# PhishDestroy domain threat record: fastekconsult.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/fastekconsult.com/
Machine-readable companion: https://phishdestroy.io/domain/fastekconsult.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-26 02:06:50 UTC
- Stored record updated: 2026-10-26 03:30:23 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 198.187.31.55
- Registrar in stored WHOIS data: NameCheap, Inc.
- Registration date in stored WHOIS data: 2014-03-21 20:20:49 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0dd26-b316-738a-9986-dbc393b939d9/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/fastekconsult.com
- Certificate Transparency search: https://crt.sh/?q=%25.fastekconsult.com
- Web Archive lookup: https://web.archive.org/web/*/https://fastekconsult.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed fastekconsult.com as a suspicious domain on 2026-10-26. The page fetched on that date returned HTTP 200 and redirected from http to https, with no visible title. No external blocklists reported the domain at the time of checking.

How the scam works
The classification is based on vendor signals that label the site as malicious, but no specific phishing form, credential‑harvesting page, or malware delivery was observed. Consequently the domain could be used for typical fraud or phishing tactics, though the exact method remains unconfirmed.

Evidence
VirusTotal recorded 15 malicious and 2 suspicious detections from 92 engines on 2026-10-26, with vendors such as BitDefender, Fortinet and Kaspersky marking it as phishing. Google Safe Browsing reported no threat on the same date. urlscan.io’s engine analysis gave a malicious score of 58 while its overall verdict was clean, and Cloudflare Radar flagged the domain as malicious under the malware category on 2026-10-26. PhishDestroy’s internal blocklist includes the domain, external blocklists showed zero hits, and OTX listed a single pulse referencing it.

Infrastructure
The domain was registered on 2014-03-21 through NameCheap, Inc., using the nameservers ns1.rs-hosting.com and ns2.rs-hosting.com. The recorded IP address is 198.187.31.55, belonging to ASN 22612 (Namecheap) and geolocated to Dallas, US. TLS was served with a Sectigo certificate for *.registrar-servers.com, valid from 2025-11-07 to 2026-11-17, and the server identified itself as Apache running PHP 7.4.33.

What to do
Visitors should treat the site as untrusted and avoid entering any credentials or personal data. If any credentials were submitted, change the associated passwords immediately. Organizations can block the domain at the network perimeter, monitor DNS and HTTP logs for connections to 198.187.31.55, and add the domain to internal blocklists.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0dd26-b316-738a-9986-dbc393b939d9/
Cloudflare Radar report: https://radar.cloudflare.com/scan/544815de-a9fd-4721-b98e-8334af023c82
Stored capture screenshot: https://urlscan.io/screenshots/01a0dd26-b316-738a-9986-dbc393b939d9.png
Cloudflare Radar screenshot (2026-10-26T02:09:31Z): https://screenshots.phishdestroy.io/cf/544815de-a9fd-4721-b98e-8334af023c82.png
URLScan screenshot (2026-09-25T09:30:23Z): https://screenshots.phishdestroy.io/us/01a0d7e6-ac03-74fa-b08c-225c890a5d33.png
URLScan capture report: https://urlscan.io/result/01a0d7e6-ac03-74fa-b08c-225c890a5d33/
URLScan screenshot (2026-09-25T10:18:32Z): https://screenshots.phishdestroy.io/us/01a0d812-c4ce-703a-b93e-3133ca616736.png
URLScan capture report: https://urlscan.io/result/01a0d812-c4ce-703a-b93e-3133ca616736/
VirusTotal report: https://www.virustotal.com/gui/domain/fastekconsult.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=fastekconsult.com
Archived copy: https://web.archive.org/web/20261026020819/https://fastekconsult.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 02:12:12 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0dd26-b316-738a-9986-dbc393b939d9.png
  Captured: 2026-10-26 02:06:50 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0dd26-b316-738a-9986-dbc393b939d9.png
  Source report: https://urlscan.io/result/01a0dd26-b316-738a-9986-dbc393b939d9/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/544815de-a9fd-4721-b98e-8334af023c82.png
  Captured: 2026-10-26 02:09:31 UTC
  Source report: https://radar.cloudflare.com/scan/544815de-a9fd-4721-b98e-8334af023c82
  SHA-256: a5db7ab655d3900bfb2bf44f8483ca7ce06fc6f795376f14b777be50f1f0af62
- URLScan · 2026-09-25: https://screenshots.phishdestroy.io/us/01a0d7e6-ac03-74fa-b08c-225c890a5d33.png
  Captured: 2026-09-25 09:30:23 UTC
  Source report: https://urlscan.io/result/01a0d7e6-ac03-74fa-b08c-225c890a5d33/
  SHA-256: a25416130916df152bb802eda5827449ef45cf116f311880958d9df4470f1768
- URLScan · 2026-09-25: https://screenshots.phishdestroy.io/us/01a0d812-c4ce-703a-b93e-3133ca616736.png
  Captured: 2026-09-25 10:18:32 UTC
  Source report: https://urlscan.io/result/01a0d812-c4ce-703a-b93e-3133ca616736/
  SHA-256: a25416130916df152bb802eda5827449ef45cf116f311880958d9df4470f1768

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T02:08:45Z",
        "uuid": "01a0dd26-b316-738a-9986-dbc393b939d9",
        "scanned_at": "2026-09-26T09:58:29Z",
        "final_url": "https://fastekconsult.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://fastekconsult.com/",
                "from": "http://fastekconsult.com/",
                "status": 307
            }
        ],
        "ip": "198.187.31.55",
        "ptr": "host8-3.registrar-servers.com",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.110.94",
            "142.251.14.95",
            "198.187.31.55"
        ],
        "asns": [
            "15169",
            "22612"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "www.fastekconsult.com",
            "www.resolutiondesigners.com"
        ],
        "doc_hash": "1de7860da2a7866594d8572d73718667f9365dd8cdc565d4fda25d8ce9269294",
        "script_hashes": [
            "6be70110418f9738ca23c6d61d73ce3c0cb01087843c96de5ced119c5ab882c6",
            "ed8f120343683850762fc8fb5e8ee8dc3586a2ad7da5c12ca31ef125628cb15b",
            "5fe084328c9d2b7612b6e7c739946752c5326ece5a1566a41531f3efff175321",
            "d37cca520482f3755ff951e69133684198540ca64bc75c4ff84fd9d0e42a4ad3",
            "7010d476fd5d87b1da1d20882f00b0cf729627c1405132dc7a7942513d439556",
            "d8eb03356a07d8ebc3e425f92d2c510bdd9478b2d8c016141c65c051457da352",
            "0fb74802f64e9831b433b7ee1ac01bab3cd65990f00b3e7ee23d29ce6b1e80f9",
            "46ce4a7206dc4066cbd2eb1a3591003133038f6ed507d6457a0b5ba4f4e012ff"
        ],
        "globals": [
            "requestResize",
            "$pick",
            "$try",
            "IFrame",
            "Elements",
            "Cookie",
            "MooTools",
            "typeOf",
            "instanceOf",
            "Type",
            "Hash",
            "Native",
            "$A",
            "$arguments",
            "$chk",
            "$clear",
            "$defined",
            "$each",
            "$empty",
            "$extend",
            "$H",
            "$merge",
            "$lambda",
            "$mixin",
            "$random",
            "$splat",
            "$time",
            "$type",
            "$unlink",
            "Browser",
            "$constructor",
            "$family",
            "$exec",
            "DOMEvent",
            "Class",
            "Chain",
            "Events",
            "Options",
            "Slick",
            "uniqueNumber"
        ],
        "cookies": [
            "88d784c48c20e91171c044c0a34b5a75"
        ],
        "tls": {
            "san": [
                "*.registrar-servers.com",
                "registrar-servers.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "Sectigo Public Server Authentication CA DV R36",
            "subject": "*.registrar-servers.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-17T23:59:59Z",
            "valid_from": "2025-11-07T00:00:00Z"
        },
        "domain_age_days": 3493,
        "apex_age_days": 3493,
        "tls_age_days": 323,
        "tls_valid_days": 375,
        "requests": 29,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 58,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Apache",
            "content-type": "text/html; charset=utf-8",
            "x-powered-by": "PHP/7.4.33"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T02:11:27Z",
        "uuid": "544815de-a9fd-4721-b98e-8334af023c82",
        "scanned_at": "2026-10-26T02:09:31Z",
        "final_url": "https://fastekconsult.com/",
        "history": [
            {
                "url": "https://fastekconsult.com/",
                "status": 0
            }
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "fastekconsult.com",
                "type": "A",
                "value": "198.187.31.55"
            }
        ],
        "dnssec_valid": false,
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2014-03-21T21:20:49Z",
            "updated": "2026-03-23T06:56:06Z",
            "expires": "2027-03-21T21:20:49Z",
            "nameservers": [
                "ns1.rs-hosting.com",
                "ns2.rs-hosting.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T02:08:19Z",
        "analysis_at": "2026-10-24T15:13:42Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 15,
            "suspicious": 2,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "LevelBlue": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "phishing",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Google": "legal_and_professional_services",
            "Sophos": "phishing and fraud",
            "BitDefender": "hosting",
            "alphaMountain.ai": "Business/Economy, Phishing (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "business and economy"
        },
        "created": "2014-03-21T00:00:00Z",
        "updated": "2026-03-22T00:00:00Z",
        "first_seen": "2025-12-17T09:52:58Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "mesfin\\.rs.gmail.com",
                "value": "ns1.rs-hosting.com"
            },
            {
                "ttl": 1200,
                "type": "MX",
                "value": "ALT2.ASPMX.L.GOOGLE.com",
                "priority": 5
            },
            {
                "ttl": 1200,
                "type": "MX",
                "value": "ASPMX.L.GOOGLE.com",
                "priority": 1
            },
            {
                "ttl": 1200,
                "type": "MX",
                "value": "ALT3.ASPMX.L.GOOGLE.com",
                "priority": 10
            },
            {
                "ttl": 1200,
                "type": "A",
                "value": "198.187.31.55"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.rs-hosting.com"
            },
            {
                "ttl": 1200,
                "type": "MX",
                "value": "ALT1.ASPMX.L.GOOGLE.com",
                "priority": 5
            },
            {
                "ttl": 1200,
                "type": "MX",
                "value": "ALT4.ASPMX.L.GOOGLE.com",
                "priority": 10
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.rs-hosting.com"
            }
        ],
        "dns_at": "2026-10-24T15:19:14Z",
        "jarm": "3fd3fd15d3fd3fd00042d42d000000038eaaf490bec8dc33757f165ce01762",
        "cert": {
            "san": [
                "*.registrar-servers.com",
                "registrar-servers.com"
            ],
            "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36",
            "serial": "e9312eac8b2f056839a3766aff4cec11",
            "sha256": "96bd7fe6080bfd8d2247017ca3b791e84ca0b42e781e6b646909744395748742",
            "subject": "*.registrar-servers.com",
            "valid_to": "2026-11-17T23:59:59Z",
            "valid_from": "2025-11-07T00:00:00Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-03-23T06:56:06Z",
                "registration": "2014-03-21T21:20:49Z",
                "registrar expiration": "2027-03-21T21:20:49Z",
                "last update of RDAP database": "2026-10-21T15:01:49Z"
            },
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T02:11:43Z",
        "mail_config": {
            "mx": [
                "ASPMX.L.GOOGLE.com",
                "ALT4.ASPMX.L.GOOGLE.com",
                "ALT1.ASPMX.L.GOOGLE.com",
                "ALT3.ASPMX.L.GOOGLE.com",
                "ALT2.ASPMX.L.GOOGLE.com"
            ],
            "dkim": [
                "default"
            ],
            "dkim_bits": 2048,
            "providers": [
                "Google Workspace"
            ],
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "fastekconsult.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-26T02:08:19Z",
            "first": "2016-06-12T20:28:37Z",
            "changes": 33,
            "days_archived": 34,
            "scans_per_day": 0.01,
            "avg_page_bytes": 3832
        },
        "trackers": {
            "requests": 0
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": false,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                25,
                53,
                80,
                110,
                143,
                443,
                587,
                993,
                995
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "199.188.205.87",
                    "host": "ns1.rs-hosting.com"
                },
                {
                    "ip": "198.187.31.55",
                    "host": "ns2.rs-hosting.com"
                }
            ],
            "zone": "fastekconsult.com"
        },
        "location": {
            "ip": "198.187.31.55",
            "asn": "22612",
            "org": "Namecheap, Inc.",
            "city": "Dallas",
            "country": "US"
        },
        "ssl": {
            "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36",
            "subject": "*.registrar-servers.com"
        },
        "dns": {
            "A": [
                "198.187.31.55"
            ],
            "MX": [
                "{\"exchange\": \"ALT2.ASPMX.L.GOOGLE.com\", \"priority\": 5}",
                "{\"exchange\": \"ALT1.ASPMX.L.GOOGLE.com\", \"priority\": 5}",
                "{\"exchange\": \"ALT3.ASPMX.L.GOOGLE.com\", \"priority\": 10}",
                "{\"exchange\": \"ASPMX.L.GOOGLE.com\", \"priority\": 1}",
                "{\"exchange\": \"ALT4.ASPMX.L.GOOGLE.com\", \"priority\": 10}"
            ],
            "NS": [
                "ns2.rs-hosting.com",
                "ns1.rs-hosting.com"
            ],
            "SOA": "{\"nsname\": \"ns1.rs-hosting.com\", \"hostmaster\": \"mesfin\\\\.rs.gmail.com\", \"serial\": 2026031705, \"refresh\": 86400, \"retry\": 7200, \"expire\": 3600000, \"minttl\": 86400}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "198.187.31.55",
            "family": 4
        },
        "subdomains": {
            "count": 8,
            "subdomains": [
                "autodiscover.fastekconsult.com",
                "cpanel.fastekconsult.com",
                "cpcalendars.fastekconsult.com",
                "cpcontacts.fastekconsult.com",
                "mail.fastekconsult.com",
                "webdisk.fastekconsult.com",
                "webmail.fastekconsult.com",
                "www.fastekconsult.com"
            ]
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2014-03-21T21:20:49Z",
            "updated": "2026-03-23T06:56:06Z",
            "expires": "2027-03-21T21:20:49Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.rs-hosting.com",
                "ns2.rs-hosting.com"
            ]
        }
    }
}
```