# PhishDestroy domain threat record: janatatimes.co.in

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/janatatimes.co.in/
Machine-readable companion: https://phishdestroy.io/domain/janatatimes.co.in/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 15:27:15 UTC
- Last availability or vendor check: 2026-10-22 10:49:29 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 7/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 176.9.144.171
- Registrar in stored WHOIS data: HIOX SOFTWARES PRIVATE LIMITED
- Registrar country in stored WHOIS data: IN
- Last stored HTTP status: 200
- Registration date (registry RDAP, janatatimes.co.in): 2026-03-17 16:07:58 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15f1c-a522-772a-808b-7c9f7406f0ef/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/janatatimes.co.in
- Certificate Transparency search: https://crt.sh/?q=%25.janatatimes.co.in
- Web Archive lookup: https://web.archive.org/web/*/https://janatatimes.co.in/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed janatatimes.co.in on 2026-10-21 after an intake flagged six malicious VirusTotal detections. The recorded page title was “Janata Times” and the HTTP response code was 200 when fetched on 2026-10-21. No additional malicious behavior was observed in the captured page snapshot.

How the scam works
The listing is based on vendor detections that commonly label sites as phishing, spam or malicious content, but no specific technique was observed on this page. Such domains can be used to lure users into revealing credentials, downloading unwanted software, or being redirected to harmful resources. Without concrete evidence of a payload, the risk remains generic and warrants caution.

Evidence
VirusTotal (analysis on 2026-10-21) reported seven detections: six malicious (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, SOCRadar, Sophos, Webroot) and one suspicious (Abusix). Google Safe Browsing (checked on 2026-10-21) did not flag the domain. OpenPhish listed the domain as blocked. URLScan (capture on 2026-10-01) gave an overall clean verdict but its engine score marked the URL as malicious with a score of 88. OTX recorded zero pulses as of 2026-10-21.

Infrastructure
The domain was registered 196 days before the 2026-10-21 observation and used a Let's Encrypt certificate issued on 2026-09-17, valid until 2026-12-16. The recorded IP address was 176.9.144.171, which was associated with Hetzner Online GmbH in Germany (ASN 24940). Nameservers were ns1.whiteserver.in and ns2.whiteserver.in, and an MX record pointed to the domain itself; no DNSSEC signatures were present.

What to do
Treat the site as untrusted: avoid entering credentials, personal data or downloading files. If any credentials were submitted, change them immediately and monitor accounts for suspicious activity. Network defenders should block the domain at firewalls or proxies and add it to threat‑intel feeds. Review logs for connections to the recorded IP address and consider reporting the domain to additional blocklist providers.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0f55a-5111-725f-bef7-5ddf16ecea58/
Cloudflare Radar report: https://radar.cloudflare.com/scan/2188f4ba-638d-41f8-a7c0-efffa7ddc333
Stored capture screenshot: https://urlscan.io/screenshots/01a0f55a-5111-725f-bef7-5ddf16ecea58.png
Cloudflare Radar screenshot (2026-10-21T15:31:25Z): https://screenshots.phishdestroy.io/cf/2188f4ba-638d-41f8-a7c0-efffa7ddc333.png
URLScan screenshot (2026-09-02T10:02:40Z): https://screenshots.phishdestroy.io/us/01a06191-f6b4-707e-b761-f8aec2f84393.png
URLScan capture report: https://urlscan.io/result/01a06191-f6b4-707e-b761-f8aec2f84393/
URLScan screenshot (2026-09-03T05:02:40Z): https://screenshots.phishdestroy.io/us/01a065a5-ac74-7095-ba15-d38fa25b6446.png
URLScan capture report: https://urlscan.io/result/01a065a5-ac74-7095-ba15-d38fa25b6446/
URLScan screenshot (2026-09-13T17:47:18Z): https://screenshots.phishdestroy.io/us/01a09be1-4abb-70a5-8093-73dbe1d83a2c.png
URLScan capture report: https://urlscan.io/result/01a09be1-4abb-70a5-8093-73dbe1d83a2c/
URLScan screenshot (2026-09-30T05:17:44Z): https://screenshots.phishdestroy.io/us/01a0f0be-e75a-71df-adc1-146209a0c725.png
URLScan capture report: https://urlscan.io/result/01a0f0be-e75a-71df-adc1-146209a0c725/
URLScan screenshot (2026-10-21T15:31:48Z): https://screenshots.phishdestroy.io/us/01a15f16-e8a1-71ee-8428-3d8929e8ce5f.png
URLScan capture report: https://urlscan.io/result/01a15f16-e8a1-71ee-8428-3d8929e8ce5f/
URLScan screenshot (2026-10-21T15:35:21Z): https://screenshots.phishdestroy.io/us/01a15f1a-2c03-75bc-bd57-c2e1c37127c0.png
URLScan capture report: https://urlscan.io/result/01a15f1a-2c03-75bc-bd57-c2e1c37127c0/
VirusTotal report: https://www.virustotal.com/gui/domain/janatatimes.co.in
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=janatatimes.co.in
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-21 15:38:14 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a15f1c-a522-772a-808b-7c9f7406f0ef.png
  Captured: 2026-10-21 15:39:56 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a15f1c-a522-772a-808b-7c9f7406f0ef.png
  Captured: 2026-10-21 15:39:56 UTC
  Source report: https://urlscan.io/result/01a15f1c-a522-772a-808b-7c9f7406f0ef/
- URLScan capture 2: https://urlscan.io/screenshots/01a0f55a-5111-725f-bef7-5ddf16ecea58.png
  Captured: 2026-10-21 15:27:15 UTC
  Source report: https://urlscan.io/result/01a15f1c-a522-772a-808b-7c9f7406f0ef/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2188f4ba-638d-41f8-a7c0-efffa7ddc333.png
  Captured: 2026-10-21 15:31:25 UTC
  Source report: https://radar.cloudflare.com/scan/2188f4ba-638d-41f8-a7c0-efffa7ddc333
  SHA-256: dccf185231cc88ee0e9b38b271af7e5e92d14f5c4ba1e7542db3448431b52e97
- URLQuery: https://screenshots.phishdestroy.io/uq/35c526d2-107a-4960-afdf-bd6bc24e99d8.png
  Source report: https://urlquery.net/report/35c526d2-107a-4960-afdf-bd6bc24e99d8
  SHA-256: 0cf2faf42c40a2fa4630702836e22165d5d1f78e0412930c6c5eda444a13572e
- URLScan · 2026-09-02: https://screenshots.phishdestroy.io/us/01a06191-f6b4-707e-b761-f8aec2f84393.png
  Captured: 2026-09-02 10:02:40 UTC
  Source report: https://urlscan.io/result/01a06191-f6b4-707e-b761-f8aec2f84393/
  SHA-256: 85c1eef56279ab4db52fe56991bac5aa9b7db252d72b1fe84954f243af451d91
- URLScan · 2026-09-03: https://screenshots.phishdestroy.io/us/01a065a5-ac74-7095-ba15-d38fa25b6446.png
  Captured: 2026-09-03 05:02:40 UTC
  Source report: https://urlscan.io/result/01a065a5-ac74-7095-ba15-d38fa25b6446/
  SHA-256: d04192ab038c6cd2f0bfff16178ea3567fd560a4912c0e37ddcc40d97ea34361
- URLScan · 2026-09-29: https://screenshots.phishdestroy.io/us/01a0ebb2-6f09-71b9-a8b9-a85830e3b4b3.png
  Captured: 2026-09-29 05:45:42 UTC
  Source report: https://urlscan.io/result/01a0ebb2-6f09-71b9-a8b9-a85830e3b4b3/
  SHA-256: edab7169121048377cce45958415373f67cab83ef31f0f6d8708a92d9b59580f
- URLScan · 2026-09-30: https://screenshots.phishdestroy.io/us/01a0f0be-e75a-71df-adc1-146209a0c725.png
  Captured: 2026-09-30 05:17:44 UTC
  Source report: https://urlscan.io/result/01a0f0be-e75a-71df-adc1-146209a0c725/
  SHA-256: 3e925d2820b10f7188361d8722b159abd055967f1e0590d082561d2559b68dac
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15f16-e8a1-71ee-8428-3d8929e8ce5f.png
  Captured: 2026-10-21 15:31:48 UTC
  Source report: https://urlscan.io/result/01a15f16-e8a1-71ee-8428-3d8929e8ce5f/
  SHA-256: 6878266265334da2b3b37c9243bbb4059748eb1856f346c75c1174f619eeabe1
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15f1a-2c03-75bc-bd57-c2e1c37127c0.png
  Captured: 2026-10-21 15:35:21 UTC
  Source report: https://urlscan.io/result/01a15f1a-2c03-75bc-bd57-c2e1c37127c0/
  SHA-256: ce0117e3df9f62471c0f60c4ee62b2f32a248273167a5e60386c28d605c275e1

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T16:22:50Z",
        "uuid": "01a15f1c-a522-772a-808b-7c9f7406f0ef",
        "scanned_at": "2026-10-21T15:38:01Z",
        "final_url": "https://janatatimes.co.in//aa/upt.html",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://janatatimes.co.in//aa/upt.html",
                "from": "http://janatatimes.co.in//aa/upt.html",
                "status": 307
            }
        ],
        "ip": "176.9.144.171",
        "ptr": "nvme.privatedns.in",
        "domains": [
            "cdnjs.cloudflare.com",
            "t0.gstatic.com",
            "www.google.com",
            "image.thum.io",
            "ipapi.co",
            "replit-cdn.com",
            "logo.clearbit.com"
        ],
        "ips": [
            "142.251.127.99",
            "142.251.151.119",
            "52.4.199.229",
            "172.67.69.226",
            "35.190.3.23",
            "104.17.25.14",
            "176.9.144.171"
        ],
        "asns": [
            "15169",
            "14618",
            "13335",
            "396982",
            "24940"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "2a828466cbbb079344bedc05d182c3d6a6f574a9edfaf78ba655e38a3479f538",
        "tls": {
            "san": [
                "*.janatatimes.co.in",
                "janatatimes.co.in"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR1",
            "subject": "janatatimes.co.in",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-16T15:44:20Z",
            "valid_from": "2026-09-17T15:44:21Z"
        },
        "domain_age_days": 217,
        "apex_age_days": 217,
        "tls_age_days": 33,
        "tls_valid_days": 89,
        "requests": 11,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "genericemail"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Generic Email"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "LiteSpeed",
            "content-type": "text/html",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T15:37:24Z",
        "uuid": "2188f4ba-638d-41f8-a7c0-efffa7ddc333",
        "scanned_at": "2026-10-21T15:31:25Z",
        "final_url": "https://janatatimes.co.in/",
        "status": 200,
        "history": [
            {
                "url": "https://janatatimes.co.in/",
                "status": 200
            }
        ],
        "dom_hash": "8fca5c11d524237a045abf530fadd593fdd968f768eed30358f0b534ab46cdb0",
        "doc_hash": "6727b2d2764d1ac537f3256f763b83723c46785ea430cc8ccff0bbc96da56850",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "janatatimes.co.in",
                "type": "A",
                "value": "176.9.144.171"
            }
        ],
        "dnssec_valid": false,
        "ip": "176.9.144.171"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T15:30:09Z",
        "analysis_at": "2026-10-21T15:08:16Z",
        "stats": {
            "timeout": 0,
            "harmless": 51,
            "malicious": 6,
            "suspicious": 1,
            "undetected": 34
        },
        "detections": {
            "Abusix": "spam",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-03-17T00:00:00Z",
        "updated": "2026-03-17T00:00:00Z",
        "first_seen": "2026-03-18T15:18:38Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.whiteserver.in"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.whiteserver.in"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "mail2irannahukkeri.gmail.com",
                "value": "ns1.whiteserver.in"
            },
            {
                "ttl": 14400,
                "type": "A",
                "value": "176.9.144.171"
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "v=spf1 ip4:176.9.144.171 +a +mx ~all"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "janatatimes.co.in",
                "priority": 0
            }
        ],
        "dns_at": "2026-10-21T15:08:37Z",
        "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
        "cert": {
            "san": [
                "*.janatatimes.co.in",
                "janatatimes.co.in"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "5ac0dbb20624b58f11388553eaa8e9d733",
            "sha256": "4463e200dcfb763c1299c5ca6110f4c1b482e0c35183ee081175b64a15805078",
            "subject": "janatatimes.co.in",
            "valid_to": "2026-12-16T15:44:20Z",
            "valid_from": "2026-09-17T15:44:21Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T15:37:36Z",
        "mail_config": {
            "mx": [
                "janatatimes.co.in"
            ],
            "spf": "v=spf1 ip4:176.9.144.171 +a +mx ~all",
            "dkim": [
                "default"
            ],
            "dmarc": true,
            "dkim_bits": 2048,
            "spf_lookups": 2
        },
        "caa_records": {
            "domain": "janatatimes.co.in"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-21T15:29:10Z",
            "first": "2026-10-21T15:29:10Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 9110
        },
        "social_tags": {
            "ogUrl": "https://janatatimes.co.in/",
            "title": "Janata Times",
            "ogType": "website",
            "ogImage": "https://janatatimes.co.in/uploads/editions/6a32bddd682bb_1781710301_page_1.jpg",
            "ogTitle": "Janata Times",
            "description": "For News and Advertisements Call 📞 +919972688456",
            "twitterCard": "summary_large_image",
            "ogDescription": "For News and Advertisements Call 📞 +919972688456"
        },
        "trackers": {
            "requests": 21,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 4,
                "tls": 7,
                "wait": 79,
                "connect": 3,
                "download": 1
            },
            "response_ms": 94
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                22,
                25,
                53,
                80,
                110,
                143,
                443,
                587,
                993,
                995
            ]
        },
        "carbon": {
            "bytes": 31618,
            "co2_grams": 0.0012,
            "cleaner_than": 47
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "176.9.144.171",
                    "host": "ns1.whiteserver.in"
                },
                {
                    "ip": "176.9.144.171",
                    "host": "ns2.whiteserver.in"
                }
            ],
            "zone": "janatatimes.co.in"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "PHPSESSID",
                    "secure": true,
                    "session": true
                }
            ]
        },
        "location": {
            "ip": "176.9.144.171",
            "asn": "24940",
            "org": "Hetzner Online GmbH",
            "city": "Falkenstein",
            "country": "DE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR1",
            "subject": "janatatimes.co.in"
        },
        "dns": {
            "A": [
                "176.9.144.171"
            ],
            "MX": [
                "{\"exchange\": \"janatatimes.co.in\", \"priority\": 0}"
            ],
            "NS": [
                "ns1.whiteserver.in",
                "ns2.whiteserver.in"
            ],
            "SOA": "{\"nsname\": \"ns1.whiteserver.in\", \"hostmaster\": \"mail2irannahukkeri.gmail.com\", \"serial\": 2026091701, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
            "TXT": [
                "v=spf1 ip4:176.9.144.171 +a +mx ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": false,
            "xXSSProtection": "1; mode=block",
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "176.9.144.171",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://janatatimes.co.in"
            ]
        },
        "tech_stack": {
            "technologies": [
                "PHP",
                "LiteSpeed",
                "Cloudflare",
                "Font Awesome",
                "cdnjs",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.instagram.com/janatatimeskannadadailypaper/"
            ],
            "external_count": 1,
            "internal_count": 2
        },
        "headers": {
            "headers": {
                "server": "LiteSpeed",
                "content-type": "text/html; charset=UTF-8",
                "x-powered-by": "PHP/8.4.13",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff"
            }
        }
    }
}
```