# PhishDestroy domain threat record: ergodawk.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/ergodawk.com/ Machine-readable companion: https://phishdestroy.io/domain/ergodawk.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 19:35:58 UTC - Last availability or vendor check: 2026-10-25 19:35:58 UTC - Stored record updated: 2026-10-25 22:10:19 UTC - VirusTotal detections in the stored snapshot: 14/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.137.235.173 - Registrar in stored WHOIS data: Porkbun LLC - Registration date in stored WHOIS data: 2026-05-04 11:36:10 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1748f-b55e-7438-8d44-ecdad134add9/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/ergodawk.com - Certificate Transparency search: https://crt.sh/?q=%25.ergodawk.com - Web Archive lookup: https://web.archive.org/web/*/https://ergodawk.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/gbzd2vQ7/c5e07f718c74.png Captured: 2026-10-25 19:35:58 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1748f-b55e-7438-8d44-ecdad134add9.png Captured: 2026-10-25 19:35:58 UTC Source report: https://urlscan.io/result/01a1748f-b55e-7438-8d44-ecdad134add9/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/37fdf8b7-5a34-4010-b686-42c383674000.png Captured: 2026-10-25 20:09:53 UTC Source report: https://radar.cloudflare.com/scan/37fdf8b7-5a34-4010-b686-42c383674000 SHA-256: a5db7ab655d3900bfb2bf44f8483ca7ce06fc6f795376f14b777be50f1f0af62 - URLQuery: https://screenshots.phishdestroy.io/uq/b924252d-2e3f-4bd7-a62d-6e4f395577a3.png Source report: https://urlquery.net/report/b924252d-2e3f-4bd7-a62d-6e4f395577a3 SHA-256: 29a25445b8c60e3af23752a8a35d1870609d9c143659cb79d2ea910dc94ddb94 - URLScan ยท 2026-10-25: https://screenshots.phishdestroy.io/us/01a17487-8898-73a0-98ad-ddeb9b68000a.png Captured: 2026-10-25 19:26:47 UTC Source report: https://urlscan.io/result/01a17487-8898-73a0-98ad-ddeb9b68000a/ SHA-256: cefd57c71dfb50c24a0d245d392a976e5244e521762665e100f27f23a5c1f72e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T19:39:18Z", "uuid": "01a1748f-b55e-7438-8d44-ecdad134add9", "scanned_at": "2026-10-25T19:35:44Z", "final_url": "https://ergodawk.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://ergodawk.com/", "from": "http://ergodawk.com/", "status": 307 } ], "ip": "188.137.235.173", "ptr": "188-137-235-173.germany-1.vps.ac", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.250.207.3", "172.217.25.170", "188.137.235.173" ], "asns": [ "15169", "211381" ], "countries": [ "US", "DE" ], "link_domains": [ "kb.fastpanel.direct" ], "doc_hash": "825eb1a627f34c3d1fad85cb5904b5ac0fded65f677c5a85fa992e42c450fd99", "tls": { "cipher": "AES_256_GCM", "issuer": "parking", "subject": "parking", "protocol": "TLS 1.3", "valid_to": "2027-10-20T08:14:51Z", "valid_from": "2026-10-20T08:14:51Z" }, "domain_age_days": 174, "apex_age_days": 174, "tls_age_days": 5, "tls_valid_days": 365, "requests": 7, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 81, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx/1.30.6", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T20:10:37Z", "uuid": "37fdf8b7-5a34-4010-b686-42c383674000", "scanned_at": "2026-10-25T20:09:53Z", "final_url": "https://ergodawk.com/", "history": [ { "url": "https://ergodawk.com/", "status": 0 } ], "dom_hash": "94bfc7c24186e5b245b5675859fb84b248547086370961e5637590177432b219", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "ergodawk.com", "type": "A", "value": "188.137.235.173" } ], "dnssec_valid": false, "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Porkbun LLC", "created": "2026-05-04T13:36:10Z", "updated": "2026-05-04T13:36:51Z", "expires": "2027-05-04T13:36:10Z", "nameservers": [ "curitiba.ns.porkbun.com", "fortaleza.ns.porkbun.com", "maceio.ns.porkbun.com", "salvador.ns.porkbun.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T22:10:08Z", "analysis_at": "2026-10-25T12:28:04Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 9, "suspicious": 5, "undetected": 32 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "spam", "SOCRadar": "phishing", "Kaspersky": "phishing", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "suspicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "self-signed" ], "registrar": "Porkbun LLC", "created": "2026-05-04T13:36:10Z", "expires": "2027-05-04T13:36:10Z", "updated": "2026-05-04T13:36:51Z", "first_seen": "2026-05-04T14:01:40Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "curitiba.ns.porkbun.com" }, { "ttl": 21600, "type": "NS", "value": "salvador.ns.porkbun.com" }, { "ttl": 600, "type": "TXT", "value": "v=spf1 include:_spf.porkbun.com ~all" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "curitiba.ns.porkbun.com" }, { "ttl": 600, "type": "MX", "value": "fwd2.porkbun.com", "priority": 20 }, { "ttl": 600, "type": "A", "value": "188.137.235.173" }, { "ttl": 600, "type": "MX", "value": "fwd1.porkbun.com", "priority": 10 }, { "ttl": 21600, "type": "NS", "value": "fortaleza.ns.porkbun.com" }, { "ttl": 21600, "type": "NS", "value": "maceio.ns.porkbun.com" } ], "dns_at": "2026-10-25T12:33:29Z", "jarm": "2ad2ad0002ad2ad00042d42d00000000f78d2dc0ce6e5bbc5b8149a4872356", "cert": { "issuer": "FASTPANEL / parking", "serial": "1", "sha256": "d7603b2dbbf3121cb9be964b99b92e8f2fbc48c7ae37940b1b84739515612f34", "subject": "parking", "valid_to": "2027-10-20T08:14:51Z", "valid_from": "2026-10-20T08:14:51Z" }, "whois": { "registrar": "Porkbun LLC", "registrar_iana_id": "1861", "registrar_url": "http://porkbun.com", "created": "2026-05-04T13:36:10Z", "updated": "2026-05-04T13:36:51Z", "expires": "2027-05-04T13:36:10Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "curitiba.ns.porkbun.com", "fortaleza.ns.porkbun.com", "maceio.ns.porkbun.com", "salvador.ns.porkbun.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "delete prohibited", "transfer prohibited" ], "events": { "expiration": "2027-05-04T13:36:10Z", "last changed": "2026-05-04T13:36:10Z", "registration": "2026-05-04T13:36:10Z", "registrar expiration": "2027-05-04T13:36:10Z", "last update of RDAP database": "2026-05-04T13:36:10Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T19:55:56Z", "mail_config": { "mx": [ "fwd1.porkbun.com", "fwd2.porkbun.com" ], "spf": "v=spf1 include:_spf.porkbun.com ~all", "spf_lookups": 6 }, "caa_records": { "domain": "ergodawk.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T19:36:19Z", "first": "2026-10-25T19:36:19Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 3707 }, "trackers": { "requests": 3, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": false, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8888 ] }, "dns_server": { "ns": [ { "ip": "162.159.10.150", "host": "salvador.ns.porkbun.com" }, { "ip": "173.245.58.37", "host": "curitiba.ns.porkbun.com" }, { "ip": "162.159.8.140", "host": "fortaleza.ns.porkbun.com" }, { "ip": "162.159.11.180", "host": "maceio.ns.porkbun.com" } ], "zone": "ergodawk.com" }, "location": { "ip": "188.137.235.173", "asn": "211381", "org": "Podaon SIA", "city": "Frankfurt am Main", "country": "DE" }, "ssl": { "issuer": "FASTPANEL / parking", "subject": "parking" }, "dns": { "A": [ "188.137.235.173" ], "MX": [ "{\"exchange\": \"fwd2.porkbun.com\", \"priority\": 20}", "{\"exchange\": \"fwd1.porkbun.com\", \"priority\": 10}" ], "NS": [ "fortaleza.ns.porkbun.com", "curitiba.ns.porkbun.com", "salvador.ns.porkbun.com", "maceio.ns.porkbun.com" ], "SOA": "{\"nsname\": \"curitiba.ns.porkbun.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415911830, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 include:_spf.porkbun.com ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "188.137.235.173", "family": 4 }, "whois": { "registrar": "Porkbun LLC", "created": "2026-05-04T13:36:10Z", "updated": "2026-05-04T13:36:51Z", "expires": "2027-05-04T13:36:10Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "curitiba.ns.porkbun.com", "fortaleza.ns.porkbun.com", "maceio.ns.porkbun.com", "salvador.ns.porkbun.com" ] } } } ```