# id76605761.click Cloudflare Access Block Page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/id76605761.click/
Machine-readable companion: https://phishdestroy.io/domain/id76605761.click/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: Reachable · access restricted
- First observed by PhishDestroy: 2026-10-29 01:05:40 UTC
- Selected availability observation: 2026-11-05T00:08:21Z
- Stored record updated: 2026-11-05 00:08:21 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: NameSilo, LLC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 403 (observed: 2026-11-05T00:08:21Z)
- Registration date in stored WHOIS data: 2026-03-30 07:21:22 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1854f-4df0-7518-9717-2930234cbfbc/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/id76605761.click
- Certificate Transparency search: https://crt.sh/?q=%25.id76605761.click
- Web Archive lookup: https://web.archive.org/web/*/https://id76605761.click/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

The stored capture of id76605761.click shows a Cloudflare block page denying access, while PhishDestroy's VirusTotal data flags the domain.

The stored capture of id76605761.click shows a Cloudflare block page headed "Sorry, you have been blocked," stating the visitor cannot access the domain. It explains that a security service protects the site from online attacks and that a recent action triggered the block. Two sections offer guidance: one lists possible triggers such as certain words, SQL commands or malformed data, and the other suggests emailing the site owner with the Cloudflare Ray ID.

The stored VirusTotal result reports 1 of 92 engines flagged the domain. SOCRadar supplied the label "phishing"; other vendors' labels are not supplied here. This is a scanner result only and does not establish impersonation, theft or current behavior.
Package revision: bc921711e4d7fe3c1d8b24068b043b97fa032adfa37b665be0ed09490c52264b
Text generated (not scan time): 2026-10-29 02:16:22
Reviewed evidence snapshot: {"domain":"id76605761.click","screenshot_available":true,"initial_ai_description":"Site returned a Cloudflare challenge page, content could not be assessed.","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-10-29","analysis_date":"2026-10-23","flagging_vendors":["SOCRadar"],"vendor_labels":{"SOCRadar":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T01:14:59Z"}}
Source facts (timestamps as stored): {"record_id":1701110,"first_recorded_at":"2026-10-29 02:05:40","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"SOCRadar":"phishing"},"observed_at":"2026-10-23T20:12:11Z","checked_at":null,"fetched_at":"2026-10-29T01:08:37Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":20,"denominator":92,"malicious":null,"suspicious":null,"vendors":["ADMINUSLabs","alphaMountain.ai","Bfore.Ai PreCrime","BitDefender","Chong Lua Dao","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","LevelBlue","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":null,"checked_at":"2026-11-01 04:02:21","fetched_at":"2026-11-01 03:02:22","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"SOCRadar":"phishing"},"vendor_names":["SOCRadar"],"stats":{"timeout":0,"harmless":56,"malicious":1,"suspicious":0,"undetected":35}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-04 12:01:07"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-10-29 04:30:27"},"availability":{"state":"restricted","label_key":"availability.access_restricted","detail_key":"detail.restricted","params":[],"source":"current_http_probe","record_id":1701110,"scope":"checked_url","observed_at":"2026-11-05T00:08:21Z","http_status":403,"http_observed_at":"2026-11-05T00:08:21Z","stored_http_code":403,"stored_http_observed_at":"2026-11-05T00:08:21Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-04T12:09:51Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}}

## Stored page captures

- Stored capture: https://i.ibb.co/4cJSPsy/89c09322d7c1.png
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a1854f-4df0-7518-9717-2930234cbfbc.png
  Captured: 2026-10-29 01:39:03 UTC
  Source report: https://urlscan.io/result/01a1854f-4df0-7518-9717-2930234cbfbc/
  SHA-256: b51d616ca8b196c78e9f642a724f23c5ed28ce88d60a841d295a44772c667d40
- URLScan · 2026-08-25: https://screenshots.phishdestroy.io/us/01a0377d-2470-746a-b8cd-01395af5f57a.png
  Captured: 2026-08-25 05:56:11 UTC
  Source report: https://urlscan.io/result/01a0377d-2470-746a-b8cd-01395af5f57a/
  SHA-256: 469021832be53f38803dd1d28f954fc68fce085d0df0a88b1a647ce759df094b
- URLScan · 2026-05-02: https://screenshots.phishdestroy.io/us/019de7e6-3978-74c9-9b56-815d290b8c6e.png
  Captured: 2026-05-02 08:55:24 UTC
  Source report: https://urlscan.io/result/019de7e6-3978-74c9-9b56-815d290b8c6e/
  SHA-256: 347e7f511948dc79374461857a9790f75cd4793224168f7d4e89ddd1cc4a5226
- URLScan · 2026-05-04 · via kickstarter-authentication.info: https://screenshots.phishdestroy.io/us/019df054-2c36-73f9-b68f-614a8445da75.png
  Captured: 2026-05-04 00:12:28 UTC
  Source report: https://urlscan.io/result/019df054-2c36-73f9-b68f-614a8445da75/
  SHA-256: 9a12c1b975ad6401f347e1bbb13bc4507c4e3eaa9221c452aa208136c637c82a
- URLScan · 2026-08-24: https://screenshots.phishdestroy.io/us/01a0325a-fa04-76b5-8d5e-db3f344e3b27.png
  Captured: 2026-08-24 06:00:32 UTC
  Source report: https://urlscan.io/result/01a0325a-fa04-76b5-8d5e-db3f344e3b27/
  SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a18539-6539-73e4-b752-4518ccad8b10.png
  Captured: 2026-10-29 01:14:59 UTC
  Source report: https://urlscan.io/result/01a18539-6539-73e4-b752-4518ccad8b10/
  SHA-256: d7b36ebaafcc04af002fa19ec3bc549151b26d9bced5e07c0100742289ab8f6e
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f72562ef-f683-46ec-b2db-05393f41fbc9.png
  Captured: 2026-10-29 01:09:39 UTC
  Source report: https://radar.cloudflare.com/scan/f72562ef-f683-46ec-b2db-05393f41fbc9
  SHA-256: e474a175f992442a69e502e42d7748076f7b37bd4715cf7c03ed2b7ff55231c3

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-29T01:51:01Z",
        "uuid": "01a1854f-4df0-7518-9717-2930234cbfbc",
        "scanned_at": "2026-10-29T01:39:03Z",
        "final_url": "https://id76605761.click/",
        "status": 403,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://id76605761.click/",
                "from": "http://id76605761.click/",
                "status": 307
            }
        ],
        "ip": "104.21.77.179",
        "domains": [
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.16.79.73",
            "104.21.77.179"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "www.cloudflare.com"
        ],
        "doc_hash": "6fe09089dedc0b4411c0006093104281b93a0d29df949ec8bdb222a87e46108d",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142",
            "c284cfe0e04c7b923f188d2b0d3cacd47b0d0e304b914c717bc9cd1334527f2e"
        ],
        "globals": [
            "__cfQR",
            "__cfBeacon",
            "_cf_translation",
            "__cfRLUnblockHandlers"
        ],
        "cookies": [
            "cf_clearance"
        ],
        "tls": {
            "san": [
                "*.id76605761.click",
                "id76605761.click"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "id76605761.click",
            "protocol": "QUIC",
            "valid_to": "2026-12-23T01:58:58Z",
            "valid_from": "2026-09-24T01:58:59Z"
        },
        "domain_age_days": 212,
        "apex_age_days": 212,
        "tls_age_days": 34,
        "tls_valid_days": 89,
        "requests": 12,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 88,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin",
            "priority": "u=0,i"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-29T01:15:32Z",
        "uuid": "f72562ef-f683-46ec-b2db-05393f41fbc9",
        "scanned_at": "2026-10-29T01:09:39Z",
        "final_url": "https://id76605761.click/",
        "status": 200,
        "history": [
            {
                "url": "https://id76605761.click/",
                "status": 200
            }
        ],
        "dom_hash": "2bfae74f6225af3cbdc3dad23b0b26b7b1da2ce7e290a3aa343a5812ba7ec96c",
        "doc_hash": "2d125e3b05484a7753586b268e2b15d0e89e7d441c6e32df95b80a3ecd437715",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "id76605761.click",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "id76605761.click",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "id76605761.click",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            },
            {
                "name": "id76605761.click",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.28",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-03-30T09:21:21Z",
            "updated": "2026-04-04T09:21:50Z",
            "expires": "2027-03-30T09:21:21Z",
            "nameservers": [
                "magali.ns.cloudflare.com",
                "keaton.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-29T01:08:37Z",
        "analysis_at": "2026-10-23T20:12:11Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 35
        },
        "detections": {
            "SOCRadar": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga",
            "hex"
        ],
        "created": "2026-03-30T00:00:00Z",
        "updated": "2026-03-30T00:00:00Z",
        "first_seen": "2026-03-30T11:09:21Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "keaton.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "keaton.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "magali.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:d2ec"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::6815:4db3"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.210.236"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.77.179"
            }
        ],
        "dns_at": "2026-10-23T20:17:43Z",
        "jarm": "00000000000000000042d43d00041da8040ca1d7d1b3e955a3535eb361ef06",
        "cert": {
            "san": [
                "*.id76605761.click",
                "id76605761.click"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6fbe39f728d633d673d56f3abf00255c484",
            "sha256": "5da75d1eb1484042303c568b2089025d50a1a8adeb804ee4450490a606b5630a",
            "subject": "id76605761.click",
            "valid_to": "2026-12-23T01:58:58Z",
            "valid_from": "2026-09-24T01:58:59Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-03-30T09:21:21Z",
                "last changed": "2026-04-04T09:21:50Z",
                "registration": "2026-03-30T09:21:21Z",
                "last update of RDAP database": "2026-10-22T00:15:06Z"
            },
            "registrar": "NameSilo, LLC",
            "registrar_iana_id": "1479"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-29T01:15:51Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "id76605761.click"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-29T01:06:53Z",
            "first": "2026-10-22T14:39:53Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.16,
            "avg_page_bytes": 1622
        },
        "trackers": {
            "requests": 5
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.29",
                    "host": "magali.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.44.181",
                    "host": "keaton.ns.cloudflare.com"
                }
            ],
            "zone": "id76605761.click"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "id76605761.click"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "magali.ns.cloudflare.com",
                "keaton.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"keaton.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416424599, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-03-30T09:21:21Z",
            "updated": "2026-04-04T09:21:50Z",
            "expires": "2027-03-30T09:21:21Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "magali.ns.cloudflare.com",
                "keaton.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8",
                "content-security-policy": "default-src 'none'; script-src 'nonce-Cr3w3plf3ZyWMJrKFcoWrP' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenge",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin",
                "permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*",
                "cross-origin-opener-policy": "same-origin",
                "cross-origin-resource-policy": "same-origin",
                "cross-origin-embedder-policy": "require-corp"
            }
        }
    }
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a18539-6539-73e4-b752-4518ccad8b10.png","source":"URLScan","report_url":"https://urlscan.io/result/01a18539-6539-73e4-b752-4518ccad8b10/","captured_at":"2026-10-29T01:14:59Z","sha256":"d7b36ebaafcc04af002fa19ec3bc549151b26d9bced5e07c0100742289ab8f6e","model_image_sha256":"89ac6441767048fd1437ff8d24719c64a43911fc3b169de2ffad2f546adebcfa","available":true,"content_status":null}

## Complete dated records
Availability observations: https://phishdestroy.io/domain/id76605761.click/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/id76605761.click/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/id76605761.click/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/id76605761.click/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/id76605761.click/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/id76605761.click/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/id76605761.click/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/id76605761.click/records.json?source=content&format=json

## Dated availability observation
Reachable response; page content was not verified
```json
{
    "state": "restricted",
    "label_key": "availability.access_restricted",
    "detail_key": "detail.restricted",
    "params": [],
    "source": "current_http_probe",
    "record_id": 1701110,
    "scope": "checked_url",
    "observed_at": "2026-11-05T00:08:21Z",
    "http_status": 403,
    "http_observed_at": "2026-11-05T00:08:21Z",
    "stored_http_code": 403,
    "stored_http_observed_at": "2026-11-05T00:08:21Z",
    "legacy_site_status": "alive",
    "supports_outcome_badge": false,
    "content_classification": "served_at_root",
    "content_classification_at": "2026-11-04T12:09:51Z",
    "registration_state": "unknown",
    "policy": "20261102-dated-availability-v2"
}
```