Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 20. Exercise extreme caution — do not enter credentials or personal information.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is abuse@ifastnet.com. The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
1 month
Reports sent
1
Latest case ID
PD-20260630-634292
Current status
Observed active at latest stored check
Domain security and threat intelligence

daveridasx[.]fwh[.]is

Phishing and security check for daveridasx.fwh.is

“Domain Suspended”

Threat verdict Critical 100/100 evidence score
Availability Cloaked · reachable Reachability observed through cloaking checks
Risk signals
VirusTotal detections: 20/91 Spamhaus DBL: DBL_PHISH Brand impersonation: Aave Last known active
20/91 VT URLQuery: 3 detections Jun 30, 2026 Aave Brand Impersonation 1 Report Sent Cloaking GB GB
Evidence Summary
CRITICAL
Ref
69AF4AAC
Score
100/100

The domain daveridasx.fwh.is has been identified as a significant threat through its involvement in generic phishing schemes. This domain poses a high risk to users by attempting to deceive them into providing sensitive information through fraudulent means. The malicious intent is underscored by the active status of the domain, which indicates ongoing phishing operations targeting unsuspecting victims.

Further investigation reveals pertinent security intelligence regarding daveridasx.fwh.is. The domain is registered through FreeWebHostingArea, with a creation date of November 01, 2024. It is currently associated with the IP address 185.27.134.179, and the domain has been flagged on one security blocklist. Analysis conducted on VirusTotal shows alarming results, with 21 out of 95 security vendors identifying this domain as malicious. The combination of these indicators emphasizes the urgent nature of the threat posed by this domain to internet users.

Users who may have visited daveridasx.fwh.is should take immediate precautions to secure their personal information. It is recommended to change any passwords or sensitive information that may have been entered during their visit. Additionally, users should monitor their financial accounts for any unauthorized transactions and consider enhancing their cybersecurity measures, such as enabling two-factor authentication where possible. Awareness and prompt action can help mitigate the risks associated with this ongoing phishing campaign.

VirusTotal
VirusTotal
20 det.
URLQuery
URLQuery
3 det.
URLScan
URLScan
TLS Certificate
Expired or unverified -21d
Age
1.8 yr
Observed status
Cloaked · reachable
PhishDestroy
DestroyList
Listed
Reports Sent
1
Data coverage VirusTotal 20 / 91 URLQuery 3 det. PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks not checked TLS Expired or unverified WHOIS 22 mo old Screenshot 2 captures · 2 sources Redirect chain not probed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
11/12
Sent Report Recorded
Stored sent-report record for registrar FreeWebHostingArea, hosting provider, 1 abuse contact
abuse@ifastnet.com
Jun 30, 2026

Public Blocklist Status

Stored Capture

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN LiteSpeed · AS12488 KRYSTAL Krystal Hosting Ltd, GB
IP Reputation abuse score 0/100 0 reports checked Jul 31, 2026
Registrar (base domain) FreeWebHostingArea MY(MY)
IP Address 77.72.1.44 GB
GeoGB Newcastle upon Tyne, GB
NetworkAS12488 · AS34119 Wildcard UK Limited
Registration (base domain)fwh.is · Created Nov 1, 2024 Expires Nov 1, 2026
Cloaking Cloaking Detected Redirect split · score 3/6
timeout: raw=timeout; http=0; via=http_proxy; error=HTTPConnectionPool(host='136.0.108.186', port=5862): Read timed out. (read timeout=7)
checked Aug 8, 2026
Elapsed Since First Report 4h
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Cloaked · reachable.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedJun 30, 2026
DOM Analysisanalyzed Jun 30, 2026score 100/100
IoC Extractionscanned Jul 29, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://daveridasx.fwh.is/
Nameserversns1.byet.orgns2.byet.orgns3.byet.orgns4.byet.org
TLS Fingerprint
TLS Observationvalid from Apr 19, 2026scanned Jun 30, 2026
TLS SAN Domainsfwh.is
Case ID
Page Title
Domain Suspended
TLS Certificate
Expired or unverified · Issued by ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2
Technologies · 6 identified
PHP
Programming languages

PHP is a general-purpose scripting language used for web development.

php.net 100% confidence
Tailwind CSS
UI frameworks

Tailwind is a utility-first CSS framework.

tailwindcss.com 100% confidence
LiteSpeed
Web servers

LiteSpeed is a high-scalability web server.

litespeedtech.com 100% confidence
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com 100% confidence
cdnjs
CDN

cdnjs is a free distributed JS library delivery service.

cdnjs.com 100% confidence
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

20 / 91 security vendors flagged this domain
View on VT
Last analyzed Previous stored snapshot: 20 detections
BitDefender
Certego
Chong Lua Dao
Cluster25
CRDF
CyRadar
Ermes
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
LevelBlue
Lionic
MalwareURL
PrecisionSec
Seclookup
Sophos
URLQuery
VIPRE
Webroot

Evidence & External Reports

Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260630-634292 Recipient: abuse@ifastnet.com
Page title stored with report: Domain Suspended
URLScan evidence VirusTotal evidence URLQuery evidence Screenshot 570.1 KB

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/daveridasx.fwh.is"
  title="PhishDestroy threat report for daveridasx.fwh.is"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>