# PhishDestroy domain threat record: espanolcentromerida.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/espanolcentromerida.com/
Machine-readable companion: https://phishdestroy.io/domain/espanolcentromerida.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-23 12:40:23 UTC
- Stored record updated: 2026-10-23 14:30:46 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 1
- Matching public blocklists: OpenPhish
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 67.205.73.30
- Registrar in stored WHOIS data: GoDaddy.com, LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2019-11-01 18:15:14 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a167b9-4347-72fd-8339-7e5b250092c7/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/espanolcentromerida.com
- Certificate Transparency search: https://crt.sh/?q=%25.espanolcentromerida.com
- Web Archive lookup: https://web.archive.org/web/*/https://espanolcentromerida.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the site as malicious because the recorded page title and body display “henrydaileylawfirm — Confidential Document”, indicating brand impersonation. The domain was first seen by PhishDestroy on 2026-10-23 and returned HTTP 200 with that title. Subsequent checks on the same date showed Google Safe Browsing did not flag the URL and VirusTotal reported no detections.

How the scam works
In brand‑impersonation phishing, an attacker hosts a page that pretends to be a confidential document or official communication from a trusted entity—in this case a law firm—to lure visitors into downloading files or submitting credentials, thereby harvesting personal data or installing malware.

Evidence
URLScan captured the page on 2026-10-23, assigned a malicious verdict with a score of 100, categorized it as phishing and flagged the brand as “Excel / PDF download”. PhishDestroy’s internal blocklist also marked the domain as malicious. VirusTotal scanned the domain on 2026-10-23 with 92 engines and recorded zero detections. Google Safe Browsing checked on the same day and returned no flag. OTX listed zero pulses for the domain.

Infrastructure
The domain was registered with GoDaddy on 2019-11-01 and is hosted on IP 67.205.73.30, which resolves to Leaseweb Canada Inc. TLS is provided by Let’s Encrypt, valid until 2026-11-23. Nameservers are ns1‑ns4.panelboxmanager.com. No other infrastructure details indicate the operator’s identity.

What to do
Users should avoid downloading files or entering credentials on the site and, if they have already done so, change any affected passwords. Security teams should block espanolcentromerida.com, monitor access logs for requests to this host, and apply remediation only to this exact domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a167b9-4347-72fd-8339-7e5b250092c7/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8748495a-22bf-4fba-88a0-f8e5c5c4d7bd
Stored capture screenshot: https://urlscan.io/screenshots/01a167b9-4347-72fd-8339-7e5b250092c7.png
Cloudflare Radar screenshot (2026-10-23T12:41:50Z): https://screenshots.phishdestroy.io/cf/8748495a-22bf-4fba-88a0-f8e5c5c4d7bd.png
URLScan screenshot (2026-10-20T09:22:25Z): https://screenshots.phishdestroy.io/us/01a1589e-6700-748b-b80b-846e07434508.png
URLScan capture report: https://urlscan.io/result/01a1589e-6700-748b-b80b-846e07434508/
URLScan screenshot (2026-10-20T14:21:22Z): https://screenshots.phishdestroy.io/us/01a159af-cc98-7357-8025-dde90a7e1d5b.png
URLScan capture report: https://urlscan.io/result/01a159af-cc98-7357-8025-dde90a7e1d5b/
URLScan screenshot (2026-10-22T07:03:16Z): https://screenshots.phishdestroy.io/us/01a1626b-8dd0-751f-99f5-ee02e187e853.png
URLScan capture report: https://urlscan.io/result/01a1626b-8dd0-751f-99f5-ee02e187e853/
URLScan screenshot (2026-10-22T19:30:26Z): https://screenshots.phishdestroy.io/us/01a16517-c5ed-757b-9818-080ccd86bed1.png
URLScan capture report: https://urlscan.io/result/01a16517-c5ed-757b-9818-080ccd86bed1/
URLScan screenshot (2026-10-23T06:39:30Z): https://screenshots.phishdestroy.io/us/01a1677c-5168-7218-8b8d-7d1efc001239.png
URLScan capture report: https://urlscan.io/result/01a1677c-5168-7218-8b8d-7d1efc001239/
URLScan screenshot (2026-10-23T06:43:25Z): https://screenshots.phishdestroy.io/us/01a1677f-eb34-7048-b98b-b9d38a7ede02.png
URLScan capture report: https://urlscan.io/result/01a1677f-eb34-7048-b98b-b9d38a7ede02/
VirusTotal report: https://www.virustotal.com/gui/domain/espanolcentromerida.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=espanolcentromerida.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 12:43:12 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a167b9-4347-72fd-8339-7e5b250092c7.png
  Captured: 2026-10-23 12:40:23 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a167b9-4347-72fd-8339-7e5b250092c7.png
  Source report: https://urlscan.io/result/01a167b9-4347-72fd-8339-7e5b250092c7/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8748495a-22bf-4fba-88a0-f8e5c5c4d7bd.png
  Captured: 2026-10-23 12:41:50 UTC
  Source report: https://radar.cloudflare.com/scan/8748495a-22bf-4fba-88a0-f8e5c5c4d7bd
  SHA-256: 6284b671d01670ae5bb655f95bc17f4a1ba1ece81add604957db4167c794c055
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a1589e-6700-748b-b80b-846e07434508.png
  Captured: 2026-10-20 09:22:25 UTC
  Source report: https://urlscan.io/result/01a1589e-6700-748b-b80b-846e07434508/
  SHA-256: 450b3f05cdbe1ff9b5994e52308caf5d8598d12cd7f15ac589e4fcf47e001e06
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a159af-cc98-7357-8025-dde90a7e1d5b.png
  Captured: 2026-10-20 14:21:22 UTC
  Source report: https://urlscan.io/result/01a159af-cc98-7357-8025-dde90a7e1d5b/
  SHA-256: 450b3f05cdbe1ff9b5994e52308caf5d8598d12cd7f15ac589e4fcf47e001e06
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1626b-8dd0-751f-99f5-ee02e187e853.png
  Captured: 2026-10-22 07:03:16 UTC
  Source report: https://urlscan.io/result/01a1626b-8dd0-751f-99f5-ee02e187e853/
  SHA-256: 450b3f05cdbe1ff9b5994e52308caf5d8598d12cd7f15ac589e4fcf47e001e06
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16517-c5ed-757b-9818-080ccd86bed1.png
  Captured: 2026-10-22 19:30:26 UTC
  Source report: https://urlscan.io/result/01a16517-c5ed-757b-9818-080ccd86bed1/
  SHA-256: 10e4179eb11a10bf18b83d99e6b1d5bf3ee7fc464706204d485a92c657cfbd80
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a1677c-5168-7218-8b8d-7d1efc001239.png
  Captured: 2026-10-23 06:39:30 UTC
  Source report: https://urlscan.io/result/01a1677c-5168-7218-8b8d-7d1efc001239/
  SHA-256: 10e4179eb11a10bf18b83d99e6b1d5bf3ee7fc464706204d485a92c657cfbd80
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a1677f-eb34-7048-b98b-b9d38a7ede02.png
  Captured: 2026-10-23 06:43:25 UTC
  Source report: https://urlscan.io/result/01a1677f-eb34-7048-b98b-b9d38a7ede02/
  SHA-256: 10e4179eb11a10bf18b83d99e6b1d5bf3ee7fc464706204d485a92c657cfbd80

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T12:42:07Z",
        "uuid": "01a167b9-4347-72fd-8339-7e5b250092c7",
        "scanned_at": "2026-10-23T07:46:03Z",
        "final_url": "https://espanolcentromerida.com/index.html",
        "status": 200,
        "ip": "67.205.73.30",
        "ptr": "go-easyhosting.panelvps.net",
        "ips": [
            "67.205.73.30"
        ],
        "asns": [
            "32613"
        ],
        "countries": [
            "CA"
        ],
        "doc_hash": "c4618d1891aadfc523c8d5a816757792dbbf98c30ed49f7ae4b34a32e7f7dedf",
        "tls": {
            "san": [
                "cpanel.espanolcentromerida.com",
                "cpcalendars.espanolcentromerida.com",
                "cpcontacts.espanolcentromerida.com",
                "espanolcentromerida.com",
                "mail.espanolcentromerida.com",
                "webdisk.espanolcentromerida.com",
                "webmail.espanolcentromerida.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR2",
            "subject": "webmail.espanolcentromerida.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-23T17:22:09Z",
            "valid_from": "2026-08-25T17:22:10Z"
        },
        "domain_age_days": 2427,
        "apex_age_days": 2427,
        "tls_age_days": 58,
        "tls_valid_days": 89,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 68,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "excelpdfdownload"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Excel / PDF download"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "Apache",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T12:42:09Z",
        "uuid": "8748495a-22bf-4fba-88a0-f8e5c5c4d7bd",
        "scanned_at": "2026-10-23T12:41:50Z",
        "final_url": "https://espanolcentromerida.com/",
        "status": 200,
        "history": [
            {
                "url": "https://espanolcentromerida.com/",
                "status": 200
            }
        ],
        "dom_hash": "f920f89ec63bfbb8a8c6430e4932395483626a601fabc9fd253eb997690beb2a",
        "doc_hash": "c4618d1891aadfc523c8d5a816757792dbbf98c30ed49f7ae4b34a32e7f7dedf",
        "domain_risks": [
            "Travel"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "espanolcentromerida.com",
                "type": "A",
                "value": "67.205.73.30"
            }
        ],
        "dnssec_valid": false,
        "ip": "67.205.73.30",
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2019-11-01T19:15:14Z",
            "updated": "2025-11-02T10:07:14Z",
            "expires": "2026-11-01T19:15:14Z",
            "nameservers": [
                "ns1.panelboxmanager.com",
                "ns2.panelboxmanager.com",
                "ns3.panelboxmanager.com",
                "ns4.panelboxmanager.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T12:41:38Z",
        "analysis_at": "2026-10-23T00:48:03Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 38
        },
        "reputation": 0,
        "popularity": {
            "Statvoo": 752985
        },
        "registrar": "GoDaddy.com, LLC",
        "created": "2019-11-01T19:15:14Z",
        "expires": "2026-11-01T19:15:14Z",
        "updated": "2025-11-02T10:07:14Z",
        "first_seen": "2024-03-05T02:25:30Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.panelbox.net"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "mail.espanolcentromerida.com",
                "priority": 0
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "v=spf1 ip4:67.205.73.30 +a +mx +ip4:184.107.95.31 ~all"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns3.panelbox.net"
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "google-site-verification=3etveEp3xxEj2Q0ean3eNsLEJBAVx7IRXqOLhCqxczk"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "panelbox.funio.com",
                "value": "ns1.panelbox.net"
            },
            {
                "ttl": 14400,
                "type": "A",
                "value": "67.205.73.30"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns4.panelbox.net"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.panelbox.net"
            }
        ],
        "dns_at": "2026-10-23T00:48:28Z",
        "jarm": "25d2ad00025d25d00042d43d000000d0979a504319f0fa83c2f00f881b6a1d",
        "cert": {
            "san": [
                "cpanel.espanolcentromerida.com",
                "cpcalendars.espanolcentromerida.com",
                "cpcontacts.espanolcentromerida.com",
                "espanolcentromerida.com",
                "mail.espanolcentromerida.com",
                "webdisk.espanolcentromerida.com",
                "webmail.espanolcentromerida.com"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "54162e38cecb129165bc7ddd5235720ea44",
            "sha256": "fbd9eff27d95993ee8c0271829adf6d6efa4852fd573647e6192e11e63ab173c",
            "subject": "webmail.espanolcentromerida.com",
            "valid_to": "2026-11-23T17:22:09Z",
            "valid_from": "2026-08-25T17:22:10Z"
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "registrar_iana_id": "146",
            "registrar_url": "http://www.godaddy.com",
            "created": "2019-11-01T19:15:14Z",
            "updated": "2025-11-02T10:07:14Z",
            "expires": "2026-11-01T19:15:14Z",
            "status": [
                "clientDeleteProhibited",
                "clientRenewProhibited",
                "clientTransferProhibited",
                "clientUpdateProhibited"
            ],
            "nameservers": [
                "ns1.panelboxmanager.com",
                "ns2.panelboxmanager.com",
                "ns3.panelboxmanager.com",
                "ns4.panelboxmanager.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client renew prohibited",
                "client transfer prohibited",
                "client update prohibited"
            ],
            "events": {
                "expiration": "2026-11-01T19:15:14Z",
                "last changed": "2025-11-02T10:07:14Z",
                "registration": "2019-11-01T19:15:14Z",
                "last update of RDAP database": "2026-10-20T09:01:50Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T12:42:22Z",
        "mail_config": {
            "mx": [
                "mail.espanolcentromerida.com"
            ],
            "spf": "v=spf1 ip4:67.205.73.30 +a +mx +ip4:184.107.95.31 ~all",
            "dkim": [
                "default"
            ],
            "dkim_bits": 2048,
            "spf_lookups": 2
        },
        "caa_records": {
            "domain": "espanolcentromerida.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-04-13T07:41:54Z",
            "first": "2020-10-28T00:33:45Z",
            "changes": 14,
            "days_archived": 27,
            "scans_per_day": 0.01,
            "avg_page_bytes": 3373
        },
        "social_tags": {
            "title": "henrydaileylawfirm — Confidential Document"
        },
        "trackers": {
            "requests": 1
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 27,
                "tls": 114,
                "wait": 126,
                "connect": 110,
                "download": 78
            },
            "response_ms": 455
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                22,
                25,
                80,
                110,
                143,
                443,
                587,
                993,
                995
            ]
        },
        "carbon": {
            "bytes": 15430,
            "co2_grams": 0.0006,
            "cleaner_than": 62
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "184.107.112.4",
                    "host": "ns2.panelbox.net"
                },
                {
                    "ip": "174.142.221.5",
                    "host": "ns3.panelbox.net"
                },
                {
                    "ip": "184.107.112.5",
                    "host": "ns4.panelbox.net"
                },
                {
                    "ip": "174.142.221.4",
                    "host": "ns1.panelbox.net"
                }
            ],
            "zone": "espanolcentromerida.com"
        },
        "location": {
            "ip": "67.205.73.30",
            "asn": "32613",
            "org": "Leaseweb Canada Inc",
            "city": "Montreal",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "webmail.espanolcentromerida.com"
        },
        "dns": {
            "A": [
                "67.205.73.30"
            ],
            "MX": [
                "{\"exchange\": \"mail.espanolcentromerida.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns3.panelbox.net",
                "ns2.panelbox.net",
                "ns1.panelbox.net",
                "ns4.panelbox.net"
            ],
            "SOA": "{\"nsname\": \"ns1.panelbox.net\", \"hostmaster\": \"panelbox.funio.com\", \"serial\": 2026032801, \"refresh\": 86400, \"retry\": 7200, \"expire\": 3600000, \"minttl\": 86400}",
            "TXT": [
                "google-site-verification=3etveEp3xxEj2Q0ean3eNsLEJBAVx7IRXqOLhCqxczk",
                "v=spf1 ip4:67.205.73.30 +a +mx +ip4:184.107.95.31 ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "67.205.73.30",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://espanolcentromerida.com"
            ]
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2019-11-01T19:15:14Z",
            "updated": "2025-11-02T10:07:14Z",
            "expires": "2026-11-01T19:15:14Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientRenewProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "clientUpdateProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.panelboxmanager.com",
                "ns2.panelboxmanager.com",
                "ns3.panelboxmanager.com",
                "ns4.panelboxmanager.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "Apache",
                "content-type": "text/html"
            }
        }
    }
}
```