# PhishDestroy domain threat record: festrendwald.de Content language: English Canonical HTML report: https://phishdestroy.io/domain/festrendwald.de/ Machine-readable companion: https://phishdestroy.io/domain/festrendwald.de/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-26 20:45:34 UTC - Stored record updated: 2026-10-26 21:52:39 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 158.94.210.119 - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a0e440-c6ea-72dd-80e7-747506f566d4/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/festrendwald.de - Certificate Transparency search: https://crt.sh/?q=%25.festrendwald.de - Web Archive lookup: https://web.archive.org/web/*/https://festrendwald.de/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a0e440-c6ea-72dd-80e7-747506f566d4.png Captured: 2026-10-26 20:45:34 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0e440-c6ea-72dd-80e7-747506f566d4.png Source report: https://urlscan.io/result/01a0e440-c6ea-72dd-80e7-747506f566d4/ - URLScan · 2026-09-01: https://screenshots.phishdestroy.io/us/01a05b72-4abd-749e-a4de-8c9578dffcdf.png Captured: 2026-09-01 05:30:19 UTC Source report: https://urlscan.io/result/01a05b72-4abd-749e-a4de-8c9578dffcdf/ SHA-256: e1f76c6e2976d9ef903f84939dd2042a451fbc73a3d6a96d5613aaf642da9ab7 - URLScan · 2026-09-01: https://screenshots.phishdestroy.io/us/01a05c77-2b2c-7628-b6aa-e14d583a5532.png Captured: 2026-09-01 10:15:17 UTC Source report: https://urlscan.io/result/01a05c77-2b2c-7628-b6aa-e14d583a5532/ SHA-256: 6c9947c08070c32e821ff468c7d5f25b5c65acb37624a3ec9b6bd90d4d866049 - URLScan · 2026-09-02: https://screenshots.phishdestroy.io/us/01a06183-77bd-708e-9992-164ca0396c1a.png Captured: 2026-09-02 09:46:47 UTC Source report: https://urlscan.io/result/01a06183-77bd-708e-9992-164ca0396c1a/ SHA-256: c0f16327d935f0d570fc55843b1299a0086ac8d51918c6d6c285048d8faca005 - URLScan · 2026-09-22: https://screenshots.phishdestroy.io/us/01a0caa1-399b-7172-a58b-68d3e1e6d508.png Captured: 2026-09-22 19:39:25 UTC Source report: https://urlscan.io/result/01a0caa1-399b-7172-a58b-68d3e1e6d508/ SHA-256: 8e38ba1efba03e5097b3b89a6524cc0c6e2193f60b9a820601a99ca46d2caee2 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c77298a5-117b-491f-ba85-f3a40c3903d1.png Captured: 2026-10-26 20:52:35 UTC Source report: https://radar.cloudflare.com/scan/c77298a5-117b-491f-ba85-f3a40c3903d1 SHA-256: 9c87822f220879b7e63ff99d5b80fe5c72f511a9eb36f4b1e7a507c1f3258b33 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T20:53:36Z", "uuid": "01a0e440-c6ea-72dd-80e7-747506f566d4", "scanned_at": "2026-09-27T19:04:12Z", "final_url": "https://festrendwald.de/", "status": 404, "redirected": "sub-domain", "redirects": [ { "to": "https://festrendwald.de/", "from": "https://www.festrendwald.de/", "status": 301 } ], "ip": "54.215.31.113", "ptr": "ec2-54-215-31-113.us-west-1.compute.amazonaws.com", "domains": [ "www.festrendwald.de" ], "ips": [ "54.215.31.113", "158.94.210.119" ], "asns": [ "16509", "202412" ], "countries": [ "US", "NL" ], "link_domains": [ "www.dynadot.com" ], "doc_hash": "d719e28e81cbe0d62889dc33dddf1308e977d0743c12b5871f7da1f1339ef39f", "globals": [ "requestResize" ], "tls": { "san": [ "*.dynadot.com", "dynadot.com" ], "cipher": "AES_128_GCM", "issuer": "GlobalSign GCC R6 AlphaSSL CA 2025", "subject": "*.dynadot.com", "protocol": "TLS 1.3", "valid_to": "2026-11-18T23:59:59Z", "valid_from": "2025-10-18T00:00:00Z" }, "domain_age_days": 125, "apex_age_days": 125, "tls_age_days": 344, "tls_valid_days": 396, "requests": 3, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 26, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html", "strict-transport-security": "max-age=2592000", "x-frame-options": "SAMEORIGIN" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T20:53:38Z", "uuid": "c77298a5-117b-491f-ba85-f3a40c3903d1", "scanned_at": "2026-10-26T20:52:35Z", "final_url": "https://festrendwald.de/", "status": 200, "history": [ { "url": "https://festrendwald.de/", "status": 200 } ], "dom_hash": "7c9bc77bba98d3158d40a1ee543c2ae84c5f4f31dc9c9751ee375a7cd09ba7f4", "doc_hash": "b068b7b9d6cf1dd407a75741b14f4e68f6350230129702dec1c33276a4ac426a", "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "Scam", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "festrendwald.de", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "updated": "2026-09-12T18:00:44Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T21:51:35Z", "analysis_at": "2026-10-21T18:01:01Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 4, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "spam", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "PREBYTES": "fraud", "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "first_seen": "2026-05-25T19:18:49Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.festrendwald.de", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-21T18:06:58Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "*.festrendwald.de", "festrendwald.de" ], "issuer": "Let's Encrypt / YE1", "serial": "537a8f943931143b5d3b758926676f4a2ca", "sha256": "0df3e8d62bdaed6f93668606461559ff113ce630a436dce9e889dd93202a6bf6", "subject": "festrendwald.de", "valid_to": "2026-12-11T17:02:01Z", "valid_from": "2026-09-12T17:02:02Z" }, "rdap": { "status": [ "active" ], "events": { "last changed": "2026-09-12T18:00:44Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T20:53:56Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "festrendwald.de" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-26T20:48:31Z", "first": "2026-10-26T20:48:31Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 23148 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://festrendwald.de/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Wolf Kapitgrund — KI-gestützte Handelsplattform für Investoren", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Algorithmische Handelsplattform auf Basis quantitativer KI. Wolf Kapitgrund gibt aktiven Investoren die Möglichkeit, datenbasierte Entscheidungen zu treffen und Portfolios effizient zu skalieren.", "canonicalUrl": "https://festrendwald.de/" }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 454, "tls": 81, "wait": 87, "connect": 75, "download": 152 }, "response_ms": 849 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 88556, "co2_grams": 0.0032, "cleaner_than": 25 }, "dns_server": { "ns": [ { "ip": "162.159.27.158", "host": "ns1.dyna-ns.net" }, { "ip": "162.159.24.5", "host": "ns2.dyna-ns.net" } ], "zone": "festrendwald.de" }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "festrendwald.de" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.festrendwald.de\", \"serial\": 2026091203, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://festrendwald.de" ] }, "linked_pages": { "internal_count": 29 }, "whois": { "updated": "2026-09-12T18:00:44Z", "status": [ "connect" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```