# PhishDestroy domain threat record: clozer.io Content language: English Canonical HTML report: https://phishdestroy.io/domain/clozer.io/ Machine-readable companion: https://phishdestroy.io/domain/clozer.io/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 14:50:23 UTC - Last availability or vendor check: 2026-10-24 14:50:23 UTC - Stored record updated: 2026-10-24 19:22:36 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 199.36.158.100 - Registrar in stored WHOIS data: GoDaddy.com, LLC - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2021-11-14 08:35:32 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16e62-5a42-73dc-83c8-70eaef4847ca/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/clozer.io - Certificate Transparency search: https://crt.sh/?q=%25.clozer.io - Web Archive lookup: https://web.archive.org/web/*/https://clozer.io/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added clozer.io to its blocklist on 2026-10-24 after the domain was first seen by the service. The site returned HTTP 200 and presented a music‑related landing page describing an all‑in‑one link‑in‑bio for music, merch and tickets. No page title was recorded, and the page metadata matches the described service. How the scam works The classification relies on external phishing labels; such pages typically imitate legitimate services to capture login credentials or personal data. No specific credential‑harvesting form or wallet interaction was observed on the captured page, so the risk is inferred from the malicious reputation rather than concrete behavior. Evidence VirusTotal scanned the domain on 2026-10-24, reporting five detections across 92 engines, with four vendors labeling it malicious (Forcepoint ThreatSeeker, Gridinsoft, Seclookup, VIPRE) and one marking it suspicious (alphaMountain.ai). Google Safe Browsing checked the same day and did not flag the site. OTX listed five pulses referencing the domain as of 2026-10-24. urlscan.io captured the page on 2026-10-24, assigning an overall non‑malicious verdict with a neutral score of 0, while its engine score was -38. Infrastructure The domain was registered with GoDaddy on 2021-11-14 and was 3,584 days old at the time of observation. The recorded IP address was 199.36.158.100, which belongs to Fastly, Inc. and was listed as being in the United States. The TLS check on 2026-10-24 recorded a certificate issued by Google Trust Services (WR3) on 2026-10-07 for the subject impressiona3d.com, valid until 2027-01-05. What to do Visitors should avoid entering any credentials or personal information on clozer.io and, if they have already done so, change the associated passwords immediately. Organizations can block the domain at the firewall or DNS level and monitor outbound traffic for connections to the recorded IP address. Security teams should log any access attempts to the domain for further investigation. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16e62-5a42-73dc-83c8-70eaef4847ca/ Cloudflare Radar report: https://radar.cloudflare.com/scan/1353cbdf-60aa-4d3f-8119-a13abe472632 Stored capture screenshot: https://urlscan.io/screenshots/01a16e62-5a42-73dc-83c8-70eaef4847ca.png Cloudflare Radar screenshot (2026-10-24T15:23:30Z): https://screenshots.phishdestroy.io/cf/1353cbdf-60aa-4d3f-8119-a13abe472632.png URLScan screenshot (2026-10-24T15:10:36Z): https://screenshots.phishdestroy.io/us/01a16e76-7105-774f-92fd-95d159c89603.png URLScan capture report: https://urlscan.io/result/01a16e76-7105-774f-92fd-95d159c89603/ VirusTotal report: https://www.virustotal.com/gui/domain/clozer.io Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=clozer.io Archived copy: https://web.archive.org/web/20261024145151/https://clozer.io/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 15:24:23 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16e62-5a42-73dc-83c8-70eaef4847ca.png Captured: 2026-10-24 14:50:23 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16e62-5a42-73dc-83c8-70eaef4847ca.png Captured: 2026-10-24 14:50:23 UTC Source report: https://urlscan.io/result/01a16e62-5a42-73dc-83c8-70eaef4847ca/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1353cbdf-60aa-4d3f-8119-a13abe472632.png Captured: 2026-10-24 15:23:30 UTC Source report: https://radar.cloudflare.com/scan/1353cbdf-60aa-4d3f-8119-a13abe472632 SHA-256: 286ba6e47743702dc2d9f0a9344ac6f6ee6e758a4257d653b0017b6fe65e6a4b - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16e76-7105-774f-92fd-95d159c89603.png Captured: 2026-10-24 15:10:36 UTC Source report: https://urlscan.io/result/01a16e76-7105-774f-92fd-95d159c89603/ SHA-256: cd9a00d5145813e5e70aec124efbf1979fa8af7e50cb0ab6fb4adf88f9454ffb ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T15:23:50Z", "uuid": "01a16e62-5a42-73dc-83c8-70eaef4847ca", "scanned_at": "2026-10-24T14:48:40Z", "final_url": "https://clozer.io/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://clozer.io/", "from": "http://clozer.io/", "status": 307 }, { "to": "http://clozer.io/", "from": "https://clozer.io/", "status": 307 }, { "to": "https://clozer.io/", "from": "http://clozer.io/", "status": 301 } ], "ip": "199.36.158.100", "domains": [ "cdn.iubenda.com", "clozer-bc97fb95.firebaseapp.com", "region1.google-analytics.com", "apis.google.com", "europe-west3-clozer-bc97fb95.cloudfunctions.net", "cs.iubenda.com", "www.googletagmanager.com", "fonts.gstatic.com", "js-cdn.music.apple.com", "www.googleapis.com" ], "ips": [ "216.239.32.36", "185.111.111.157", "142.251.13.101", "216.239.36.54", "185.152.64.17", "142.251.14.97", "142.251.14.94", "184.24.77.66", "199.36.158.100" ], "asns": [ "15169", "212238", "60068", "20940", "54113" ], "countries": [ "US", "DE", "CZ" ], "link_domains": [ "storage.googleapis.com", "www.linkedin.com" ], "doc_hash": "ee753582c623589dc9654b8cf4fbc3d71714d6aca224707c136339e1e974c5ea", "script_hashes": [ "7e1e9fd11d62d1392c818bdc37e953d7978b8793db2b8454e61600e4d2918ef9", "745834316128a9605db352a4146dfb81cfd209fa037d3256277e2bc9d12b0f44", "78fedbd9ead56b513a2d50059144be90485fc64e4d3e5658c0a6bdb5d8beb99d", "be49362d3a54c09a1acc710d2b3f383bfe229e2ca056ca4c661625a537232ab6", "3ace8f74784fb9b07aabde8e64f227157acab33dbc18e4511ddf923f32130be1", "dedfa7e5a7d93abf73caccc9327aa84818d250f812992d7005a20b6c2b7c76ca", "cd490c4d5b2d5a5b827a1c528e5dececed2af2946af36fc7fca16b9e678f846a", "2a064f6d714b1c9c5d3f5d525176f8648d744500303c5ead51412ccc0e2d39c6", "de18a5c3a9a3e07561b1f4099fbffbba2b141e17a1909ed1bf6da32faf1697d2", "6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e" ], "globals": [ "MusicKit", "webpackChunk_N_E", "regeneratorRuntime", "next", "__NEXT_DATA__", "__SSG_MANIFEST_CB", "__NEXT_P", "_N_E", "__NEXT_PRELOADREADY", "__coverage__", "__BUILD_MANIFEST", "__SSG_MANIFEST", "__MIDDLEWARE_MANIFEST", "gtag", "dataLayer", "_iub", "__iframefcb30017", "_cmp", "__uspapi", "gapi", "___jsl", "google_tag_data", "google_tag_manager", "onYouTubeIframeAPIReady", "gaGlobal", "_F_toggles", "osapi" ], "cookies": [ "_ga", "_ga_QWBCE52T8H", "_iub_previous_preference_id", "_iub_cs-90325236" ], "storage_keys": [ "__sak", "iub_storage_available", "_iub_cs_cons-90325236" ], "tls": { "san": [ "impressiona3d.com", "www.ringspirations.com", "www.itsaweddingtrap.com", "www.scala.dev", "franksinmaine.com", "maxgamescenter.com", "app.logixstreamshipping.com", "imdluiperf.app-np.rxo.com", "tearsolucoes.com.br", "prmsoftwareconsultancy.com" ], "cipher": "AES_128_GCM", "issuer": "WR3", "subject": "impressiona3d.com", "protocol": "TLS 1.3", "valid_to": "2027-01-05T16:25:23Z", "valid_from": "2026-10-07T15:28:11Z" }, "domain_age_days": 3584, "apex_age_days": 3584, "tls_age_days": 16, "tls_valid_days": 90, "requests": 49, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -38, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31556926" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T15:23:56Z", "uuid": "1353cbdf-60aa-4d3f-8119-a13abe472632", "scanned_at": "2026-10-24T15:23:30Z", "final_url": "https://clozer.io/", "status": 200, "history": [ { "url": "https://clozer.io/", "status": 200 } ], "dom_hash": "543a0b1162403a2f85d6d33f9c3705b1dd4492852d8921f70ece932ceaa64a90", "doc_hash": "ee753582c623589dc9654b8cf4fbc3d71714d6aca224707c136339e1e974c5ea", "domain_risks": [ "Music", "Entertainment" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "clozer.io", "type": "A", "value": "199.36.158.100" } ], "dnssec_valid": false, "ip": "199.36.158.100", "whois": { "registrar": "GoDaddy.com, LLC", "created": "2021-11-14T09:35:32Z", "updated": "2026-08-12T05:04:35Z", "expires": "2026-11-14T09:35:32Z", "nameservers": [ "ns17.domaincontrol.com", "ns18.domaincontrol.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-24T15:23:23Z", "analysis_at": "2026-10-24T06:07:46Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 4, "suspicious": 1, "undetected": 33 }, "detections": { "VIPRE": "phishing", "Seclookup": "malicious", "Gridinsoft": "phishing", "alphaMountain.ai": "suspicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "popularity": { "Alexa": 57860, "Statvoo": 688835 }, "registrar": "GoDaddy.com, LLC", "created": "2021-11-14T09:35:32Z", "expires": "2026-11-14T09:35:32Z", "updated": "2026-08-12T05:04:35Z", "first_seen": "2023-10-07T01:51:51Z", "dns": [ { "ttl": 3600, "type": "SOA", "rname": "dns.jomax.net", "value": "ns17.domaincontrol.com" }, { "ttl": 3600, "type": "MX", "value": "aspmx.l.google.com", "priority": 1 }, { "ttl": 3600, "type": "TXT", "value": "google-site-verification=4PNq07DAWnPw9CNF3iW37tvYeCPOQaIy5Bx8QYa2PaM" }, { "ttl": 600, "type": "A", "value": "199.36.158.100" }, { "ttl": 3600, "type": "MX", "value": "alt3.aspmx.l.google.com", "priority": 10 }, { "ttl": 3600, "type": "NS", "value": "ns18.domaincontrol.com" }, { "ttl": 3600, "type": "TXT", "value": "google-site-verification=zJNhRVFaFNmxFhj3qNO4-VFAOX3RvXfjxQNDBFwAn_0" }, { "ttl": 3600, "type": "MX", "value": "alt2.aspmx.l.google.com", "priority": 5 }, { "ttl": 3600, "type": "MX", "value": "alt1.aspmx.l.google.com", "priority": 5 }, { "ttl": 3600, "type": "TXT", "value": "firebase=clozer-bc97fb95" }, { "ttl": 3600, "type": "NS", "value": "ns17.domaincontrol.com" }, { "ttl": 3600, "type": "MX", "value": "alt4.aspmx.l.google.com", "priority": 10 }, { "ttl": 3600, "type": "TXT", "value": "v=spf1 include:_spf.google.com ~all" } ], "dns_at": "2026-10-24T06:10:10Z", "jarm": "29d3fd00029d29d00041d41d00041d6b5eefa2404a56c2ced79a0d16afe36c", "cert": { "san": [ "impressiona3d.com", "www.ringspirations.com", "www.itsaweddingtrap.com", "www.scala.dev", "franksinmaine.com", "maxgamescenter.com", "app.logixstreamshipping.com", "imdluiperf.app-np.rxo.com", "tearsolucoes.com.br", "prmsoftwareconsultancy.com" ], "issuer": "Google Trust Services / WR3", "serial": "3d502b882be44f7b0a115b0edabc2f4e", "sha256": "814c0ef1c55a1c5da36300a7cb6629ff5a0f1f09725b80ccfb7b7be38c4a79b9", "subject": "impressiona3d.com", "valid_to": "2027-01-05T16:25:23Z", "valid_from": "2026-10-07T15:28:11Z" }, "whois": { "registrar": "GoDaddy.com, LLC", "registrar_iana_id": "146", "registrar_url": "http://www.godaddy.com/domains/search.aspx", "created": "2021-11-14T09:35:32Z", "updated": "2026-08-12T05:04:35Z", "expires": "2026-11-14T09:35:32Z", "status": [ "clientDeleteProhibited", "clientRenewProhibited", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "ns17.domaincontrol.com", "ns18.domaincontrol.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client renew prohibited", "client transfer prohibited", "client update prohibited" ], "events": { "expiration": "2026-11-14T09:35:32Z", "last changed": "2026-08-12T05:04:35Z", "registration": "2021-11-14T09:35:32Z", "last update of RDAP database": "2026-10-18T19:27:35Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T15:14:12Z", "mail_config": { "mx": [ "alt1.aspmx.l.google.com", "alt2.aspmx.l.google.com", "alt3.aspmx.l.google.com", "alt4.aspmx.l.google.com", "aspmx.l.google.com" ], "spf": "v=spf1 include:_spf.google.com ~all", "dkim": [ "google" ], "dmarc": true, "dkim_bits": 2048, "providers": [ "Google Workspace" ], "spf_lookups": 1 }, "caa_records": { "domain": "clozer.io" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-24T14:51:51Z", "first": "2018-03-25T05:53:38Z", "changes": 38, "days_archived": 48, "scans_per_day": 0.01, "avg_page_bytes": 18440 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://clozer.io/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 286 }, "social_tags": { "description": "Bring all your music, merch, and tickets in one place, in seconds. Your all-in-one link in bio. All your music." }, "trackers": { "requests": 35, "trackers": [ { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "iTunes Link Maker", "company": "Apple", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "iubenda", "company": "iubenda", "country": "BE", "category": "Consent Management", "requests": 3 }, { "name": "Google Cloud", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "Google Analytics", "company": "Google", "country": "US", "category": "Site Analytics", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://js-cdn.music.apple.com/musickit/v3/musickit.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 3, "tls": 75, "wait": 22, "connect": 16, "download": 82 }, "response_ms": 198 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 153591, "co2_grams": 0.0056, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "173.201.76.9", "host": "ns18.domaincontrol.com" }, { "ip": "97.74.108.9", "host": "ns17.domaincontrol.com" } ], "zone": "clozer.io" }, "cookies": { "cookies": [ { "name": "_ga" }, { "name": "_ga_QWBCE52T8H" } ] }, "location": { "ip": "199.36.158.100", "asn": "54113", "org": "Fastly, Inc.", "city": "Mountain View", "country": "US" }, "ssl": { "issuer": "Google Trust Services / WR3", "subject": "impressiona3d.com" }, "dns": { "A": [ "199.36.158.100" ], "MX": [ "{\"exchange\": \"alt1.aspmx.l.google.com\", \"priority\": 5}", "{\"exchange\": \"alt2.aspmx.l.google.com\", \"priority\": 5}", "{\"exchange\": \"aspmx.l.google.com\", \"priority\": 1}", "{\"exchange\": \"alt3.aspmx.l.google.com\", \"priority\": 10}", "{\"exchange\": \"alt4.aspmx.l.google.com\", \"priority\": 10}" ], "NS": [ "ns17.domaincontrol.com", "ns18.domaincontrol.com" ], "SOA": "{\"nsname\": \"ns17.domaincontrol.com\", \"hostmaster\": \"dns.jomax.net\", \"serial\": 2025020400, \"refresh\": 28800, \"retry\": 7200, \"expire\": 604800, \"minttl\": 600}", "TXT": [ "google-site-verification=zJNhRVFaFNmxFhj3qNO4-VFAOX3RvXfjxQNDBFwAn_0", "firebase=clozer-bc97fb95", "v=spf1 include:_spf.google.com ~all", "google-site-verification=4PNq07DAWnPw9CNF3iW37tvYeCPOQaIy5Bx8QYa2PaM" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31556926", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31556926", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "199.36.158.100", "family": 4 }, "redirects": { "chain": [ "https://clozer.io" ] }, "whois": { "registrar": "GoDaddy.com, LLC", "created": "2021-11-14T09:35:32Z", "updated": "2026-08-12T05:04:35Z", "expires": "2026-11-14T09:35:32Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientRenewProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp" ], "nameservers": [ "ns17.domaincontrol.com", "ns18.domaincontrol.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31556926" } } } } ```