# igetx.nesemu2.com — Recorded security evidence | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/igetx.nesemu2.com/ Machine-readable companion: https://phishdestroy.io/domain/igetx.nesemu2.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Unverified - First observed by PhishDestroy: 2026-09-10 19:24:03 UTC - Selected availability observation: 2026-11-05T23:23:07Z - Stored record updated: 2026-11-05 23:23:41 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 165.245.179.214 - Registrar in stored WHOIS data: Register.com - Network Solutions, LLC - Registrar country in stored WHOIS data: US - Registration date (registry RDAP, nesemu2.com): 2013-07-16 04:54:12 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a08cd1-e57a-718c-bcf7-b1d66024c36f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/igetx.nesemu2.com - Certificate Transparency search: https://crt.sh/?q=%25.igetx.nesemu2.com - Web Archive lookup: https://web.archive.org/web/*/https://igetx.nesemu2.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy stores a record for igetx.nesemu2.com. Source observations are dated separately; missing checks do not establish safety. PhishDestroy stores a record for igetx.nesemu2.com. Source observations are dated separately; missing checks do not establish safety. A reviewed analysis is not available for this text revision. Consult the dated source records below. Package revision: 256eb350934cd00bbf54f04de1349b6cf952e12bb5c11971593f49eb6016ba68 Source facts (timestamps as stored): {"record_id":934263,"first_recorded_at":"2026-09-10 21:24:03","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":16,"denominator":92,"malicious":14,"suspicious":2,"vendors":{"DNS8":"phishing","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","URLQuery":"malicious","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-18T11:50:48Z","checked_at":null,"fetched_at":"2026-10-22T17:44:50Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":null,"numerator":16,"denominator":89,"malicious":null,"suspicious":null,"vendors":["BitDefender","Chong Lua Dao","CRDF","CyRadar","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","LevelBlue","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":null,"checked_at":"2026-09-10 22:25:29","fetched_at":null,"time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"phishing","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","URLQuery":"malicious","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","URLQuery","Seclookup","Gridinsoft","BitDefender","Chong Lua Dao","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":46,"malicious":14,"suspicious":2,"undetected":30}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-09-16 06:00:17"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-09-11 00:30:49"},"availability":{"state":"unknown","label_key":"availability.unverified","detail_key":"detail.no_response","params":[],"source":"current_http_probe","record_id":934263,"scope":"checked_url","observed_at":"2026-11-05T23:23:07Z","http_status":null,"http_observed_at":"2026-11-05T23:23:07Z","stored_http_code":0,"stored_http_observed_at":"2026-11-05T23:23:07Z","legacy_site_status":"dead","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":"2026-11-05T03:14:35Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-09-10: https://screenshots.phishdestroy.io/01a08cd1-e57a-718c-bcf7-b1d66024c36f.png Captured: 2026-09-10 19:36:07 UTC Source report: https://urlscan.io/result/01a08cd1-e57a-718c-bcf7-b1d66024c36f/ - URLScan capture: https://urlscan.io/screenshots/019f46a5-fe18-701b-9566-e9dab32f7744.png Source report: https://urlscan.io/result/019f46a5-fe18-701b-9566-e9dab32f7744/ - URLQuery: https://screenshots.phishdestroy.io/uq/3633d935-f6ce-47e2-8656-ce3b08cfb634.png Captured: 2026-09-10 19:51:37 UTC Source report: https://urlquery.net/report/3633d935-f6ce-47e2-8656-ce3b08cfb634 SHA-256: 700b79ed1f685bf601be09bd31336253a5b3a482484fbb4258e2a9c830fa1255 - URLScan · 2026-09-10: https://screenshots.phishdestroy.io/us/01a08ccc-85ff-700f-952d-d5c901b4df45.png Captured: 2026-09-10 19:30:15 UTC Source report: https://urlscan.io/result/01a08ccc-85ff-700f-952d-d5c901b4df45/ SHA-256: ba8cb8bd51dad5e0243913955d545ea0b44daed289d4ede4a1274bfae5009b16 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0ab3c0a8-d5fc-4b62-92d5-d1acdc6fc819.png Captured: 2026-09-10 19:27:53 UTC Source report: https://radar.cloudflare.com/scan/0ab3c0a8-d5fc-4b62-92d5-d1acdc6fc819 SHA-256: 36d07495bcca5f3e48f8eca8aedf572633b1c8597772c12bfb5fcf7563770e66 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T02:21:46Z", "uuid": "01a08cd1-e57a-718c-bcf7-b1d66024c36f", "scanned_at": "2026-09-10T19:36:07Z", "final_url": "https://igetx.nesemu2.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://igetx.nesemu2.com/", "from": "http://igetx.nesemu2.com/", "status": 307 } ], "ip": "165.245.179.214", "ips": [ "165.245.179.214" ], "asns": [ "14061" ], "countries": [ "SG" ], "doc_hash": "0bae6089419ea8f95d7ddf86ba40a6b6c8ae6fca852dd9b70351f869e19df27b", "tls": { "san": [ "165.245.179.214" ], "cipher": "AES_256_GCM", "issuer": "YR1", "protocol": "TLS 1.3", "valid_to": "2026-09-15T05:14:27Z", "valid_from": "2026-09-08T13:14:28Z" }, "domain_age_days": 66, "apex_age_days": 2030, "tls_age_days": 2, "tls_valid_days": 6, "requests": 2, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -33, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T02:33:27Z", "uuid": "0ab3c0a8-d5fc-4b62-92d5-d1acdc6fc819", "scanned_at": "2026-09-10T19:27:53Z", "final_url": "https://igetx.nesemu2.com/", "history": [ { "url": "https://igetx.nesemu2.com/", "status": 0 } ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "igetx.nesemu2.com", "type": "A", "value": "165.245.179.214" } ], "dnssec_valid": false, "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Register.com - Network Solutions, LLC", "created": "2013-07-16T04:54:12Z", "updated": "2026-06-16T07:08:05Z", "expires": "2027-07-16T04:54:12Z", "nameservers": [ "ns1.digitalocean.com", "ns2.digitalocean.com", "ns3.digitalocean.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T17:44:50Z", "analysis_at": "2026-10-18T11:50:48Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 14, "suspicious": 2, "undetected": 30 }, "detections": { "DNS8": "phishing", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "URLQuery": "malicious", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "Register.com - Network Solutions, LLC", "created": "2013-07-16T04:54:12Z", "expires": "2027-07-16T04:54:12Z", "updated": "2026-06-16T07:08:05Z", "first_seen": "2026-07-06T19:52:44Z", "dns": [ { "ttl": 600, "type": "A", "value": "165.245.179.214" } ], "dns_at": "2026-10-18T11:56:43Z", "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763", "cert": { "san": [ "165.245.179.214" ], "issuer": "Let's Encrypt / YR2", "serial": "59f0c14aae182592943cd512a16a157bbab", "sha256": "f8c96f4c5e92cea762d9f025d616667b0f06741baeebd9fbdeb2a3937a3a2509", "valid_to": "2026-10-13T05:14:22Z", "valid_from": "2026-10-06T13:14:23Z" }, "whois": { "registrar": "Register.com - Network Solutions, LLC", "registrar_iana_id": "9", "registrar_url": "http://www.register.com", "created": "2013-07-16T04:54:12Z", "updated": "2026-06-16T07:08:05Z", "expires": "2027-07-16T04:54:12Z", "status": [ "ok" ], "nameservers": [ "ns1.digitalocean.com", "ns2.digitalocean.com", "ns3.digitalocean.com" ], "dnssec": "unsigned" } } } ``` ## Complete dated records Availability observations: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/igetx.nesemu2.com/records.json?source=content&format=json ## Dated availability observation No conclusive current response is stored ```json { "state": "unknown", "label_key": "availability.unverified", "detail_key": "detail.no_response", "params": [], "source": "current_http_probe", "record_id": 934263, "scope": "checked_url", "observed_at": "2026-11-05T23:23:07Z", "http_status": null, "http_observed_at": "2026-11-05T23:23:07Z", "stored_http_code": 0, "stored_http_observed_at": "2026-11-05T23:23:07Z", "legacy_site_status": "dead", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": "2026-11-05T03:14:35Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```