# PhishDestroy domain threat record: edgearbit-spain.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/edgearbit-spain.com/ Machine-readable companion: https://phishdestroy.io/domain/edgearbit-spain.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 14:27:05 UTC - Last availability or vendor check: 2026-10-25 14:43:30 UTC - Stored record updated: 2026-10-25 15:30:33 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: ethereum ## Stored infrastructure - Observed IP address: 104.21.32.150 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-24 07:45:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17382-6bac-74ba-9b3b-a6acff35b42c/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/edgearbit-spain.com - Certificate Transparency search: https://crt.sh/?q=%25.edgearbit-spain.com - Web Archive lookup: https://web.archive.org/web/*/https://edgearbit-spain.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added edgearbit-spain.com to its internal blocklist on 2026-10-25 after an automated intake flagged the domain as trusted based on its 93‑day age. The recorded page title reads “EdgeArbit | Tu Plataforma Digital para una Mejor Experiencia Web 2026”. On the same date the site returned HTTP 200 and performed a 307 redirect to enforce HTTPS. How the scam works No specific malicious behavior was observed on the page, but the presence of multiple phishing and malware detections means the domain could be used to lure visitors into credential harvesting, malware delivery, or other typical phishing tactics. Such sites often mimic legitimate services to gain trust before attempting data collection or code execution. Evidence VirusTotal (2026-10-22) reported 15 detections from 92 engines, including 12 malicious and 3 suspicious labels from vendors such as BitDefender, ESET, Fortinet and Forcepoint ThreatSeeker. Google Safe Browsing (2026-10-25) returned no flag. urlscan.io (2026-09-22) gave an engine‑based malicious score of 99 but an overall non‑malicious verdict. Cloudflare Radar (2026-10-25) classified the site as malicious with a malware tag. OTX listed one pulse on 2026-10-25. PhishDestroy’s internal list marks the domain as blocked, while external blocklists showed zero hits. Infrastructure The domain was registered with Dynadot Inc on 2026-07-24. It is served through Cloudflare’s CDN, with recorded IPs 104.21.32.150 (CA) and 172.67.186.236 (CA). The TLS certificate, issued by Google Trust Services, is valid from 2026-09-21 to 2026-12-20. DNSSEC is not enabled and the HTTP headers indicate a Cloudflare WAF is present. What to do Visitors should avoid entering any credentials or downloading files from this site; if credentials were entered, change them immediately. Administrators should block edgearbit-spain.com at the DNS or firewall level, monitor logs for connections to the recorded Cloudflare IPs, and keep the domain on threat‑intelligence blocklists. No wallet‑related actions are applicable. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0c893-9474-7587-a6e7-3240401370bf/ Cloudflare Radar report: https://radar.cloudflare.com/scan/08a60c9e-5b0e-4776-82e5-f389dbcf52c0 Stored capture screenshot: https://urlscan.io/screenshots/01a0c893-9474-7587-a6e7-3240401370bf.png Cloudflare Radar screenshot (2026-10-25T14:30:23Z): https://screenshots.phishdestroy.io/cf/08a60c9e-5b0e-4776-82e5-f389dbcf52c0.png URLScan screenshot (2026-09-21T18:30:29Z): https://screenshots.phishdestroy.io/us/01a0c53b-c1bb-74ea-a68f-71e36637e3ba.png URLScan capture report: https://urlscan.io/result/01a0c53b-c1bb-74ea-a68f-71e36637e3ba/ VirusTotal report: https://www.virustotal.com/gui/domain/edgearbit-spain.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=edgearbit-spain.com Archived copy: https://web.archive.org/web/20261025142857/https://edgearbit-spain.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 14:32:31 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a17382-6bac-74ba-9b3b-a6acff35b42c.png Captured: 2026-10-25 14:43:30 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a0c893-9474-7587-a6e7-3240401370bf.png Captured: 2026-10-25 14:27:05 UTC Source report: https://urlscan.io/result/01a17382-6bac-74ba-9b3b-a6acff35b42c/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/08a60c9e-5b0e-4776-82e5-f389dbcf52c0.png Captured: 2026-10-25 14:30:23 UTC Source report: https://radar.cloudflare.com/scan/08a60c9e-5b0e-4776-82e5-f389dbcf52c0 SHA-256: 370a21f019dcfe4a695fb6b84dea4bd95bee3cc321ec72e41f8c22247e4f5a0f - URLScan · 2026-09-21: https://screenshots.phishdestroy.io/us/01a0c53b-c1bb-74ea-a68f-71e36637e3ba.png Captured: 2026-09-21 18:30:29 UTC Source report: https://urlscan.io/result/01a0c53b-c1bb-74ea-a68f-71e36637e3ba/ SHA-256: 670fc7a47ff7cc4fa88cb58c7a6c1e1ea337d499a19e752525e89b43d72deeb9 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T15:11:14Z", "uuid": "01a17382-6bac-74ba-9b3b-a6acff35b42c", "scanned_at": "2026-10-25T14:41:36Z", "final_url": "https://edgearbit-spain.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://edgearbit-spain.com/", "from": "http://edgearbit-spain.com/", "status": 307 } ], "ip": "172.67.186.236", "domains": [ "fonts.gstatic.com", "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "modernroomdesigns.com", "static.cloudflareinsights.com", "fonts.googleapis.com" ], "ips": [ "104.21.38.110", "172.217.222.94", "104.16.79.73", "104.17.25.14", "104.17.208.5", "173.194.175.95", "172.67.186.236" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "8d4da5477f3e43d83733395d061d872dcc838b9d4efce74d47448ce0bd2f196f", "script_hashes": [ "4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885" ], "globals": [ "polylang", "_language", "_loader", "GEO_API_URL", "_phone_error", "_form_unknown_error", "__offerChatWidgetMounted", "intlTelInput", "__cfBeacon" ], "cookies": [ "_subid", "csrftoken" ], "tls": { "san": [ "edgearbit-spain.com", "*.edgearbit-spain.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "edgearbit-spain.com", "protocol": "QUIC", "valid_to": "2026-12-20T13:43:00Z", "valid_from": "2026-09-21T12:43:04Z" }, "domain_age_days": 93, "apex_age_days": 93, "tls_age_days": 34, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T14:31:39Z", "uuid": "08a60c9e-5b0e-4776-82e5-f389dbcf52c0", "scanned_at": "2026-10-25T14:30:23Z", "final_url": "https://edgearbit-spain.com/", "status": 200, "history": [ { "url": "https://edgearbit-spain.com/", "status": 200 } ], "dom_hash": "80dbeb286df5ec4ab7f31c436328fd187c58f39da5e0c99880222b0d5670f291", "doc_hash": "6822732b634e62a94126d3459d3aee8fc4a9df4cca90e2252927f2f6580cc1a9", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "edgearbit-spain.com", "type": "A", "value": "172.67.186.236" }, { "name": "edgearbit-spain.com", "type": "A", "value": "104.21.32.150" }, { "name": "edgearbit-spain.com", "type": "AAAA", "value": "2606:4700:3035::ac43:baec" }, { "name": "edgearbit-spain.com", "type": "AAAA", "value": "2606:4700:3031::6815:2096" } ], "dnssec_valid": false, "ip": "172.67.186.236", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-24T09:45:34Z", "updated": "2026-07-24T09:47:08Z", "expires": "2027-07-24T09:45:34Z", "nameservers": [ "hal.ns.cloudflare.com", "jo.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T14:29:35Z", "analysis_at": "2026-10-22T04:02:45Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 12, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "Dynadot Inc", "created": "2026-07-24T09:45:34Z", "expires": "2027-07-24T09:45:34Z", "updated": "2026-07-24T09:47:08Z", "first_seen": "2026-07-24T10:14:08Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "hal.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::6815:2096" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "hal.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "jo.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.32.150" }, { "ttl": 300, "type": "A", "value": "172.67.186.236" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::ac43:baec" } ], "dns_at": "2026-10-22T04:08:14Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "edgearbit-spain.com", "*.edgearbit-spain.com" ], "issuer": "Google Trust Services / WE1", "serial": "f727395079ca1fa40e9113e09fac3a24", "sha256": "b6900fd40f6635b1b26d8d05839d7b81e28cbccf6dc7b100e83436cb3b26dc95", "subject": "edgearbit-spain.com", "valid_to": "2026-12-20T13:43:00Z", "valid_from": "2026-09-21T12:43:04Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-07-24T09:45:34Z", "updated": "2026-07-24T09:47:08Z", "expires": "2027-07-24T09:45:34Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "hal.ns.cloudflare.com", "jo.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-07-24T09:45:34Z", "last changed": "2026-07-24T09:47:08Z", "registration": "2026-07-24T09:45:34Z", "registrar expiration": "2027-07-24T09:45:34Z", "last update of RDAP database": "2026-10-21T17:39:33Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T14:31:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "edgearbit-spain.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T14:28:57Z", "first": "2026-10-25T14:28:57Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 25026 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://edgearbit-spain.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 10 }, "social_tags": { "ogUrl": "https://edgearbit-spain.com/", "title": "EdgeArbit | Tu Plataforma Digital para una Mejor Experiencia Web 2026", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogTitle": "EdgeArbit | Tu Plataforma Digital para una Mejor Experiencia Web 2026", "ogSiteName": "EdgeArbit", "themeColor": "#0b0e11", "description": "Con un diseño orientado a la claridad, EdgeArbit funciona como una plataforma digital donde los contenidos se presentan de forma sencilla y ordenada. Esto permite recorrer la información con mayor comodidad y mantener una experiencia online más eficiente.", "twitterCard": "summary_large_image", "canonicalUrl": "https://edgearbit-spain.com/", "ogDescription": "Con un diseño orientado a la claridad, EdgeArbit funciona como una plataforma digital donde los contenidos se presentan de forma sencilla y ordenada. Esto permite recorrer la información con mayor comodidad y mantener una experiencia online más eficiente." }, "trackers": { "requests": 11, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 16, "tls": 46, "wait": 349, "connect": 8, "download": 7 }, "response_ms": 426 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 105171, "co2_grams": 0.0038, "cleaner_than": 21 }, "dns_server": { "ns": [ { "ip": "108.162.193.174", "host": "hal.ns.cloudflare.com" }, { "ip": "173.245.58.172", "host": "jo.ns.cloudflare.com" } ], "zone": "edgearbit-spain.com" }, "cookies": { "cookies": [ { "name": "_subid", "session": true }, { "name": "csrftoken", "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3031::6815:2096", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "edgearbit-spain.com" }, "dns": { "A": [ "172.67.186.236", "104.21.32.150" ], "NS": [ "jo.ns.cloudflare.com", "hal.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"hal.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415632080, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3031::6815:2096", "2606:4700:3035::ac43:baec" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3035::ac43:baec", "family": 6 }, "redirects": { "chain": [ "https://edgearbit-spain.com" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-07-24T09:45:34Z", "updated": "2026-07-24T09:47:08Z", "expires": "2027-07-24T09:45:34Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "hal.ns.cloudflare.com", "jo.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } } } } ```