# PhishDestroy domain threat record: dnsayurveda.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dnsayurveda.com/
Machine-readable companion: https://phishdestroy.io/domain/dnsayurveda.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 08:49:48 UTC
- Last availability or vendor check: 2026-10-28 11:01:57 UTC
- Stored record updated: 2026-10-28 11:22:27 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 209.151.149.160
- Registrar in stored WHOIS data: BigRock Solutions Ltd.
- Registrar country in stored WHOIS data: IN
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2018-02-20 17:22:47 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1723e-c311-73bc-b1bc-7c21f78e23b4/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dnsayurveda.com
- Certificate Transparency search: https://crt.sh/?q=%25.dnsayurveda.com
- Web Archive lookup: https://web.archive.org/web/*/https://dnsayurveda.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot from 2026-10-25 showed a dark landing page headed "Because health is a human right." presenting a community-first non-profit taking shape, with tags reading Non-profit, In development and Health, a list of what support makes possible, and a Partner with us button. The page stated that a mission-focused initiative was under construction and invited visitors to contact it to support or participate. PhishDestroy listed the domain because VirusTotal flagged it as malicious. It was first seen by PhishDestroy on 2026-10-25.

How the scam works
The Partner with us button and the invitation to contact the operator opened a channel for a donation or partnership conversation with an unverified party. Warm charitable language about free health camps, maternal and child health programmes and counselling support was framed to build trust quickly. As a category risk, this approach can lead visitors to share personal details or transfer money before the initiative's legitimacy is established.

Evidence
The captured screenshot showed the Partner with us call to action, promises of free health camps and mental health support, and a panel stating that the space was being set up. urlscan's engine verdict was malicious with an ML score of 2 on 2026-10-25 while its overall verdict was not malicious, the funnel being a single 307 redirect from HTTP to HTTPS. Cloudflare Radar returned a malicious malware verdict on 2026-10-25; OTX recorded 5 pulses on 2026-10-25; Spamhaus DBL and Google Safe Browsing showed no flagging; external blocklists showed 0 entries while PhishDestroy's internal blocklist flagged it on 2026-10-26; page inspection recorded Google Fonts and Google Static trackers. VirusTotal flagged the domain as malicious, with vendors including ESET, Sophos and Forcepoint ThreatSeeker labelling it phishing.

Infrastructure
The domain was registered through BigRock Solutions Ltd. with hosting recorded on the UpCloud USA network, captured on 2026-10-25. CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, COEP and CORP are all absent; TLS 1.3 with AES-128-GCM, forward secrecy and ALPN h2 is present; SPF, DKIM and DMARC are configured; CAA records are present; DNSSEC is unsigned.

What to do
If you submitted contact or donor details through this domain, stop any further payment or correspondence, review bank and card statements for unexplained charges, and report them to your provider promptly. Treat any follow-up solicitation as untrusted and do not send money or personal documents. Defenders should block dnsayurveda.com at DNS and proxy layers and watch for matching lures.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1723e-c311-73bc-b1bc-7c21f78e23b4/
Cloudflare Radar report: https://radar.cloudflare.com/scan/7378a0f7-ff38-4942-aaf5-6f414497e79b
URLQuery report: https://urlquery.net/report/3bc69f5b-2256-48e6-8375-6e7d4a752d57
Stored capture screenshot: https://i.ibb.co/5x1pTJ15/e1f8992bda07.png
Cloudflare Radar screenshot (2026-10-25T09:29:03Z): https://screenshots.phishdestroy.io/cf/7378a0f7-ff38-4942-aaf5-6f414497e79b.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/3bc69f5b-2256-48e6-8375-6e7d4a752d57.png
URLScan screenshot (2026-10-25T08:46:58Z): https://screenshots.phishdestroy.io/us/01a1723d-c025-7438-b830-5d7b5da13cb8.png
URLScan capture report: https://urlscan.io/result/01a1723d-c025-7438-b830-5d7b5da13cb8/
VirusTotal report: https://www.virustotal.com/gui/domain/dnsayurveda.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dnsayurveda.com
Archived copy: https://web.archive.org/web/20261025085056/https://dnsayurveda.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 21:16:35 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/5x1pTJ15/e1f8992bda07.png
  Captured: 2026-10-25 08:49:48 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a1723e-c311-73bc-b1bc-7c21f78e23b4.png
  Captured: 2026-10-25 08:49:48 UTC
  Source report: https://urlscan.io/result/01a1723e-c311-73bc-b1bc-7c21f78e23b4/
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1723d-c025-7438-b830-5d7b5da13cb8.png
  Captured: 2026-10-25 08:46:58 UTC
  Source report: https://urlscan.io/result/01a1723d-c025-7438-b830-5d7b5da13cb8/
  SHA-256: 84fde335e0922dd8eaca1e1afcdb644b2ab9453bc46eb13267cfd1f363c550d0
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7378a0f7-ff38-4942-aaf5-6f414497e79b.png
  Captured: 2026-10-25 09:29:03 UTC
  Source report: https://radar.cloudflare.com/scan/7378a0f7-ff38-4942-aaf5-6f414497e79b
  SHA-256: fd3ce3e611de22f9cbf7fd5ab359e701d0d558616da8bcf08ee22f602f61ee7d
- URLQuery: https://screenshots.phishdestroy.io/uq/3bc69f5b-2256-48e6-8375-6e7d4a752d57.png
  Source report: https://urlquery.net/report/3bc69f5b-2256-48e6-8375-6e7d4a752d57
  SHA-256: d0b9b838b7ded3cc6e165a18d336b41d32f878675b2764b450100379c12bf59a

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T09:16:33Z",
        "uuid": "01a1723e-c311-73bc-b1bc-7c21f78e23b4",
        "scanned_at": "2026-10-25T08:48:04Z",
        "final_url": "https://dnsayurveda.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dnsayurveda.com/",
                "from": "http://dnsayurveda.com/",
                "status": 307
            }
        ],
        "ip": "209.151.149.160",
        "ptr": "209-151-149-160.us-nyc1.upcloud.host",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.14.94",
            "142.251.127.95",
            "209.151.149.160"
        ],
        "asns": [
            "15169",
            "25697"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "7efaa00ed7b867c39102eb9db1069398531a03c5305db04304b5b8caf0107a88",
        "tls": {
            "san": [
                "dnsayurveda.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "dnsayurveda.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-07T23:59:59Z",
            "valid_from": "2026-10-09T00:00:00Z"
        },
        "domain_age_days": 3158,
        "apex_age_days": 3158,
        "tls_age_days": 16,
        "tls_valid_days": 90,
        "requests": 10,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 2,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T09:31:53Z",
        "uuid": "7378a0f7-ff38-4942-aaf5-6f414497e79b",
        "scanned_at": "2026-10-25T09:29:03Z",
        "final_url": "https://dnsayurveda.com/",
        "status": 200,
        "history": [
            {
                "url": "https://dnsayurveda.com/",
                "status": 200
            }
        ],
        "dom_hash": "d253745f968e4c060a9c74fe8a8bf677a41745b4417f84e80efe03f3d0cdbfc0",
        "doc_hash": "26e60098f4bb71a3ef75bc40564818f6e4f4574ff913857a312b34600ae565bd",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "dnsayurveda.com",
                "type": "A",
                "value": "209.151.149.160"
            }
        ],
        "dnssec_valid": false,
        "ip": "209.151.149.160",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "BigRock Solutions Ltd",
            "created": "2018-02-20T18:22:47Z",
            "updated": "2026-03-27T10:08:27Z",
            "expires": "2027-02-20T18:22:47Z",
            "nameservers": [
                "ns1.mysecurecloudhost.com",
                "ns2.mysecurecloudhost.com",
                "ns3.mysecurecloudhost.com",
                "ns4.mysecurecloudhost.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T15:11:32Z",
        "analysis_at": "2026-10-20T14:35:38Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 13,
            "suspicious": 1,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "ESET": "phishing",
            "VIPRE": "malware",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "malware",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "malicious",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "popularity": {
            "Alexa": 135296,
            "Statvoo": 135296
        },
        "registrar": "BigRock Solutions Ltd",
        "created": "2018-02-20T18:22:47Z",
        "expires": "2027-02-20T18:22:47Z",
        "updated": "2026-03-27T10:08:28Z",
        "first_seen": "2023-10-08T09:09:55Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns3.121webhosting.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns4.121webhosting.com"
            },
            {
                "ttl": 7200,
                "type": "A",
                "value": "209.151.149.160"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.121webhosting.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.121webhosting.com"
            },
            {
                "ttl": 7196,
                "type": "MX",
                "value": "dnsayurveda.com",
                "priority": 0
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "servers.mysecurecloudhost.com",
                "value": "ns1.121webhosting.com"
            },
            {
                "ttl": 7200,
                "type": "TXT",
                "value": "v=spf1 +a +mx +ip4:69.72.248.157 include:spf.mysecurecloudhost.com ~all"
            }
        ],
        "dns_at": "2026-10-20T14:40:01Z",
        "jarm": "40d40d40d00000000043d40d40d43da936ab0256fab25eca082941d14e3ece",
        "cert": {
            "san": [
                "dnsayurveda.com"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "bea66f060b0b9a3bb6de91f8af8136eb",
            "sha256": "b24d483c4af74186e6985c4c10570dac2f49b8058e9f5de32bf25469529b763a",
            "subject": "dnsayurveda.com",
            "valid_to": "2027-01-07T23:59:59Z",
            "valid_from": "2026-10-09T00:00:00Z"
        },
        "whois": {
            "registrar": "BigRock Solutions Ltd",
            "registrar_iana_id": "1495",
            "registrar_url": "http://www.bigrock.com",
            "created": "2018-02-20T18:22:47Z",
            "updated": "2026-03-27T10:08:27Z",
            "expires": "2027-02-20T18:22:47Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.mysecurecloudhost.com",
                "ns2.mysecurecloudhost.com",
                "ns3.mysecurecloudhost.com",
                "ns4.mysecurecloudhost.com"
            ],
            "dnssec": "Unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-03-27T10:08:28Z",
                "registration": "2018-02-20T18:22:47Z",
                "registrar expiration": "2027-02-20T18:22:47Z",
                "last update of RDAP database": "2026-10-20T12:57:52Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T09:32:07Z",
        "mail_config": {
            "mx": [
                "dnsayurveda.com"
            ],
            "spf": "v=spf1 +a +mx +ip4:69.72.248.157 include:spf.mysecurecloudhost.com ~all",
            "dkim": [
                "default"
            ],
            "dmarc": true,
            "dkim_bits": 2048,
            "spf_lookups": 5
        },
        "caa_records": {
            "domain": "dnsayurveda.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T08:50:56Z",
            "first": "2018-06-02T17:57:30Z",
            "changes": 58,
            "days_archived": 70,
            "scans_per_day": 0.02,
            "avg_page_bytes": 44269
        },
        "social_tags": {
            "title": "dnsayurveda.com – Non-profit organisation"
        },
        "trackers": {
            "requests": 5,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 33,
                "tls": 97,
                "wait": 128,
                "connect": 101,
                "download": 78
            },
            "response_ms": 437
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 14950,
            "co2_grams": 0.0005,
            "cleaner_than": 63
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "13.248.158.180",
                    "host": "ns1.121webhosting.com"
                },
                {
                    "ip": "76.223.26.245",
                    "host": "ns3.121webhosting.com"
                },
                {
                    "ip": "99.83.147.209",
                    "host": "ns4.121webhosting.com"
                },
                {
                    "ip": "75.2.118.134",
                    "host": "ns2.121webhosting.com"
                }
            ],
            "zone": "dnsayurveda.com"
        },
        "location": {
            "ip": "209.151.149.160",
            "asn": "25697",
            "org": "UpCloud USA Inc",
            "city": "Secaucus",
            "country": "US"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "dnsayurveda.com"
        },
        "dns": {
            "A": [
                "209.151.149.160"
            ],
            "MX": [
                "{\"exchange\": \"dnsayurveda.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns4.121webhosting.com",
                "ns1.121webhosting.com",
                "ns3.121webhosting.com",
                "ns2.121webhosting.com"
            ],
            "SOA": "{\"nsname\": \"ns1.121webhosting.com\", \"hostmaster\": \"servers.mysecurecloudhost.com\", \"serial\": 2026080606, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
            "TXT": [
                "v=spf1 +a +mx +ip4:69.72.248.157 include:spf.mysecurecloudhost.com ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "209.151.149.160",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://dnsayurveda.com"
            ]
        },
        "whois": {
            "registrar": "BigRock Solutions Ltd",
            "created": "2018-02-20T18:22:47Z",
            "updated": "2026-03-27T10:08:27Z",
            "expires": "2027-02-20T18:22:47Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.mysecurecloudhost.com",
                "ns2.mysecurecloudhost.com",
                "ns3.mysecurecloudhost.com",
                "ns4.mysecurecloudhost.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```