# PhishDestroy domain threat record: izifoki.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/izifoki.com/ Machine-readable companion: https://phishdestroy.io/domain/izifoki.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-26 00:31:28 UTC - Stored record updated: 2026-10-26 05:13:30 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.53.179.136 - Registrar in stored WHOIS data: Hosting Concepts B.V. d/b/a Registrar.eu - Registration date in stored WHOIS data: 2026-07-09 07:48:38 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17093-1ec4-715a-ba8c-975a951ee165/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/izifoki.com - Certificate Transparency search: https://crt.sh/?q=%25.izifoki.com - Web Archive lookup: https://web.archive.org/web/*/https://izifoki.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added izifoki.com to its internal blocklist on 2026-10-26 following an automated intake that cited a VirusTotal URL detection on 2026-10-25. The prior AI assessment recorded on 2026-10-26 reported insufficient page content to determine a specific malicious behavior. A page fetch on the same day showed the domain resolved without a cross‑site redirect. How the scam works No concrete fraud technique was observed on the site; the domain is classified as suspicious solely based on external detections. Such domains can be used for phishing, credential harvesting, or other social‑engineering attacks, but no evidence ties izifoki.com to a particular scheme. Evidence VirusTotal’s domain scan on 2026-10-26 returned one suspicious detection from SOCRadar and no malicious detections out of 92 engines. The VirusTotal URL scan on the same date recorded one malicious detection among 93 engines. urlscan.io captured the site on 2026-10-25, marking the overall result clean while its machine‑learning engine gave a malicious score of 73. Google Safe Browsing reported no threat on 2026-10-26, OTX listed one pulse mentioning the domain, and no external blocklists flagged it as of that date. PhishDestroy’s internal list also marks the domain as blocked. Infrastructure The domain was registered on 2026-07-09 through Hosting Concepts B.V. d/b/a Registrar.eu and carries a clientTransferProhibited status. DNS records show an A record pointing to 185.53.179.136 in Germany, hosted by Team Internet AG, with Cloudflare name servers (jakub.ns.cloudflare.com, maeve.ns.cloudflare.com). The TLS certificate, issued by Google Trust Services, is valid from 2026-09-06 to 2026-12-05 and covers izifoki.com and *.izifoki.com. What to do Visitors should avoid entering credentials or personal data on the site; if any information was submitted, change associated passwords and monitor accounts for unusual activity. Security teams can block the exact domain in perimeter defenses and review logs for connections to 185.53.179.136. Continue to monitor threat feeds for any updates on izifoki.com. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17093-1ec4-715a-ba8c-975a951ee165/ Cloudflare Radar report: https://radar.cloudflare.com/scan/77d4d4ee-e177-4409-bfd8-b09643340f3a Stored capture screenshot: https://urlscan.io/screenshots/01a17093-1ec4-715a-ba8c-975a951ee165.png URLScan screenshot (2026-10-24T21:54:14Z): https://screenshots.phishdestroy.io/us/01a16fe8-2451-7530-b7d9-7971272bdfa4.png URLScan capture report: https://urlscan.io/result/01a16fe8-2451-7530-b7d9-7971272bdfa4/ VirusTotal report: https://www.virustotal.com/gui/domain/izifoki.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=izifoki.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-26 00:43:40 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a17093-1ec4-715a-ba8c-975a951ee165.png Captured: 2026-10-26 00:31:28 UTC - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/77d4d4ee-e177-4409-bfd8-b09643340f3a.png Captured: 2026-10-26 00:41:58 UTC Source report: https://radar.cloudflare.com/scan/77d4d4ee-e177-4409-bfd8-b09643340f3a SHA-256: 1a670d656e470901f5ff7948f40229a7395e07ac4d2a3cd7e0a320b793f23c08 - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16fe8-2451-7530-b7d9-7971272bdfa4.png Captured: 2026-10-24 21:54:14 UTC Source report: https://urlscan.io/result/01a16fe8-2451-7530-b7d9-7971272bdfa4/ SHA-256: 6915e01ea5a2a1c921e009fa2cfd0e4b062351aded40867aa369a203be4951fe ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T00:42:15Z", "uuid": "01a17093-1ec4-715a-ba8c-975a951ee165", "scanned_at": "2026-10-25T01:02:52Z", "final_url": "https://izifoki.com/", "domain_age_days": 107, "apex_age_days": 107, "requests": 1, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 73, "malicious": true }, "overall": { "score": 0, "malicious": false } } }, "cf": { "v": 1, "fetched_at": "2026-10-26T01:00:09Z", "uuid": "77d4d4ee-e177-4409-bfd8-b09643340f3a", "scanned_at": "2026-10-26T00:41:58Z", "final_url": "https://izifoki.com/", "history": [ { "url": "https://izifoki.com/", "status": 0 } ], "dom_hash": "222edc6576ce4f900a55dd02c5523f77c5fa64ee8b4e540f3ff8452026c169a8", "domain_risks": [ "Business", "Business & Economy" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "izifoki.com", "type": "A", "value": "185.53.179.136" } ], "dnssec_valid": false, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-07-09T09:48:38Z", "updated": "2026-10-24T23:59:55Z", "expires": "2027-07-09T09:48:38Z", "nameservers": [ "ina1.registrar.eu", "ina2.registrar.eu", "ina3.registrar.eu" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T00:40:24Z", "analysis_at": "2026-10-25T19:44:03Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 1, "undetected": 36 }, "detections": { "SOCRadar": "suspicious" }, "reputation": 0, "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-07-09T09:48:38Z", "expires": "2027-07-09T09:48:38Z", "updated": "2026-07-09T11:49:35Z", "first_seen": "2026-07-09T10:18:38Z", "dns": [ { "ttl": 900, "type": "SOA", "rname": "noreply.registrar.eu", "value": "ina1.registrar.eu" }, { "ttl": 900, "type": "NS", "value": "ina3.registrar.eu" }, { "ttl": 900, "type": "A", "value": "185.53.179.136" }, { "ttl": 900, "type": "NS", "value": "ina2.registrar.eu" }, { "ttl": 900, "type": "NS", "value": "ina1.registrar.eu" } ], "dns_at": "2026-10-25T19:53:43Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "izifoki.com", "*.izifoki.com" ], "issuer": "Google Trust Services / WE1", "serial": "5e204a80a5c48abf0e8068f06e546719", "sha256": "0c0735d2b9bbfe9a4513be7eb08802429413f4afa3c407c4911e6961562ff161", "subject": "izifoki.com", "valid_to": "2026-12-05T11:43:12Z", "valid_from": "2026-09-06T10:45:24Z" }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "registrar_iana_id": "1647", "registrar_url": "http://www.openprovider.com", "created": "2026-07-09T09:48:38Z", "updated": "2026-07-09T09:49:34Z", "expires": "2027-07-09T09:48:38Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "jakub.ns.cloudflare.com", "maeve.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-07-09T09:48:38Z", "registration": "2026-07-09T09:48:38Z", "registrar expiration": "2027-07-09T09:48:38Z", "last update of RDAP database": "2026-10-25T19:53:43Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T00:42:51Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "izifoki.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "dns_server": { "ns": [ { "ip": "172.64.53.22", "host": "ina3.registrar.eu" }, { "ip": "172.64.52.101", "host": "ina1.registrar.eu" }, { "ip": "172.64.52.101", "host": "ina2.registrar.eu" } ], "zone": "izifoki.com" }, "location": { "ip": "185.53.179.136", "asn": "206834", "org": "Team Internet AG", "country": "DE" }, "dns": { "A": [ "185.53.179.136" ], "NS": [ "ina3.registrar.eu", "ina1.registrar.eu", "ina2.registrar.eu" ], "SOA": "{\"nsname\": \"ina1.registrar.eu\", \"hostmaster\": \"noreply.registrar.eu\", \"serial\": 2016122000, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 900}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "185.53.179.136", "family": 4 }, "subdomains": { "count": 1, "subdomains": [ "www.izifoki.com" ] }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-07-09T09:48:38Z", "updated": "2026-10-24T23:59:55Z", "expires": "2027-07-09T09:48:38Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ina1.registrar.eu", "ina2.registrar.eu", "ina3.registrar.eu" ] } } } ```