# links.farofa.work: Recorded redirect to www.switchy.io link platform | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/links.farofa.work/ Machine-readable companion: https://phishdestroy.io/domain/links.farofa.work/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-10-31 03:46:04 UTC - Selected availability observation: 2026-11-09T11:30:23Z - Stored record updated: 2026-11-09 11:30:23 UTC - VirusTotal detections in the stored snapshot: 13/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): Fiverr ## Stored infrastructure - Observed IP address: 34.76.180.229 - Registrar in stored WHOIS data: 1API GmbH - Registrar country in stored WHOIS data: DE - Last stored HTTP status: 302 (observed: 2026-11-09T11:30:23Z) - Registration date in stored WHOIS data: 2020-09-29 18:26:35 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a175d0-0b7c-72be-ba50-e27a83a2a0a3/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/links.farofa.work - Certificate Transparency search: https://crt.sh/?q=%25.links.farofa.work - Web Archive lookup: https://web.archive.org/web/*/https://links.farofa.work/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records a redirect from links.farofa.work to www.switchy.io, showing Switchy's link engagement platform with URL shortening and tracking tools. On 2026-10-31, links.farofa.work redirected to www.switchy.io. The destination page presents itself as Switchy.io, described as "the smartest link engagement platform" for shortening, customizing and tracking links with A/B testing and retargeting pixels. It invites visitors to paste a link into a "Switch it" field, offers Login and Try Switchy buttons, and states it is already used by more than 8.000 companies, with a heading for "Some retargeting KPIs" below. The stored VirusTotal domain result reports 13 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "phishing". Package revision: ee4f6e1a6afc9bfeccd90489dd3a62d9dd018222d6e7f342a0f4742c1e489852 Text generated (not scan time): 2026-11-09 03:43:51 Reviewed evidence snapshot: {"domain":"links.farofa.work","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"links.farofa.work","final_host":"www.switchy.io","redirects":[{"from":"https://links.farofa.work/","to":"https://switchy.io/","status":302},{"from":"https://switchy.io/","to":"https://www.switchy.io/","status":308}],"captured_at":"2026-10-31T03:49:04Z","uuid":"44d45f47-dd45-4902-993e-1b5fa8eb9173","report_url":"https://radar.cloudflare.com/scan/44d45f47-dd45-4902-993e-1b5fa8eb9173","sha256":"c65641688532e18bca4a5f4a99bdde66a2755f67a2720cd33ce049a558e7b167","relationship":"redirect_destination"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":13,"engines":92,"malicious":13,"suspicious":0,"analysis_date":"2026-10-31","retrieved_date":"2026-11-02","vendor_labels":{"CRDF":"malicious","DNS8":"phishing","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","Fortinet","SOCRadar","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 13 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"phishing\".","page_paragraph_target_characters":549} Source facts (timestamps as stored): {"record_id":1717563,"first_recorded_at":"2026-10-31 04:46:04","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":13,"denominator":92,"malicious":13,"suspicious":0,"vendors":{"CRDF":"malicious","DNS8":"phishing","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-31T06:50:28Z","checked_at":null,"fetched_at":"2026-11-02T04:48:12Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":13,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Lionic","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-10-31 06:50:28","checked_at":"2026-11-02 05:48:29","fetched_at":"2026-11-02 04:48:29","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"phishing","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","Fortinet","SOCRadar","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":48,"malicious":13,"suspicious":0,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 12:01:46"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-31 08:30:30"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1717563,"scope":"checked_url","observed_at":"2026-11-09T11:30:23Z","http_status":302,"http_observed_at":"2026-11-09T11:30:23Z","stored_http_code":302,"stored_http_observed_at":"2026-11-09T11:30:23Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":"2026-11-09T03:06:45Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/01a175d0-0b7c-72be-ba50-e27a83a2a0a3.png Captured: 2026-10-26 01:25:40 UTC Source report: https://urlscan.io/result/01a175d0-0b7c-72be-ba50-e27a83a2a0a3/ - URLScan · 2025-11-25 → www.switchy.io: https://screenshots.phishdestroy.io/us/019abb0f-dc63-7779-a9e0-6470d86086af.png Captured: 2025-11-25 12:49:41 UTC Source report: https://urlscan.io/result/019abb0f-dc63-7779-a9e0-6470d86086af/ SHA-256: 3ee063fb8e9d38cdd1dd8754030742b6601b0d09302cfde5f1e03323ca374c85 - URLScan · 2026-08-01 → www.switchy.io: https://screenshots.phishdestroy.io/us/019fbcdc-5160-730d-91f3-c9c2ae9d9f67.png Captured: 2026-08-01 10:26:31 UTC Source report: https://urlscan.io/result/019fbcdc-5160-730d-91f3-c9c2ae9d9f67/ SHA-256: 2e9eba198108c6e47cb2c9531f4c7aa82f2ec663fa927a88a637062c83f9f495 - URLScan · 2026-09-11: https://screenshots.phishdestroy.io/us/01a091bc-4930-77dd-823e-bed5e163cf7c.png Captured: 2026-09-11 18:30:39 UTC Source report: https://urlscan.io/result/01a091bc-4930-77dd-823e-bed5e163cf7c/ SHA-256: 0aea7a812eae997622c6a8f390d043fa2e75713737ebcced710774278e56157b - URLScan · 2026-09-20: https://screenshots.phishdestroy.io/us/01a0bd5a-3fa1-7623-b9cb-43ffdfaa0674.png Captured: 2026-09-20 05:47:47 UTC Source report: https://urlscan.io/result/01a0bd5a-3fa1-7623-b9cb-43ffdfaa0674/ SHA-256: 2f6e61c68c43b5430366069f6d62bb18e4d523000516c41ead4fa3e9c271d2e4 - URLScan · 2026-10-13: https://screenshots.phishdestroy.io/us/01a132c7-e7a4-74ff-b170-0a44ea67293e.png Captured: 2026-10-13 01:02:12 UTC Source report: https://urlscan.io/result/01a132c7-e7a4-74ff-b170-0a44ea67293e/ SHA-256: 223296e6a3e47e2d18bea1d71482e39df1baadf38e0c9f568f9e845a1d1dc25b - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/44d45f47-dd45-4902-993e-1b5fa8eb9173.png Captured: 2026-10-31 03:49:04 UTC Source report: https://radar.cloudflare.com/scan/44d45f47-dd45-4902-993e-1b5fa8eb9173 SHA-256: c65641688532e18bca4a5f4a99bdde66a2755f67a2720cd33ce049a558e7b167 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-31T03:49:43Z", "uuid": "01a175d0-0b7c-72be-ba50-e27a83a2a0a3", "scanned_at": "2026-10-26T01:25:40Z", "final_url": "https://links.farofa.work/fiverr-signup", "status": 200, "ip": "34.76.180.229", "ptr": "229.180.76.34.bc.googleusercontent.com", "domains": [ "www.google.com", "npm-assets.fiverrcdn.com", "www.googletagmanager.com", "fiverr-res.cloudinary.com", "googleads.g.doubleclick.net", "www.google.be", "cdn.userway.org", "ad.doubleclick.net", "cdn.cookielaw.org", "www.googleadservices.com", "bat.bing.net", "bat.bing.com", "cdn.builder.io", "cdn0.forter.com", "connect.facebook.net", "adservice.google.com", "5566805.fls.doubleclick.net", "collector-pxk3bezzfo.px-cdn.net", "analytics.google.com", "pixels.spotify.com", "bcd03730f03d4822ab98c5ae385c43d6-53e1270541f5.cdn.forter.com", "accounts.google.com", "www.facebook.com", "pro.fiverr.com", "api.userway.org", "relay.fiverr.com", "9136827.fls.doubleclick.net", "15223445.fls.doubleclick.net", "www.google.ru", "stats.g.doubleclick.net" ], "ips": [ "130.211.34.183", "195.181.170.18", "20.57.85.160", "2603:1061:14:68::1", "20.250.198.32", "2600:1f14:5db:eb22:d685:1e4a:ec2d:5b9d", "2606:4700:4403::6812:2089", "2001:4860:4802:32::36", "2600:1901:1:7c5::", "2a02:26f0:7100:88e::523", "35.244.142.80", "2606:4700::6812:562a", "192.178.183.97", "2a02:6ea0:c700::11", "188.114.97.3" ], "asns": [ "396982", "60068", "8075", "16509", "13335", "15169", "20940", "14618", "54113", "32934" ], "countries": [ "US", "DE", "CH", "BE" ], "link_domains": [ "fiverr.com", "help.fiverr.com", "help-pro.fiverr.com", "investors.fiverr.com", "community.fiverr.com", "events.fiverr.com", "blog.fiverr.com", "digiscorp.com", "www.tiktok.com", "www.instagram.com", "www.linkedin.com", "www.facebook.com", "www.pinterest.com", "twitter.com", "de.pro.fiverr.com", "es.pro.fiverr.com", "fr.pro.fiverr.com", "br.pro.fiverr.com", "it.pro.fiverr.com", "nl.pro.fiverr.com", "www.fiverr.com", "www.onetrust.com" ], "social": [ "https://www.tiktok.com/@fiverr", "https://www.instagram.com/fiverr", "https://www.facebook.com/Fiverr", "https://twitter.com/fiverr" ], "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747", "globals": [ "dataLayer", "fbq", "_fbq", "_linkedin_data_partner_id", "uetq", "google_conversion_id", "google_custom_params", "google_remarketing_only", "google_tag_data", "GooglemKTybQhCsO", "google_conversion_date", "google_conversion_time", "google_conversion_snippets", "google_conversion_first_time", "google_conversion_js_version", "google_conversion_format", "google_enable_display_cookie_match", "google_conversion_type", "google_conversion_order_id", "google_conversion_language", "google_conversion_value", "google_conversion_currency", "google_conversion_domain", "google_conversion_label", "google_conversion_color", "google_disable_viewthrough", "google_gtag_event_data", "google_conversion_linker", "google_tag_for_child_directed_treatment", "google_tag_for_under_age_of_consent", "google_allow_ad_personalization_signals", "google_restricted_data_processing", "google_conversion_items", "google_conversion_merchant_id", "google_user_id", "onload_callback", "opt_image_generator", "google_gtm_url_processor", "google_conversion_page_url", "google_conversion_referrer_url" ], "cookies": [ "cee", "_gcl_au", "_ga", "_ga_KN2DSV59H5", "_ga_QP72YN41DN", "IDE", "bcookie", "li_gc", "lidc", "_fbp", "__cf_bm", "u_guid", "_cfuvid", "builderSessionId", "cpra_opt_out_status_external", "forterToken" ], "storage_keys": [ "_gcl_ls", "lastExternalReferrer", "lastExternalReferrerTime" ], "domain_age_days": 712, "apex_age_days": 2217, "tls_age_days": 53, "tls_valid_days": 89, "requests": 336, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -68, "malicious": false }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fiverr" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fiverr" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "image/png" } }, "cf": { "v": 1, "fetched_at": "2026-10-31T03:49:48Z", "uuid": "44d45f47-dd45-4902-993e-1b5fa8eb9173", "scanned_at": "2026-10-31T03:49:04Z", "final_url": "https://www.switchy.io/", "status": 200, "redirected": "off-domain", "history": [ { "url": "https://links.farofa.work/", "status": 302 }, { "url": "https://switchy.io/", "status": 308 }, { "url": "https://www.switchy.io/", "status": 200 } ], "dom_hash": "1ac8464093e87a6a6b5237530a841e991c00f93ed727c3557cc337cafe3858cc", "doc_hash": "5993af246ab0dd90acb817d90a236303310c613c81875f53f1ba5170f8313050", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "links.switchy.io", "type": "A", "value": "34.76.180.229" }, { "name": "switchy.io", "type": "A", "value": "66.33.60.66" }, { "name": "switchy.io", "type": "A", "value": "76.76.21.142" }, { "name": "www.switchy.io", "type": "CNAME", "value": "cname.vercel-dns.com" }, { "name": "www.switchy.io", "type": "CNAME", "value": "cname.vercel-dns.com" } ], "dnssec_valid": false, "ip": "127.0.1.120", "whois": { "registrar": "Gandi SAS", "created": "2018-06-26T09:54:47Z", "updated": "2026-08-12T02:41:20Z", "expires": "2028-06-26T09:54:47Z", "nameservers": [ "ns-90-c.gandi.net", "ns-85-b.gandi.net", "ns-166-a.gandi.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-02T04:48:12Z", "analysis_at": "2026-10-31T06:50:28Z", "stats": { "timeout": 0, "harmless": 48, "malicious": 13, "suspicious": 0, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "phishing", "ESET": "phishing", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Gridinsoft": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "1API GmbH", "created": "2020-09-29T20:26:35Z", "expires": "2027-09-29T20:26:35Z", "updated": "2026-10-04T16:07:27Z", "first_seen": "2024-11-12T21:12:20Z", "dns": [ { "ttl": 1800, "type": "A", "value": "34.76.180.229" }, { "ttl": 3600, "type": "CNAME", "value": "links.switchy.io" } ], "dns_at": "2026-10-31T06:55:44Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "links.farofa.work" ], "issuer": "Let's Encrypt / YE2", "serial": "606b437059a3466ca79fe1cdf8ee09efa84", "sha256": "8e983cbd2e5c0345376b684b4db66dfc05c90f9731293f15e9bc9a2c9109e48f", "subject": "links.farofa.work", "valid_to": "2026-12-01T07:33:53Z", "valid_from": "2026-09-02T07:33:54Z" }, "whois": { "registrar": "1API GmbH", "registrar_iana_id": "1387", "registrar_url": "http://iwantmyname.com", "created": "2020-09-29T20:26:35Z", "updated": "2026-07-06T16:40:50Z", "expires": "2027-09-29T20:26:35Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "dns1.iwantmyname.com", "dns2.iwantmyname.com", "dns3.iwantmyname.com" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-31T03:50:10Z", "caa_records": { "domain": "links.farofa.work" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2025-03-12T19:35:46Z", "first": "2024-11-12T22:23:36Z", "changes": 1, "days_archived": 3, "scans_per_day": 0.02, "avg_page_bytes": 515 }, "social_tags": { "ogUrl": "https://switchy.io", "title": "Switchy: shorten, customize & track your links. Capture & retarget everyone who clicks.", "ogType": "website", "ogImage": "https://firebasestorage.googleapis.com/v0/b/urlshortener-f1125.appspot.com/o/switchy%2Fswitchy_og.min.png", "ogTitle": "Switchy: shorten, customize & track your links. Capture & retarget everyone who clicks.", "themeColor": "#ffffff", "description": "Discover Switchy, the easiest retargeting url shortner. Get more from your links and boost your conversion rate!", "ogDescription": "Discover Switchy, the easiest retargeting url shortner. Get more from your links and boost your conversion rate!" }, "trackers": { "requests": 67, "trackers": [ { "name": "Albacross", "company": "Albacross", "country": "SE", "category": "Advertising", "requests": 1 }, { "name": "Facebook", "company": "Meta", "country": "US", "category": "Advertising", "requests": 4 }, { "name": "Facebook Custom Audience", "company": "Meta", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 2 }, { "name": "WisePops", "company": "WisePops", "category": "Advertising", "requests": 1 }, { "name": "Intercom", "company": "Intercom", "country": "US", "category": "Customer Interaction", "requests": 1 }, { "name": "Google APIs", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 5 }, { "name": "TikTok CDN", "company": "ByteDance Inc", "country": "KY", "category": "Hosting", "requests": 3 }, { "name": "Facebook Connect", "company": "Meta", "country": "US", "category": "Site Analytics", "requests": 3 }, { "name": "Google Analytics", "company": "Google", "country": "US", "category": "Site Analytics", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://js.chargebee.com/v2/chargebee.js", "https://www.googletagmanager.com/gtag/js", "https://serve.albacross.com/track.js", "https://cdn.firstpromoter.com/fpr.js", "https://www.tiktok.com/embed.js", "https://apis.google.com/js/api.js" ], "third_party_scripts": 6 }, "status": { "up": true, "code": 302, "timings": { "dns": 50, "tls": 150, "wait": 84, "connect": 16, "download": 0 }, "response_ms": 300 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 14973, "co2_grams": 0.0005, "cleaner_than": 63 }, "dns_server": { "ns": [ { "ip": "193.227.117.113", "host": "dns1.iwantmyname.com" }, { "ip": "194.50.187.113", "host": "dns2.iwantmyname.com" }, { "ip": "194.0.182.113", "host": "dns3.iwantmyname.com" } ], "zone": "farofa.work" }, "cookies": { "cookies": [ { "name": "nQ_cookieId" }, { "name": "nQ_userVisitId" }, { "name": "_fbp", "same_site": "Lax" }, { "name": "_ga" }, { "name": "_ga_NCFVVCS0TX" } ] }, "location": { "ip": "34.76.180.229", "asn": "396982", "org": "Google LLC", "city": "Brussels", "country": "BE" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "links.farofa.work" }, "dns": { "A": [ "34.76.180.229" ], "CNAME": [ "links.switchy.io" ] }, "dnssec": { "ds": true, "rrsig": false, "dnskey": true }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=63072000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "34.76.180.229", "family": 4 }, "redirects": { "chain": [ "https://links.farofa.work", "https://switchy.io", "https://www.switchy.io/" ], "count": 2 }, "subdomains": { "count": 1, "subdomains": [ "links.farofa.work" ] }, "whois": { "registrar": "1API GmbH", "created": "2020-09-29T20:26:35Z", "updated": "2026-10-04T16:07:27Z", "expires": "2027-09-29T20:26:35Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "dns3.iwantmyname.com", "dns2.iwantmyname.com", "dns1.iwantmyname.com" ] }, "headers": { "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/44d45f47-dd45-4902-993e-1b5fa8eb9173.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/44d45f47-dd45-4902-993e-1b5fa8eb9173","captured_at":"2026-10-31T03:49:04Z","sha256":"c65641688532e18bca4a5f4a99bdde66a2755f67a2720cd33ce049a558e7b167","model_image_sha256":"f8888e235b35a84852ba5c8c6168fffc3b5fd0d44cb99dfbbcaba7419152fc58","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/links.farofa.work/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/links.farofa.work/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/links.farofa.work/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/links.farofa.work/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/links.farofa.work/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/links.farofa.work/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/links.farofa.work/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/links.farofa.work/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1717563, "scope": "checked_url", "observed_at": "2026-11-09T11:30:23Z", "http_status": 302, "http_observed_at": "2026-11-09T11:30:23Z", "stored_http_code": 302, "stored_http_observed_at": "2026-11-09T11:30:23Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": "2026-11-09T03:06:45Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```