# PhishDestroy domain threat record: familiesfriendsiv.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/familiesfriendsiv.com/
Machine-readable companion: https://phishdestroy.io/domain/familiesfriendsiv.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 21:24:29 UTC
- Last availability or vendor check: 2026-10-27 23:00:26 UTC
- Stored record updated: 2026-10-27 23:30:53 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.1
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 403
- Registration date in stored WHOIS data: 2026-10-22 08:05:37 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16316-e15b-736b-ade9-3227fb68b17b/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/familiesfriendsiv.com
- Certificate Transparency search: https://crt.sh/?q=%25.familiesfriendsiv.com
- Web Archive lookup: https://web.archive.org/web/*/https://familiesfriendsiv.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI observed a 403 Forbidden response and a Cloudflare challenge page, so page content could not be examined. The domain was first seen by PhishDestroy on 2026-10-27, five days after its registration on 2026-10-22, following an admin report.

How the scam works
No specific malicious behavior was observed on this site. In general, newly registered domains that only serve challenge pages can later be repurposed for credential harvesting, phishing, or other deceptive activities if convincing content is added.

Evidence
VirusTotal scanned the domain on 2026-10-23 and reported 0 malicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-27 and did not flag the site. urlscan.io captured a 403 response on 2026-10-22; its engine score marked the URL as malicious (score 59) but the overall verdict was clean. OTX listed two pulses referencing the domain as of 2026-10-27. PhishDestroy’s internal blocklist marks the domain as suspicious, while external blocklists reported no entries.

Infrastructure
The domain was registered on 2026-10-22 with NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS records resolve to Cloudflare IP ranges (e.g., 188.114.96.1, 188.114.97.3) and the site uses a Let's Encrypt certificate valid until 2027-01-20. The hosting network is identified as CloudFLARENET‑EU located in GB.

What to do
Do not submit credentials or personal data to the site; if you have already done so, change affected passwords and monitor accounts for unusual activity. Defenders should add familiesfriendsiv.com to blocklists and review logs for connections to the recorded Cloudflare IPs.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16316-e15b-736b-ade9-3227fb68b17b/
Cloudflare Radar report: https://radar.cloudflare.com/scan/7ecbfa6a-70fa-42e0-81df-431bcbf35d64
Stored capture screenshot: https://urlscan.io/screenshots/01a16316-e15b-736b-ade9-3227fb68b17b.png
Cloudflare Radar screenshot (2026-10-27T21:32:47Z): https://screenshots.phishdestroy.io/cf/7ecbfa6a-70fa-42e0-81df-431bcbf35d64.png
VirusTotal report: https://www.virustotal.com/gui/domain/familiesfriendsiv.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=familiesfriendsiv.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 22:07:21 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16316-e15b-736b-ade9-3227fb68b17b.png
  Captured: 2026-10-27 21:24:29 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a16316-e15b-736b-ade9-3227fb68b17b.png
  Source report: https://urlscan.io/result/01a16316-e15b-736b-ade9-3227fb68b17b/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7ecbfa6a-70fa-42e0-81df-431bcbf35d64.png
  Captured: 2026-10-27 21:32:47 UTC
  Source report: https://radar.cloudflare.com/scan/7ecbfa6a-70fa-42e0-81df-431bcbf35d64
  SHA-256: 8fbc995ca7920e7dc94ce3620a9e8c6b5510cee0357421fca39fc7bc02e393cf

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T21:34:00Z",
        "uuid": "01a16316-e15b-736b-ade9-3227fb68b17b",
        "scanned_at": "2026-10-22T10:10:16Z",
        "final_url": "https://familiesfriendsiv.com/",
        "status": 403,
        "redirected": "same-domain",
        "redirects": [
            {
                "to": "https://familiesfriendsiv.com/",
                "from": "https://familiesfriendsiv.com/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "challenges.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "188.114.97.3"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "www.cloudflare.com"
        ],
        "doc_hash": "e2bac6d46d58a1599f39ef7061efc0f07587bb3a038b0eaed6c49ac132dd4e6b",
        "script_hashes": [
            "e60faef4abec0e6b9aaad3b87abb5878f2a326660bd0d55ab4c27c2fcfb534ad",
            "30e33d05dfc077888b2223f86fd21f4588e8a833f58fa3e149ed2e0f55719ada"
        ],
        "globals": [
            "_cf_chl_opt",
            "THirw9",
            "IXEYu6",
            "nOLY0",
            "DraY9",
            "vyix0",
            "uEeN6",
            "NmGWd6",
            "AGRfA7",
            "qrht8",
            "LeviO5",
            "qpPe1",
            "atAFr0",
            "SABtz7",
            "FIac3",
            "RpzJz6",
            "QSqpx9",
            "ueZh9",
            "FBBK4",
            "ZliED2",
            "HKul9",
            "runProgram",
            "vUAjb0",
            "zCGb4",
            "nTlR0",
            "AwUcP3",
            "MkvrI5",
            "MpSwI7",
            "xrbo0",
            "vMhC1",
            "angular",
            "vvfHL3",
            "lffN9",
            "dSvRK1",
            "turnstile",
            "QBEM0",
            "AgLL2",
            "wEyW4",
            "THSr2"
        ],
        "cookies": [
            "cf_clearance",
            "cf_chl_rc_ni"
        ],
        "tls": {
            "san": [
                "*.familiesfriendsiv.com",
                "familiesfriendsiv.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "familiesfriendsiv.com",
            "protocol": "QUIC",
            "valid_to": "2027-01-20T09:10:40Z",
            "valid_from": "2026-10-22T09:10:41Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 59,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8",
            "content-security-policy": "default-src 'none'; script-src 'nonce-M5AmBbXlUNX7hVFznITBF5' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.clou",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin",
            "permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),s",
            "cross-origin-opener-policy": "same-origin",
            "cross-origin-resource-policy": "same-origin",
            "cross-origin-embedder-policy": "require-corp"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T21:34:02Z",
        "uuid": "7ecbfa6a-70fa-42e0-81df-431bcbf35d64",
        "scanned_at": "2026-10-27T21:32:47Z",
        "final_url": "https://familiesfriendsiv.com/",
        "status": 403,
        "history": [
            {
                "url": "https://familiesfriendsiv.com/",
                "status": 403
            }
        ],
        "dom_hash": "09471bf8e29d5571159827bc83d881c38e2f56d8a5b71911b3689b846bb80841",
        "doc_hash": "8729e1042bbc101f2259e0ce363176f11b75b7489898753650be95605765eca0",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "familiesfriendsiv.com",
                "type": "A",
                "value": "172.67.207.1"
            },
            {
                "name": "familiesfriendsiv.com",
                "type": "A",
                "value": "104.21.50.144"
            },
            {
                "name": "familiesfriendsiv.com",
                "type": "AAAA",
                "value": "2606:4700:3030::6815:3290"
            },
            {
                "name": "familiesfriendsiv.com",
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:cf01"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.19",
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-22T10:05:37Z",
            "updated": "2026-10-22T10:05:37Z",
            "expires": "2027-10-22T10:05:37Z",
            "nameservers": [
                "jillian.ns.cloudflare.com",
                "nile.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T22:05:06Z",
        "analysis_at": "2026-10-23T06:56:13Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
        "created": "2026-10-22T10:05:37Z",
        "expires": "2027-10-22T10:05:37Z",
        "updated": "2026-10-22T10:05:37Z",
        "first_seen": "2026-10-22T11:26:59Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.207.1"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::6815:3290"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.50.144"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:cf01"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jillian.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "jillian.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nile.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-23T07:05:09Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.familiesfriendsiv.com",
                "familiesfriendsiv.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6079ba85f1c52eecfcedb5f659368b3d7f6",
            "sha256": "b7549d9a7833eb627e60e2447533cd07ca575701d3ced2c3857e77dd0c42b98d",
            "subject": "familiesfriendsiv.com",
            "valid_to": "2027-01-20T09:10:40Z",
            "valid_from": "2026-10-22T09:10:41Z"
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765",
            "registrar_url": "https://nicenic.com",
            "created": "2026-10-22T10:05:37Z",
            "updated": "2026-10-22T10:05:37Z",
            "expires": "2027-10-22T10:05:37Z",
            "status": [
                "clientDeleteProhibited",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "jillian.ns.cloudflare.com",
                "nile.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-22T10:05:37Z",
                "registration": "2026-10-22T10:05:37Z",
                "registrar expiration": "2027-10-22T10:05:37Z",
                "last update of RDAP database": "2026-10-22T10:05:37Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T21:34:18Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "familiesfriendsiv.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.193.214",
                    "host": "nile.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.44",
                    "host": "jillian.ns.cloudflare.com"
                }
            ],
            "zone": "familiesfriendsiv.com"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "familiesfriendsiv.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "jillian.ns.cloudflare.com",
                "nile.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"jillian.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418172533, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-22T10:05:37Z",
            "updated": "2026-10-22T10:05:37Z",
            "expires": "2027-10-22T10:05:37Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "jillian.ns.cloudflare.com",
                "nile.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8",
                "content-security-policy": "default-src 'none'; script-src 'nonce-zVMv1zxXSaQHSIdkB8T595' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenge",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin",
                "permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*",
                "cross-origin-opener-policy": "same-origin",
                "cross-origin-resource-policy": "same-origin",
                "cross-origin-embedder-policy": "require-corp"
            }
        }
    }
}
```