrl": "https://cjkoster.com/", "title": "Private Event & Casino Equipment Hire | CJ Koster Agency", "ogType": "website", "ogImage": "https://cjkoster.com/assets/images/cj-party-1536.webp", "ogTitle": "Private Event & Casino Equipment Hire | CJ Koster Agency", "ogSiteName": "CJ Koster Agency", "themeColor": "#f8fafd", "description": "Real tables, professional hosts and private evenings worth getting together for. Roulette, blackjack, poker and gaming equipment hire from London, across the UK.", "twitterCard": "summary_large_image", "canonicalUrl": "https://cjkoster.com/", "ogDescription": "Real tables, professional hosts and private evenings worth getting together for. Roulette, blackjack, poker and gaming equipment hire from London, across the UK." }, "trackers": { "requests": 5 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 8, "tls": 22, "wait": 170, "connect": 22, "download": 16 }, "response_ms": 238 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 24698, "co2_grams": 0.0009, "cleaner_than": 52 }, "dns_server": { "ns": [ { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.26.92", "host": "ns1.dyna-ns.net" } ], "zone": "cjkoster.com" }, "cookies": { "cookies": [ { "name": "cjkoster_session", "secure": true, "session": true, "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "94.237.59.119", "asn": "202053", "org": "UpCloud Ltd", "city": "Islington", "country": "GB" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL RSA DV SSL CA 2", "subject": "cjkoster.com" }, "dns": { "A": [ "94.237.59.119" ], "NS": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.cjkoster.com\", \"serial\": 2026103101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "default-src 'self'; img-src 'self' data:; font-src 'self'; style-src 'self'; script-src 'self'; connect-src 'self'; obje", "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "94.237.59.119", "family": 4 }, "redirects": { "chain": [ "https://cjkoster.com" ] }, "rank": { "domain": "cjkoster.com" }, "tech_stack": { "technologies": [ "LiteSpeed", "Priority Hints", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://www.gamblingcommission.gov.uk/public-and-players/guide/page/private-gambling-and-gaming", "https://www.begambleaware.org/", "https://www.gamcare.org.uk/", "https://www.gamblingcommission.gov.uk/" ], "external_count": 4, "internal_count": 11 }, "whois": { "registrar": "Dynadot Inc", "created": "2023-12-21T19:09:20Z", "updated": "2026-11-11T05:29:36Z", "expires": "2026-12-21T19:09:20Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "CyberPanel-OLS/2.5.5", "content-security-policy": "default-src 'self'; img-src 'self' data:; font-src 'self'; style-src 'self'; script-src 'self'; connect-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/142f1e13-e17d-4c57-a61e-73dd9aed6ff9.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/142f1e13-e17d-4c57-a61e-73dd9aed6ff9","captured_at":"2026-11-11T08:00:52Z","sha256":"7952e987c20fcd57fd8e16b807d36f38717e04b78acd31fc579c1ff3624e301e","model_image_sha256":"f8a6cc042aa48f30219c74e4597a8f3ab4c2f13b83970c2fd5ad272af798631e","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/cjkoster.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/cjkoster.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/cjkoster.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/cjkoster.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/cjkoster.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/cjkoster.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/cjkoster.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/cjkoster.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1915771, "scope": "checked_url", "observed_at": "2026-11-11T08:00:42Z", "http_status": 200, "http_observed_at": "2026-11-11T08:00:42Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-11T08:00:42Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```