# PhishDestroy domain threat record: dwhnmyn.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dwhnmyn.com/
Machine-readable companion: https://phishdestroy.io/domain/dwhnmyn.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 20:03:52 UTC
- Last availability or vendor check: 2026-10-26 20:03:52 UTC
- Stored record updated: 2026-10-26 21:00:11 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-06-29 11:58:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a179ce-e619-76ca-9775-c3cae971d523/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dwhnmyn.com
- Certificate Transparency search: https://crt.sh/?q=%25.dwhnmyn.com
- Web Archive lookup: https://web.archive.org/web/*/https://dwhnmyn.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot shows an Arabic-language landing page branded as دفعة نميان, with a navigation bar, a headline promising new horizons, two call-to-action buttons and a row of promotional statistics. PhishDestroy listed the page because its exaggerated performance and scale claims follow a common platform-lure pattern. It was first observed by PhishDestroy on 2026-10-26, 119 days after the domain was registered on 2026-06-29.

How the scam works
The page invites visitors to start their journey with a single click while displaying a claimed 99.9 percent success rate, more than 10 million active users and a presence in over 180 countries. As a category risk, such unsupported figures are used to build trust quickly and push visitors toward signing up or committing funds. Engaged visitors may then be asked for personal details or payments that the page does not substantiate.

Evidence
The screenshot shows the Arabic headline, the two call-to-action buttons and the statistics row that anchor the offer. PhishDestroy's internal blocklist flagged the domain on 2026-10-26, while external blocklists recorded no entries on that date. VirusTotal did not flag the domain as malicious. Google Safe Browsing did not flag it and OTX recorded no pulses, all checked on 2026-10-26; the fetch returned HTTP 200 with no cross-site redirect, so no redirect funnel was observed.

Infrastructure
Registration is through Dynadot Inc, created on 2026-06-29, with a hosting address recorded by PhishDestroy and no CDN or WAF provider attributed. No TLS, security-header, email-authentication, CAA or DNSSEC observations were collected for this report, so their posture is not established here.

What to do
If you submitted personal or financial details through this page, contact your bank or payment provider promptly, change any reused passwords and enable two-factor authentication on those accounts, and do not send further information or funds in response to its offers. For defenders, block dwhnmyn.com and watch for similar Arabic landing pages repeating the same inflated-statistics pattern.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a179ce-e619-76ca-9775-c3cae971d523/
Stored capture screenshot: https://i.ibb.co/7tNdNr35/7aaa870a9c0e.png
VirusTotal report: https://www.virustotal.com/gui/domain/dwhnmyn.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dwhnmyn.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:11:00 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/7tNdNr35/7aaa870a9c0e.png
  Captured: 2026-10-26 20:03:52 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a179ce-e619-76ca-9775-c3cae971d523.png
  Captured: 2026-10-26 20:03:52 UTC
  Source report: https://urlscan.io/result/01a179ce-e619-76ca-9775-c3cae971d523/
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179d1-9928-706b-b3eb-a281925b260f.png
  Captured: 2026-10-26 20:08:58 UTC
  Source report: https://urlscan.io/result/01a179d1-9928-706b-b3eb-a281925b260f/
  SHA-256: 4bb9c6b40ffd7320e52e01f5b22c6bbca39c666a9e11a7fa2d6b171d1e50050e
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5b85b0da-f2a7-481d-84af-11daf7c11357.png
  Source report: https://radar.cloudflare.com/scan/5b85b0da-f2a7-481d-84af-11daf7c11357
  SHA-256: d5b683f5a84052ace54dea8cecf01bcaa72b88c110acd391c952bee7b4e8bc21
- URLQuery: https://screenshots.phishdestroy.io/uq/c8792986-ca0c-49c7-a107-549ab53a43d6.png
  Source report: https://urlquery.net/report/c8792986-ca0c-49c7-a107-549ab53a43d6
  SHA-256: 802bb8eb954ca08981e83c9246356d789e59f48c005d358be92c6e527aca4df2

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:19:22Z",
        "uuid": "01a179ce-e619-76ca-9775-c3cae971d523",
        "scanned_at": "2026-10-26T20:02:56Z",
        "final_url": "https://dwhnmyn.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dwhnmyn.com/",
                "from": "http://dwhnmyn.com/",
                "status": 307
            },
            {
                "to": "http://dwhnmyn.com/",
                "from": "https://dwhnmyn.com/",
                "status": 307
            },
            {
                "to": "https://dwhnmyn.com/",
                "from": "http://dwhnmyn.com/",
                "status": 301
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput",
            "toggle",
            "wrapper",
            "fadeEls",
            "observer"
        ],
        "cookies": [
            "connect.sid"
        ],
        "domain_age_days": 119,
        "apex_age_days": 119,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "image/png"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T20:34:17Z",
        "analysis_at": "2026-10-26T15:10:44Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "registrar": "Dynadot Inc",
        "created": "2026-06-29T13:58:00Z",
        "expires": "2027-06-29T13:58:00Z",
        "updated": "2026-08-13T12:36:02Z",
        "first_seen": "2026-06-29T14:33:38Z",
        "dns": [
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.dwhnmyn.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dns_at": "2026-10-26T15:19:33Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "dwhnmyn.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "5e71162c8300c106e711eda33926c664a0b",
            "sha256": "c4b2affe4ef20986d86247c7f95953a86ab75071f47351f149af10afdc0f4ae8",
            "subject": "dwhnmyn.com",
            "valid_to": "2027-01-24T11:30:14Z",
            "valid_from": "2026-10-26T11:30:15Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-06-29T13:58:00Z",
            "updated": "2026-08-13T12:36:02Z",
            "expires": "2027-06-29T13:58:00Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-06-29T13:58:00Z",
                "last changed": "2026-08-28T08:27:20Z",
                "registration": "2026-06-29T13:58:00Z",
                "registrar expiration": "2027-06-29T13:58:00Z",
                "last update of RDAP database": "2026-10-23T10:50:30Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:36:54Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dwhnmyn.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T20:04:42Z",
            "first": "2026-10-26T20:04:42Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 24865
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://dwhnmyn.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "دوحة نماين: منصة تداول ذكية متكاملة",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "انطلق نحو أهدافك بثقة ووضوح. دوحة نماين تقدم منظومة تداول خوارزمية متكاملة بحضور فعلي في أكثر من 180 دولة وأكثر من 10 ملايين مستفيد.",
            "canonicalUrl": "https://dwhnmyn.com/"
        },
        "trackers": {
            "requests": 54,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1385,
                "tls": 152,
                "wait": 150,
                "connect": 143,
                "download": 178
            },
            "response_ms": 2008
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "carbon": {
            "bytes": 96882,
            "co2_grams": 0.0035,
            "cleaner_than": 23
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                },
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                }
            ],
            "zone": "dwhnmyn.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "connect.sid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "dwhnmyn.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.dwhnmyn.com\", \"serial\": 2026082801, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://dwhnmyn.com"
            ]
        },
        "linked_pages": {
            "internal_count": 28
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-06-29T13:58:00Z",
            "updated": "2026-08-13T12:36:02Z",
            "expires": "2027-06-29T13:58:00Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```