# PhishDestroy domain threat record: domesmarketing.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/domesmarketing.com/ Machine-readable companion: https://phishdestroy.io/domain/domesmarketing.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 11:01:13 UTC - Last availability or vendor check: 2026-10-25 23:01:01 UTC - Stored record updated: 2026-10-26 10:39:08 UTC - VirusTotal detections in the stored snapshot: 6/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 84.32.84.4 - Registrar in stored WHOIS data: HOSTINGER operations, UAB - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2019-03-21 08:31:36 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a172b7-4ac4-777a-9728-b7126169cc24/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/domesmarketing.com - Certificate Transparency search: https://crt.sh/?q=%25.domesmarketing.com - Web Archive lookup: https://web.archive.org/web/*/https://domesmarketing.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed domesmarketing.com on its internal blocklist on 2026-10-25. The recorded page title and meta description described the site as an OEM supplement, skincare and custom packaging factory in Malaysia. An HTTP 200 response and a valid Let's Encrypt certificate were recorded on the same date, but no specific fraudulent behavior was observed. How the scam works The classification is based on generic suspicious indicators rather than a confirmed phishing or malware campaign. Domains flagged in this way are often used to lure visitors into entering credentials, personal data, or downloading malicious files under the guise of a legitimate business. Because no concrete scheme was observed on the page, the risk remains potential rather than proven. Evidence VirusTotal scanned the domain on 2026-10-25 and reported six detections out of 92 engines, with vendors labeling it malicious or phishing (CRDF, VIPRE, Webroot, Seclookup, Gridinsoft, alphaMountain.ai). Google Safe Browsing checked the same day and did not flag the site. OTX listed seven pulses referencing the domain as of 2026-10-25. URLScan recorded a malicious engine score of 85, though its overall verdict was non‑malicious, and PhishDestroy’s internal list marks the domain as blocked. Infrastructure The domain was registered on 2019-03-21 through HOSTINGER operations, UAB, and carries a Let's Encrypt TLS certificate valid from 2026-09-11 to 2026-12-10. Recorded IP addresses include 92.113.16.238 and additional hosts observed by Cloudflare Radar. DNS records show standard A, AAAA and MX entries, with no DNSSEC signatures. These details describe the hosting environment without indicating malicious intent. What to do Treat the site as potentially unsafe; avoid entering login credentials, personal information, or downloading files from it. If any credentials were submitted, change the associated passwords and monitor accounts for unusual activity. Defenders should block domesmarketing.com at the network perimeter and review logs for connections to the recorded IPs, noting the domain’s presence on PhishDestroy’s blocklist. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a172b7-4ac4-777a-9728-b7126169cc24/ Cloudflare Radar report: https://radar.cloudflare.com/scan/761e6514-5f33-4b5d-afcc-1e17587fd4f3 URLQuery report: https://urlquery.net/report/1c7dc0d4-bc91-4664-bc30-43c4da9cfabc Stored capture screenshot: https://i.ibb.co/Lz82PzZj/1a0d52cdefe6.png Cloudflare Radar screenshot (2026-10-25T11:34:06Z): https://screenshots.phishdestroy.io/cf/761e6514-5f33-4b5d-afcc-1e17587fd4f3.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/1c7dc0d4-bc91-4664-bc30-43c4da9cfabc.png URLScan screenshot (2026-10-25T10:59:27Z): https://screenshots.phishdestroy.io/us/01a172b6-a932-71ca-9133-85a1d80e29ee.png URLScan capture report: https://urlscan.io/result/01a172b6-a932-71ca-9133-85a1d80e29ee/ VirusTotal report: https://www.virustotal.com/gui/domain/domesmarketing.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=domesmarketing.com Archived copy: https://web.archive.org/web/20261025110343/https://domesmarketing.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 12:04:38 UTC ## Stored page captures - Primary capture: https://i.ibb.co/Lz82PzZj/1a0d52cdefe6.png Captured: 2026-10-25 11:01:13 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a172b7-4ac4-777a-9728-b7126169cc24.png Captured: 2026-10-25 11:01:13 UTC Source report: https://urlscan.io/result/01a172b7-4ac4-777a-9728-b7126169cc24/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/761e6514-5f33-4b5d-afcc-1e17587fd4f3.png Captured: 2026-10-25 11:34:06 UTC Source report: https://radar.cloudflare.com/scan/761e6514-5f33-4b5d-afcc-1e17587fd4f3 SHA-256: d85f60a7955b749d3fd6ab3578cb85f8d5b43d754627d177056ae11905c0ac39 - URLQuery: https://screenshots.phishdestroy.io/uq/1c7dc0d4-bc91-4664-bc30-43c4da9cfabc.png Source report: https://urlquery.net/report/1c7dc0d4-bc91-4664-bc30-43c4da9cfabc SHA-256: 07ee4450aec25d2f9614a22e29722bac98653d3949b2e0ae0eb786f41b0fabcf - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a172b6-a932-71ca-9133-85a1d80e29ee.png Captured: 2026-10-25 10:59:27 UTC Source report: https://urlscan.io/result/01a172b6-a932-71ca-9133-85a1d80e29ee/ SHA-256: 949d3e164648df6998b55d8ef56ade4d9b87cda70d08a25fce72099d6e4816f7 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T11:35:24Z", "uuid": "01a172b7-4ac4-777a-9728-b7126169cc24", "scanned_at": "2026-10-25T10:59:44Z", "final_url": "https://domesmarketing.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://domesmarketing.com/", "from": "http://domesmarketing.com/", "status": 307 } ], "ip": "92.113.16.238", "domains": [ "fonts.googleapis.com", "fonts.gstatic.com" ], "ips": [ "142.251.13.94", "142.250.154.95", "92.113.16.238" ], "asns": [ "15169", "47583" ], "countries": [ "US", "DE" ], "link_domains": [ "wa.link", "www.facebook.com", "www.tiktok.com" ], "social": [ "https://www.facebook.com/domesmarketingsdnbhd", "https://www.tiktok.com/@domesmarketing" ], "doc_hash": "498603f7048043162e61e13a8bc217b3323ac247c84f4e0da931231470527073", "script_hashes": [ "e3b3ade5a1ad02e7aaf53e790477372132e08ded698e7184d727b4d20bbb6b1e", "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed", "c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474", "699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76", "1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813", "f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552", "2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5", "92d0eac2c2ec86d076f90fa20c536d1623eb3c0bd5541ca7e164eb15cd73969a" ], "globals": [ "jQuery", "webpackChunkelementorFrontend", "elementorModules", "elementorFrontendConfig", "elementorFrontend", "Swiper", "webpackChunkelementor_pro", "wp", "ElementorProFrontendConfig", "elementorProFrontend", "_", "_wpUtilSettings", "wpformsElementorVars", "WPFormsElementorFrontend", "_wpemojiSettings", "twentytwenty", "twentytwentyDomReady", "twentytwentyToggleAttribute", "twentytwentyMenuToggle", "twentytwentyFindParents", "twemoji", "lazyloadRunObserver", "events" ], "storage_keys": [ "wpEmojiSettingsSupports" ], "tls": { "san": [ "domesmarketing.com", "www.domesmarketing.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "domesmarketing.com", "protocol": "TLS 1.3", "valid_to": "2026-12-10T07:54:09Z", "valid_from": "2026-09-11T07:54:10Z" }, "domain_age_days": 1643, "apex_age_days": 1643, "tls_age_days": 44, "tls_valid_days": 89, "requests": 76, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 85, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "hcdn", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.0.30", "content-security-policy": "upgrade-insecure-requests" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T11:35:30Z", "uuid": "761e6514-5f33-4b5d-afcc-1e17587fd4f3", "scanned_at": "2026-10-25T11:34:06Z", "final_url": "https://domesmarketing.com/", "status": 200, "history": [ { "url": "https://domesmarketing.com/", "status": 200 } ], "dom_hash": "610c519cb9766fb08173600861af724e8c3faf6e82a903c45ae5d477e71b72cc", "doc_hash": "f098d15f44b35d96f7240f4a47e37d1c5b66cb6ab63fd6f069c48f0174c3e9f5", "domain_risks": [ "Business", "Business & Economy" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "domesmarketing.com", "type": "A", "value": "77.37.53.13" }, { "name": "domesmarketing.com", "type": "A", "value": "93.127.179.199" }, { "name": "domesmarketing.com", "type": "AAAA", "value": "2a02:4780:24:935f:1020:fb17:a4e:2ef5" }, { "name": "domesmarketing.com", "type": "AAAA", "value": "2a02:4780:23:655d:38d2:e563:8936:aa1a" } ], "dnssec_valid": false, "ip": "77.37.53.13", "whois": { "registrar": "HOSTINGER operations, UAB", "created": "2019-03-21T09:31:36Z", "updated": "2025-02-22T09:34:05Z", "expires": "2028-03-21T09:31:36Z", "nameservers": [ "ns1.dns-parking.com", "ns2.dns-parking.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T12:03:26Z", "analysis_at": "2026-10-25T11:26:24Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 5, "suspicious": 1, "undetected": 34 }, "detections": { "CRDF": "malicious", "VIPRE": "phishing", "Webroot": "malicious", "Seclookup": "malicious", "Gridinsoft": "phishing", "alphaMountain.ai": "suspicious" }, "reputation": 0, "popularity": { "Alexa": 180851, "Statvoo": 180851 }, "registrar": "HOSTINGER operations, UAB", "created": "2019-03-21T09:31:36Z", "expires": "2028-03-21T09:31:36Z", "updated": "2025-02-22T09:34:05Z", "first_seen": "2023-10-13T16:34:54Z", "dns": [ { "ttl": 60, "type": "AAAA", "value": "2a02:4780:4b:9e7:6fb8:1a53:2174:f456" }, { "ttl": 60, "type": "A", "value": "147.79.72.189" }, { "ttl": 3600, "type": "MX", "value": "alt2.aspmx.l.google.com", "priority": 5 }, { "ttl": 21600, "type": "NS", "value": "ns2.dns-parking.com" }, { "ttl": 3600, "type": "MX", "value": "alt4.aspmx.l.google.com", "priority": 10 }, { "ttl": 3600, "type": "MX", "value": "alt1.aspmx.l.google.com", "priority": 5 }, { "ttl": 21600, "type": "NS", "value": "ns1.dns-parking.com" }, { "ttl": 3600, "type": "MX", "value": "alt3.aspmx.l.google.com", "priority": 10 }, { "ttl": 3600, "type": "MX", "value": "aspmx.l.google.com", "priority": 1 }, { "ttl": 14400, "type": "TXT", "value": "google-site-verification=VNcVFHH3uUq833mkhvD80ybZMDKf6TGJbbZC2HCJZ6Q" }, { "ttl": 60, "type": "AAAA", "value": "2a02:4780:4d:a733:5e8c:fc2d:64b2:2071" }, { "ttl": 3600, "type": "SOA", "rname": "dns.hostinger.com", "value": "ns1.dns-parking.com" }, { "ttl": 60, "type": "A", "value": "147.79.79.74" } ], "dns_at": "2026-10-25T11:31:41Z", "jarm": "27d40d40d00040d00042d43d000000e1ea2a807a629b496b664cf07ad7c08d", "cert": { "san": [ "domesmarketing.com", "www.domesmarketing.com" ], "issuer": "Let's Encrypt / YE2", "serial": "6cc3f288e94ec1179ac217681556bd8cfa9", "sha256": "173534f0184504f797e18eedee5eed07cd85e5e21d749a24fd7d1b4376a54759", "subject": "domesmarketing.com", "valid_to": "2026-12-10T07:54:09Z", "valid_from": "2026-09-11T07:54:10Z" }, "whois": { "registrar": "HOSTINGER operations, UAB", "registrar_iana_id": "1636", "registrar_url": "http://www.hostinger.com", "created": "2019-03-21T09:31:36Z", "updated": "2025-02-22T09:34:05Z", "expires": "2028-03-21T09:31:36Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dns-parking.com", "ns2.dns-parking.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "registration": "2019-03-21T09:31:36Z", "registrar expiration": "2028-03-21T09:31:36Z", "last update of RDAP database": "2025-10-21T07:59:36Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T11:36:51Z", "mail_config": { "mx": [ "alt1.aspmx.l.google.com", "alt2.aspmx.l.google.com", "aspmx.l.google.com", "alt4.aspmx.l.google.com", "alt3.aspmx.l.google.com" ], "dkim": [ "hostingermail-a" ], "dkim_bits": 2048, "providers": [ "Google Workspace" ], "spf_lookups": 0 }, "caa_records": { "domain": "domesmarketing.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-25T11:03:43Z", "first": "2021-11-30T07:08:13Z", "changes": 29, "days_archived": 32, "scans_per_day": 0.02, "avg_page_bytes": 7439 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://domesmarketing.com/sitemap_index.xml" ] }, "sitemap": { "present": true, "url_count": 27 }, "social_tags": { "ogUrl": "https://domesmarketing.com/", "title": "OEM Supplement, Skincare & Custom Packaging Factory in Malaysia", "ogType": "website", "robots": "index, follow, max-snippet:-1, max-video-preview:-1, max-image-preview:large", "ogImage": "https://domesmarketing.com/wp-content/uploads/2022/04/Untitled-1-copy.jpg", "ogTitle": "OEM Supplement, Skincare & Custom Packaging Factory in Malaysia", "generator": "WordPress 7.0.7", "ogSiteName": "Domes Marketing", "themeColor": "#FFFFFF", "description": "Domes Marketing is an OEM Supplement Malaysia factory providing supplement formulation, NPRA registration support, GMP manufacturing, HALAL-certified production, OEM skincare, and custom packaging services.", "twitterCard": "summary_large_image", "canonicalUrl": "https://domesmarketing.com/", "ogDescription": "Domes Marketing is an OEM Supplement Malaysia factory providing supplement formulation, NPRA registration support, GMP manufacturing, HALAL-certified production, OEM skincare, and custom packaging services." }, "trackers": { "requests": 69, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "upgrade_insecure": true, "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 341, "tls": 97, "wait": 41, "connect": 19, "download": 1 }, "response_ms": 499 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 87827, "co2_grams": 0.0032, "cleaner_than": 25 }, "dns_server": { "ns": [ { "ip": "162.159.24.201", "host": "ns1.dns-parking.com" }, { "ip": "162.159.25.42", "host": "ns2.dns-parking.com" } ], "zone": "domesmarketing.com" }, "location": { "ip": "2a02:4780:44:ba4a:1b32:b20f:63c0:81e1", "asn": "47583", "org": "Hostinger International Limited", "city": "Frankfurt am Main", "country": "DE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "domesmarketing.com" }, "dns": { "A": [ "92.113.23.197", "92.113.16.137" ], "MX": [ "{\"exchange\": \"alt1.aspmx.l.google.com\", \"priority\": 5}", "{\"exchange\": \"alt4.aspmx.l.google.com\", \"priority\": 10}", "{\"exchange\": \"alt2.aspmx.l.google.com\", \"priority\": 5}", "{\"exchange\": \"alt3.aspmx.l.google.com\", \"priority\": 10}", "{\"exchange\": \"aspmx.l.google.com\", \"priority\": 1}" ], "NS": [ "ns1.dns-parking.com", "ns2.dns-parking.com" ], "SOA": "{\"nsname\": \"ns1.dns-parking.com\", \"hostmaster\": \"dns.hostinger.com\", \"serial\": 2026102201, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 3600}", "TXT": [ "google-site-verification=VNcVFHH3uUq833mkhvD80ybZMDKf6TGJbbZC2HCJZ6Q" ], "AAAA": [ "2a02:4780:44:ba4a:1b32:b20f:63c0:81e1", "2a02:4780:42:c79e:e5a5:63c:b1d0:8b7e" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": "upgrade-insecure-requests", "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2a02:4780:44:ba4a:1b32:b20f:63c0:81e1", "family": 6 }, "redirects": { "chain": [ "https://domesmarketing.com" ] }, "linked_pages": { "external": [ "https://wa.link/hykf7v", "https://www.facebook.com/domesmarketingsdnbhd", "https://www.tiktok.com/@domesmarketing" ], "external_count": 3, "internal_count": 10 }, "whois": { "registrar": "HOSTINGER operations, UAB", "created": "2019-03-21T09:31:36Z", "updated": "2025-02-22T09:34:05Z", "expires": "2028-03-21T09:31:36Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dns-parking.com", "ns2.dns-parking.com" ] }, "headers": { "headers": { "server": "hcdn", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.0.30", "content-security-policy": "upgrade-insecure-requests" } } } } ```