# PhishDestroy domain threat record: duplicate-disabled-236398.invalid Content language: English Canonical HTML report: https://phishdestroy.io/domain/duplicate-disabled-236398.invalid/ Machine-readable companion: https://phishdestroy.io/domain/duplicate-disabled-236398.invalid/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-06-13 09:46:29 UTC - Last availability or vendor check: 2026-10-21 01:16:30 UTC - Stored record updated: 2026-10-22 14:22:00 UTC - VirusTotal detections in the stored snapshot: 4/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.128.83 - Registrar in stored WHOIS data: Communigal Communication Ltd ## Evidence links - URLScan report: https://urlscan.io/result/01a02e3b-bbf0-7149-b49a-b02510152e8b/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/duplicate-disabled-236398.invalid - Certificate Transparency search: https://crt.sh/?q=%25.duplicate-disabled-236398.invalid - Web Archive lookup: https://web.archive.org/web/*/https://duplicate-disabled-236398.invalid/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis {"en": "The domain www.reutheshel.org.il was registered on June 11, 2026 through Communigal Communication Ltd. It is classified as a generic phishing site and assigned a high risk level. The domain is currently active and resolves to the IPv4 address 172.67.128.83, which belongs to Cloudflare, Inc. in Canada. Infrastructure analysis shows the domain is served by Cloudflare’s DNS with nameservers jim.ns.cloudflare.com and nina.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 hierarchy, indicating normal TLS termination. An HTTP request to the root URL returns a 403 status code, suggesting that content is deliberately restricted or hidden pending malicious payload delivery. Threat intelligence sources corroborate the phishing profile. The domain appears on one public security blocklist and is actively blocked by the PhishDestroy feed. AlienVault OTX lists the domain in four separate pulses, providing additional community context. VirusTotal scans have flagged the domain by 4 of 95 security vendors, reinforcing the suspicion of malicious intent. Defenders should add www.reutheshel.org.il to network deny lists and DNS sinkhole configurations to prevent resolution. Continuous monitoring of the associated IP address and any newly observed subdomains is advised, as Cloudflare infrastructure can be leveraged for rapid re‑hosting. Incident response teams should also review recent phishing campaigns targeting the same brand vectors to assess potential credential harvesting.", "ar": "Hello! How can I help you today?", "ko": "Hello! How can I help you today?"} Analysis generated: 2026-07-12 15:51:02 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a02e3b-bbf0-7149-b49a-b02510152e8b.png Captured: 2026-06-13 09:46:29 UTC ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T00:17:02Z", "uuid": "01a02e3b-bbf0-7149-b49a-b02510152e8b", "scanned_at": "2026-08-23T10:47:51Z", "final_url": "https://www.reutheshel.org.il/", "status": 403, "redirects": [ { "to": "https://www.reutheshel.org.il/", "from": "https://www.reutheshel.org.il/", "status": 307 } ], "ip": "172.67.128.83", "domains": [ "challenges.cloudflare.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "172.67.128.83" ], "asns": [ "13335" ], "link_domains": [ "www.cloudflare.com" ], "doc_hash": "494167b5b11bfea1ebcbf1d461d66a4e3b5b8880ea872482809d02171b58593f", "script_hashes": [ "ca1765a74a977d48921b1961791ede68ae38a390d11ce2f66fb337d35df1a58e", "e2cb4cf563c987ab947bdef05e29e6aff3bd9c5322ec537c7b8dde2b2b2bae9b" ], "globals": [ "_cf_chl_opt", "ECAU8", "GNHLX2", "qUbHu8", "xBEPx7", "ykmX3", "PoSLZ4", "BppE3", "rCUjg1", "wdclO4", "MoAhr7", "GLLj2", "SRPD9", "MAEU9", "runProgram", "mUMum6", "gUsZ0", "pwuPn1", "UlwL3", "UXeS6", "WfQnx8", "oNxb8", "gZAJ3", "gsnqe5", "sYTa8", "bGgjP8", "GtJT5", "UgOgQ2", "QEGX6", "nCzx7", "angular", "XNAR2", "jPUKG9", "rNvy8", "turnstile", "hrYYt4", "vXQj4", "TJNWj9", "Hqio5" ], "cookies": [ "cf_clearance", "cf_chl_rc_ni" ], "tls": { "san": [ "reutheshel.org.il", "*.reutheshel.org.il" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "reutheshel.org.il", "protocol": "QUIC", "valid_to": "2026-10-09T14:42:27Z", "valid_from": "2026-07-11T13:42:31Z" }, "domain_age_days": 4898, "apex_age_days": 4898, "tls_age_days": 42, "tls_valid_days": 90, "requests": 18, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -72, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "content-security-policy": "default-src 'none'; script-src 'nonce-YBgCMW82mC08csQSQkqOF3' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.clou", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),s", "cross-origin-opener-policy": "same-origin", "cross-origin-resource-policy": "same-origin", "cross-origin-embedder-policy": "require-corp" } } } ```