# PhishDestroy domain threat record: haantjesphotography.nl

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/haantjesphotography.nl/
Machine-readable companion: https://phishdestroy.io/domain/haantjesphotography.nl/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-19 18:24:06 UTC
- Last availability or vendor check: 2026-10-22 10:47:09 UTC
- Stored record updated: 2026-10-22 15:46:57 UTC
- VirusTotal detections in the stored snapshot: 7/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: flagged

## Stored infrastructure

- Observed IP address: 81.169.145.80
- Registrar in stored WHOIS data: Domain Robot
- Registrar country in stored WHOIS data: DE
- Registration date (registry RDAP, haantjesphotography.nl): 2023-03-27 08:24:56 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1556a-d643-71ac-acdc-a7a043bfca31/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/haantjesphotography.nl
- Certificate Transparency search: https://crt.sh/?q=%25.haantjesphotography.nl
- Web Archive lookup: https://web.archive.org/web/*/https://haantjesphotography.nl/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has added haantjesphotography.nl to its internal blocklist as a suspicious domain. The domain was first observed by PhishDestroy on 2026-10-19. No page title was recorded at the time of analysis.

How the scam works
A domain flagged for social engineering may be used to lure users into revealing credentials, clicking malicious links, or downloading unwanted content. The presence of security vendor detections indicates that the site exhibits characteristics commonly associated with such deceptive tactics. However, no specific malicious behavior was observed on the recorded page.

Evidence
VirusTotal reported 7 detections from 92 scanning engines on 2026-10-19, with alerts from alphaMountain.ai, CRDF, G-Data, Google Safe Browsing, Gridinsoft, SOCRadar, and Sophos. Google Safe Browsing marked the URL as SOCIAL_ENGINEERING on 2026-10-19. The external blocklist OpenPhish included the domain as of 2026-10-19. PhishDestroy’s internal list also contains the domain, checked on the same date. OTX showed zero pulses for the domain on 2026-10-19.

Infrastructure
The domain was registered on 2023-03-27 through the registrar Domain Robot. The recorded IP address for the site is 81.169.145.80.

What to do
Avoid visiting or interacting with haantjesphotography.nl. If you entered any credentials, change them immediately and monitor related accounts for unauthorized activity. Network defenders should block the exact domain and the recorded IP address, and review logs for any connections to this host.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1556a-d643-71ac-acdc-a7a043bfca31/
VirusTotal report: https://www.virustotal.com/gui/domain/haantjesphotography.nl
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=haantjesphotography.nl
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-19 18:30:04 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/mVPK5Z20/f0d79e25b9d2.png
  Captured: 2026-10-19 18:29:01 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a1556a-d643-71ac-acdc-a7a043bfca31.png
  Captured: 2026-10-19 18:29:01 UTC
  Source report: https://urlscan.io/result/01a1556a-d643-71ac-acdc-a7a043bfca31/
- URLScan capture 2: https://urlscan.io/screenshots/01a1550f-fc87-7700-ba4b-0e8a3e043f45.png
  Captured: 2026-10-19 18:24:06 UTC
  Source report: https://urlscan.io/result/01a1556a-d643-71ac-acdc-a7a043bfca31/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/239ed134-d162-4f67-9be1-aeace09db5af.png
  Captured: 2026-10-19 18:27:22 UTC
  Source report: https://radar.cloudflare.com/scan/239ed134-d162-4f67-9be1-aeace09db5af
  SHA-256: 11f60c3fa1e27237c853ce324e612368d741296863ee53a75463b0ec5d84ade8
- URLQuery: https://screenshots.phishdestroy.io/uq/d139e51e-7bdb-4a03-aac2-ab28239d9ef0.png
  Source report: https://urlquery.net/report/d139e51e-7bdb-4a03-aac2-ab28239d9ef0
  SHA-256: ff3304034358f41019848b41727d5c83346693b23656a00517747e9c33c80b6b
- URLScan · 2026-08-23: https://screenshots.phishdestroy.io/us/01a02e1e-803a-776e-a8fe-f2a8af94664f.png
  Captured: 2026-08-23 10:15:58 UTC
  Source report: https://urlscan.io/result/01a02e1e-803a-776e-a8fe-f2a8af94664f/
  SHA-256: be7f3c7cbbafc76c95d4408b8361fb824b6eda6018a997f9b14ae4dbfc194f1a
- URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a15442-357b-7143-b550-50da4e9c7318.png
  Captured: 2026-10-19 13:03:12 UTC
  Source report: https://urlscan.io/result/01a15442-357b-7143-b550-50da4e9c7318/
  SHA-256: 333c6e75b668e1b6450f921e0ed2597bd3602cd6048c91b51d62888b9474af5e
- URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a1550f-fc87-7700-ba4b-0e8a3e043f45.png
  Captured: 2026-10-19 16:48:12 UTC
  Source report: https://urlscan.io/result/01a1550f-fc87-7700-ba4b-0e8a3e043f45/
  SHA-256: 333c6e75b668e1b6450f921e0ed2597bd3602cd6048c91b51d62888b9474af5e
- URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a15570-3a95-73da-9802-cd6787991ad1.png
  Captured: 2026-10-19 18:33:32 UTC
  Source report: https://urlscan.io/result/01a15570-3a95-73da-9802-cd6787991ad1/
  SHA-256: 251099f2e948aa2169f598c232a1ef338501b8bf9c4ef231ac03d44e2d2cb4b4
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a156c6-c98b-7348-8f67-f6d35c3f5183.png
  Captured: 2026-10-20 00:47:16 UTC
  Source report: https://urlscan.io/result/01a156c6-c98b-7348-8f67-f6d35c3f5183/
  SHA-256: 333c6e75b668e1b6450f921e0ed2597bd3602cd6048c91b51d62888b9474af5e

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T16:43:39Z",
        "uuid": "01a1556a-d643-71ac-acdc-a7a043bfca31",
        "scanned_at": "2026-10-19T18:27:17Z",
        "final_url": "https://haantjesphotography.nl/zaza/paaaaaypaalo%20jdida%20(2)/paaaaaypaalo%20jdida/auth/login.php",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://haantjesphotography.nl/zaza/paaaaaypaalo%20jdida%20(2)/paaaaaypaalo%20jdida/auth/login.php",
                "from": "http://haantjesphotography.nl/zaza/paaaaaypaalo%20jdida%20(2)/paaaaaypaalo%20jdida/auth/login.php",
                "status": 307
            }
        ],
        "ip": "81.169.145.80",
        "ptr": "w80.rzone.de",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com",
            "cdnjs.cloudflare.com"
        ],
        "ips": [
            "142.250.195.227",
            "172.217.25.170",
            "104.17.24.14",
            "81.169.145.80"
        ],
        "asns": [
            "15169",
            "13335",
            "6724"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "ae562f4eef11a92b507534259b77411cf57d3f1d5c2ecb2a18b170cdeb41d9d5",
        "globals": [
            "$",
            "jQuery",
            "sendLog"
        ],
        "tls": {
            "san": [
                "haantjesphotography.nl",
                "www.haantjesphotography.nl"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "Sectigo Public Server Authentication CA DV R36",
            "subject": "haantjesphotography.nl",
            "protocol": "TLS 1.3",
            "valid_to": "2027-03-28T23:59:59Z",
            "valid_from": "2026-03-07T00:00:00Z"
        },
        "domain_age_days": 1302,
        "apex_age_days": 1302,
        "tls_age_days": 226,
        "tls_valid_days": 386,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Apache/2.4.68 (Unix)",
            "content-type": "text/html; charset=UTF-8",
            "x-powered-by": "PHP/8.2.34"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T17:55:37Z",
        "uuid": "239ed134-d162-4f67-9be1-aeace09db5af",
        "scanned_at": "2026-10-19T18:27:22Z",
        "final_url": "https://haantjesphotography.nl/",
        "status": 200,
        "history": [
            {
                "url": "https://haantjesphotography.nl/",
                "status": 200
            }
        ],
        "dom_hash": "e41035a8c1b6ab5aedade45d49d5d529fa2c70deaeb27d97a6a82801b97719c9",
        "doc_hash": "5190c9107942771914e973e639ed54ce0d3bcd1d350e8357968b9cf0f7bc0ad2",
        "domain_risks": [
            "Photography",
            "Society & Lifestyle"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "haantjesphotography.nl",
                "type": "A",
                "value": "81.169.145.80"
            },
            {
                "name": "haantjesphotography.nl",
                "type": "AAAA",
                "value": "2a01:238:20a:202:1080::"
            }
        ],
        "dnssec_valid": true,
        "ip": "81.169.145.80",
        "whois": {
            "registrar": "Domain Robot",
            "created": "2023-03-27T08:24:56Z",
            "updated": "2026-02-27T05:51:06Z",
            "nameservers": [
                "docks03.rzone.de",
                "shades15.rzone.de"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-20T18:06:15Z",
        "analysis_at": "2026-10-19T16:18:30Z",
        "stats": {
            "timeout": 0,
            "harmless": 50,
            "malicious": 8,
            "suspicious": 0,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "phishing",
            "G-Data": "phishing",
            "Sophos": "phishing",
            "SOCRadar": "phishing",
            "Gridinsoft": "phishing",
            "alphaMountain.ai": "phishing",
            "Google Safe Browsing": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "created": "2023-03-27T00:00:00Z",
        "updated": "2026-02-27T00:00:00Z",
        "first_seen": "2025-03-06T16:10:15Z",
        "dns": [
            {
                "ttl": 150,
                "type": "AAAA",
                "value": "2a01:238:20a:202:1080::"
            },
            {
                "ttl": 150,
                "type": "NS",
                "value": "docks03.rzone.de"
            },
            {
                "ttl": 150,
                "type": "A",
                "value": "81.169.145.80"
            },
            {
                "ttl": 150,
                "type": "SOA",
                "rname": "hostmaster.strato-rz.de",
                "value": "docks03.rzone.de"
            },
            {
                "ttl": 150,
                "type": "MX",
                "value": "smtpin.rzone.de",
                "priority": 5
            },
            {
                "ttl": 150,
                "type": "TXT",
                "value": "v=spf1 redirect=_spf.strato.com"
            },
            {
                "ttl": 150,
                "type": "NS",
                "value": "shades15.rzone.de"
            }
        ],
        "dns_at": "2026-10-19T16:24:11Z",
        "jarm": "2ad2ad0002ad2ad00042d42d0000004730e1a02fb93a679b09eac9e25c22fc",
        "cert": {
            "san": [
                "haantjesphotography.nl",
                "www.haantjesphotography.nl"
            ],
            "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36",
            "serial": "bc893d320834d976532a74453bfbbf9b",
            "sha256": "60b4f03b3889574dc6b58a2db524a31b8923145ab1f11bb8d71091e586759041",
            "subject": "haantjesphotography.nl",
            "valid_to": "2027-03-28T23:59:59Z",
            "valid_from": "2026-03-07T00:00:00Z"
        },
        "whois": {
            "created": "2023-03-27T00:00:00Z",
            "updated": "2026-02-27T00:00:00Z",
            "dnssec": "yes"
        },
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "last changed": "2026-02-27T05:51:06Z",
                "registration": "2023-03-27T08:24:56Z",
                "last update of RDAP database": "2026-10-19T13:08:49Z"
            },
            "registrar": "Domain Robot",
            "registrar_iana_id": "0000"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T20:01:57Z",
        "mail_config": {
            "mx": [
                "smtpin.rzone.de"
            ],
            "spf": "v=spf1 redirect=_spf.strato.com",
            "dane": true,
            "dmarc": true,
            "spf_lookups": 1
        },
        "caa_records": {
            "domain": "haantjesphotography.nl"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-19T18:27:50Z",
            "first": "2023-03-29T22:04:48Z",
            "changes": 3,
            "days_archived": 4,
            "scans_per_day": 0,
            "avg_page_bytes": 2531
        },
        "robots_txt": {
            "agents": [
                "Googlebot",
                "BingBot",
                "DuckDuckBot",
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://haantjesphotography.nl/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 13
        },
        "social_tags": {
            "ogUrl": "https://haantjesphotography.nl/Home/",
            "title": "Homepage",
            "ogType": "website",
            "ogImage": "https://haantjesphotography.nl/.cm4all/uproc.php/0/Naamloos-1_1.png",
            "ogTitle": "Homepage",
            "keywords": "Fotografie, Tilburg, Nederland, Portret, Dieren, Modellen, Photographer, Studio, Haantjes, horecafotografie, foodfotografie, cocktails, fotografen, cosplay, fantasy, event, gothic, zeeland, brabant, actief,",
            "description": "Don't shoot what it looks like, shoot what it feels like.",
            "canonicalUrl": "https://haantjesphotography.nl/Home/"
        },
        "trackers": {
            "requests": 50
        },
        "mixed_content": {
            "no_sri": [
                "https://strato-editor.com/cm4all-beng-proxy/beng-proxy.js",
                "https://strato-editor.com/.cm4all/res/static/jquery-1.7/jquery.js",
                "https://strato-editor.com/.cm4all/uro/assets/js/uro-min.js",
                "https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_093/1769040084.0386088/js/effects.js",
                "https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_093/1769040084.0386088/js/cm_template-focus-point.js",
                "https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_093/1769040084.0386088/js/cm-templates-global-script.js",
                "https://strato-editor.com/.cm4all/res/static/prototype-1.7.3/prototype.js",
                "https://strato-editor.com/.cm4all/res/static/jslib/1.4.1/js/legacy.js",
                "https://strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.89.7/js/widget-runtime.js",
                "https://strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.89.7/js/slideshow-common.js"
            ],
            "third_party_scripts": 11
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 6,
                "tls": 15,
                "wait": 316,
                "connect": 9,
                "download": 19
            },
            "response_ms": 365
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 46511,
            "co2_grams": 0.0017,
            "cleaner_than": 39
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "185.132.34.142",
                    "host": "shades15.rzone.de"
                },
                {
                    "ip": "217.160.80.130",
                    "host": "docks03.rzone.de"
                }
            ],
            "zone": "haantjesphotography.nl"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "vid",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "beng_proxy_session",
                    "session": true,
                    "http_only": true,
                    "same_site": "Strict"
                }
            ]
        },
        "location": {
            "ip": "2a01:238:20a:202:1080::",
            "asn": "6724",
            "org": "Strato AG",
            "city": "Karlsruhe",
            "country": "DE"
        },
        "ssl": {
            "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36",
            "subject": "haantjesphotography.nl"
        },
        "dns": {
            "A": [
                "81.169.145.80"
            ],
            "MX": [
                "{\"exchange\": \"smtpin.rzone.de\", \"priority\": 5}"
            ],
            "NS": [
                "docks03.rzone.de",
                "shades15.rzone.de"
            ],
            "SOA": "{\"nsname\": \"docks03.rzone.de\", \"hostmaster\": \"hostmaster.strato-rz.de\", \"serial\": 2023032728, \"refresh\": 86400, \"retry\": 7200, \"expire\": 604800, \"minttl\": 300}",
            "TXT": [
                "v=spf1 redirect=_spf.strato.com"
            ],
            "AAAA": [
                "2a01:238:20a:202:1080::"
            ]
        },
        "dnssec": {
            "ds": true,
            "rrsig": true,
            "dnskey": true
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "2a01:238:20a:202:1080::",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://haantjesphotography.nl"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Strato Website",
                "PHP",
                "UNIX",
                "Prototype",
                "Apache HTTP Server",
                "Modernizr",
                "jQuery",
                "Font Awesome",
                "Sectigo",
                "Open Graph"
            ]
        },
        "tls_labs": {
            "grades": [
                "A"
            ],
            "status": "READY"
        },
        "linked_pages": {
            "external": [
                "https://www.instagram.com/haantjes.photography/",
                "https://www.facebook.com/Haantjesphotography",
                "https://www.facebook.com/Haantjesphotography/",
                "https://www.instagram.com/haantjes.photography"
            ],
            "external_count": 4,
            "internal_count": 20
        },
        "whois": {
            "registrar": "Domain Robot Johanna-Dachs-Str. 55 93055  REGENSBURG Germany SIDN BV",
            "created": "2023-03-27T00:00:00Z",
            "updated": "2026-02-27T00:00:00Z",
            "status": [
                "active"
            ],
            "nameservers": [
                "docks03.rzone.de",
                "shades15.rzone.de"
            ]
        },
        "headers": {
            "headers": {
                "server": "Apache/2.4.68 (Unix)",
                "content-type": "text/html; charset=utf-8",
                "x-powered-by": "PHP/8.2.35"
            }
        }
    }
}
```