# PhishDestroy domain threat record: hashflow-red.vercel.app Content language: English Canonical HTML report: https://phishdestroy.io/domain/hashflow-red.vercel.app/ Machine-readable companion: https://phishdestroy.io/domain/hashflow-red.vercel.app/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 03:13:38 UTC - Last availability or vendor check: 2026-10-23 03:13:38 UTC - Stored record updated: 2026-10-23 06:30:36 UTC - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: hashflow ## Stored infrastructure - Observed IP address: 216.198.79.67 - Registrar in stored WHOIS data: Vercel Inc. - Registration date (registry RDAP, vercel.app): 2020-01-28 03:03:04 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a166be-7380-756c-8d15-890c3841890b/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/hashflow-red.vercel.app - Certificate Transparency search: https://crt.sh/?q=%25.hashflow-red.vercel.app - Web Archive lookup: https://web.archive.org/web/*/https://hashflow-red.vercel.app/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/RG079z1V/7e33abf1ee80.png Captured: 2026-10-23 03:13:38 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a166be-7380-756c-8d15-890c3841890b.png Captured: 2026-10-23 03:13:38 UTC Source report: https://urlscan.io/result/01a166be-7380-756c-8d15-890c3841890b/ - URLScan capture 2: https://urlscan.io/screenshots/01a15d07-3e3d-763d-8b2a-1bb64e893bfe.png Captured: 2026-10-23 01:29:29 UTC Source report: https://urlscan.io/result/01a15d07-3e3d-763d-8b2a-1bb64e893bfe/ - URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10aeb-46ac-742a-9611-08441a6c0881.png Captured: 2026-10-05 07:16:04 UTC Source report: https://urlscan.io/result/01a10aeb-46ac-742a-9611-08441a6c0881/ SHA-256: 579d63cba316e8cec948835290893b8727aeaba976f8b3040a9b2e06387510b2 - URLScan · 2026-10-05: https://screenshots.phishdestroy.io/us/01a10bdd-c26d-7131-ab99-39876afc919e.png Captured: 2026-10-05 11:40:56 UTC Source report: https://urlscan.io/result/01a10bdd-c26d-7131-ab99-39876afc919e/ SHA-256: e518051a3a3216bab347c802dfa6fef59c8836cb1bc66a2c243cd3b137f09ed9 - URLScan · 2026-10-13: https://screenshots.phishdestroy.io/us/01a133c6-7c98-760d-9f6c-a58649977747.png Captured: 2026-10-13 05:40:32 UTC Source report: https://urlscan.io/result/01a133c6-7c98-760d-9f6c-a58649977747/ SHA-256: 2b9c09e23dc28101370f5eec133d87ebb87604f0ba14778fc14b06a8533ed0ea - URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a148d1-2996-717d-97ef-dfbb9523be4c.png Captured: 2026-10-17 07:43:57 UTC Source report: https://urlscan.io/result/01a148d1-2996-717d-97ef-dfbb9523be4c/ SHA-256: 49bf353060c19e93c285f12cd9fb89517a049be281a6fe0fca717392b1c6d39b - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16669-09cb-7756-a017-f2bf2db17787.png Captured: 2026-10-23 02:02:46 UTC Source report: https://urlscan.io/result/01a16669-09cb-7756-a017-f2bf2db17787/ SHA-256: 694ade04cefca2944885e9c801b29b048491fb6ebf5c59b356e5f46fc7890f12 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a166b7-a0e6-706d-bf42-35f49c988c1c.png Captured: 2026-10-23 03:04:40 UTC Source report: https://urlscan.io/result/01a166b7-a0e6-706d-bf42-35f49c988c1c/ SHA-256: d4a9614a9729c5bcc323851b36315bf65087aafd29c66b364baf861e80215237 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T03:25:59Z", "uuid": "01a166be-7380-756c-8d15-890c3841890b", "scanned_at": "2026-10-23T03:12:09Z", "final_url": "https://hashflow-red.vercel.app/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://hashflow-red.vercel.app/", "from": "http://hashflow-red.vercel.app/", "status": 307 } ], "ip": "64.29.17.67", "domains": [ "testnet.hsk.xyz", "api.web3modal.org", "pulse.walletconnect.org" ], "ips": [ "104.18.19.237", "104.26.11.218", "64.29.17.67" ], "asns": [ "13335", "16509" ], "countries": [ "US" ], "doc_hash": "ac8e4ed29c975a4f0cf00c05ba0610f5fcd31ea0feb17d1fce919932001d3188", "script_hashes": [ "75e58c4026aab7d1c5119a25498903c061fa8c8f6145ec252dbf767209555d45", "4a47a6431fe4203d07c505bf2351ed56ac9e7b800e64f0637e2275c3301a9bc7", "ea69599f220f71c47f4e86eb905c358937d321b6a845f58ef5a883ae44a27562", "13849679476c0d360a7c9c27aa6fbd82e396db0e29b71a296b6ce2da3f335a0a", "2ee3a1163bbc0aec5250ef114a16d8117f5c58436c79b61ba1d6d2a441ff7c59", "497bd3c45ff53ac9a95f73cd81ee9cce408a26ae7b37e236a8eb9681ddd5755e", "3483786f1ee91e17ad8f6ee440172d417dec71569007fca6375507fef5a6ecb6", "14031f2a2359c449ac10532f37b4a118b0849b895670c4e72902cdb33963d7df", "1b2cb08627a4fd837c23b1a3a695d629e5aad5b88deef6655427eddc8ac79d1c", "0465a1be41c5e8b7df3abfdd690701b4324722877b6a1013a1521ec68d65227e" ], "globals": [ "$RB", "$RV", "$RC", "__next_f", "$RT", "TURBOPACK", "next", "__webpack_hash__", "mmsdk", "_walletConnectCore_clientTwo_count", "downloadLogsBlobInBrowser", "_walletConnectCore_clientTwo", "_walletConnectCore_clientOne_count", "_walletConnectCore_clientOne", "litPropertyMetadata", "reactiveElementVersions", "litHtmlVersions", "litElementVersions" ], "storage_keys": [ "wagmi.store", "rk-version", "mm-sdk-anon-id", "@appkit/active_caip_network_id", "@appkit/active_namespace", "@appkit/connection_status", "base-acc-sdk.store" ], "tls": { "san": [ "*.vercel.app" ], "cipher": "AES_128_GCM", "issuer": "WR1", "subject": "*.vercel.app", "protocol": "TLS 1.3", "valid_to": "2026-11-27T19:48:08Z", "valid_from": "2026-08-29T19:48:09Z" }, "domain_age_days": 17, "apex_age_days": 17, "tls_age_days": 54, "tls_valid_days": 89, "requests": 44, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000; includeSubDomains; preload" } }, "vt": { "v": 1, "fetched_at": "2026-10-23T03:47:32Z", "analysis_at": "2026-10-22T13:04:07Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "registrar": "Tucows Domains Inc", "created": "2020-01-28T03:03:04Z", "expires": "2026-01-28T03:03:04Z", "updated": "2025-01-26T03:25:55Z", "first_seen": "2026-10-05T07:15:33Z", "dns": [ { "ttl": 300, "type": "A", "value": "64.29.17.67" }, { "ttl": 300, "type": "A", "value": "216.198.79.67" } ], "dns_at": "2026-10-22T13:04:29Z", "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb", "cert": { "san": [ "*.vercel.app" ], "issuer": "Google Trust Services / WR1", "serial": "f7911168ffa7d0f4135e24792e7a52a8", "sha256": "8f46c4a0a289bfde4060d06986f2af761ee62d668dde972e6bef4687ee4f6093", "subject": "*.vercel.app", "valid_to": "2026-11-27T19:48:08Z", "valid_from": "2026-08-29T19:48:09Z" }, "whois": { "registrar": "Tucows Domains Inc", "registrar_iana_id": "69", "registrar_url": "http://www.tucows.com", "created": "2020-01-28T03:03:04Z", "updated": "2025-01-26T03:25:55Z", "expires": "2026-01-28T03:03:04Z", "status": [ "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "ns1.vercel-dns-3.com", "ns2.vercel-dns-3.com", "ns3.vercel-dns-3.com", "ns4.vercel-dns-3.com" ], "dnssec": "unsigned" } } } ```