# PhishDestroy domain threat record: manorviews.co.nz

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/manorviews.co.nz/
Machine-readable companion: https://phishdestroy.io/domain/manorviews.co.nz/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-12 21:33:27 UTC
- Last availability or vendor check: 2026-10-22 10:29:25 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 11/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: google

## Stored infrastructure

- Observed IP address: 31.43.160.6
- Registrar in stored WHOIS data: Dreamscape Networks International Pte Ltd t/a Crazy Domains
- Last stored HTTP status: 308
- Registration date in stored WHOIS data: 2009-08-20 18:28:03 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a13126-64da-76be-a861-fa5ff8f83e9f/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/manorviews.co.nz
- Certificate Transparency search: https://crt.sh/?q=%25.manorviews.co.nz
- Web Archive lookup: https://web.archive.org/web/*/https://manorviews.co.nz/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
manorviews.co.nz is an impersonation phishing page that presents itself as "Manor Views — Heritage Boutique Hotel in Huntly." It targets people looking to book accommodation in the Waikato town who believe they are dealing with the hotel itself. PhishDestroy first flagged the domain on 2026-10-12. As of 2026-10-19 the site was still online and its content was answering through a redirect.

How the scam works
Hotel impersonation relies on the trust a guest gives a booking page with a familiar name, photos and a local address. A typical scheme like this asks visitors to confirm a reservation by entering card details, paying a deposit by bank transfer, or handing over passport and contact information. The money goes to the operators rather than the hotel, the card data can be reused for fraud, and the personal details feed later phishing. The page title shows an ordinary boutique hotel listing. We classified the site as an impersonation of that business.

Evidence
Eleven of 92 VirusTotal engines flagged the domain when it was checked on 2026-10-12. The named vendors include ADMINUSLabs, alphaMountain.ai, BitDefender, Dr.Web, Emsisoft, Forcepoint ThreatSeeker, G-Data and Gridinsoft. That is a modest but independent spread of security vendors agreeing with our verdict. The domain also appears in 50 AlienVault OTX threat pulses, which means other researchers have tied it to malicious activity. PhishDestroy lists it on our blocklist.

Infrastructure
The site resolves to 31.43.160.6 on an Amazon.com, Inc. network located in the Netherlands. A New Zealand hotel brand served from European cloud hosting is worth noting. Its certificate comes from Let's Encrypt (YE1), so the padlock in the browser only shows the connection is encrypted and says nothing about whether the operator is genuine.

What to do
If you paid a deposit or entered card details on this site, contact your bank immediately to block the card and dispute the charge. If you sent a bank transfer, ask your bank to attempt a recall. Confirm any reservation with the hotel through contact details you have verified independently, not through anything this page supplied. If you shared passport or ID details, watch for follow-up emails or calls that use your booking as a pretext, and change any password you created on the site. Defenders should block the domain and its IP and search proxy and mail logs for earlier visits or links.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a13126-64da-76be-a861-fa5ff8f83e9f/
VirusTotal report: https://www.virustotal.com/gui/domain/manorviews.co.nz
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=manorviews.co.nz
Archived copy: https://web.archive.org/web/20261012213452/https://www.manorviews.co.nz/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-19 09:26:22 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a13126-64da-76be-a861-fa5ff8f83e9f.png
  Captured: 2026-10-12 21:33:27 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a13126-64da-76be-a861-fa5ff8f83e9f.png
  Captured: 2026-10-13 03:30:09 UTC
  Source report: https://urlscan.io/result/01a13126-64da-76be-a861-fa5ff8f83e9f/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/125a60db-1ce6-4e99-9eae-9571e236c044.png
  Captured: 2026-10-12 21:34:39 UTC
  Source report: https://radar.cloudflare.com/scan/125a60db-1ce6-4e99-9eae-9571e236c044
  SHA-256: a71826631bb1482d15e5da88dca92e0f8d93b74d50742bb08b16ef92f5a4f1d3
- URLScan · 2026-10-09: https://screenshots.phishdestroy.io/us/01a1216a-20ad-75b3-9714-04ddb0ad73f8.png
  Captured: 2026-10-09 16:06:41 UTC
  Source report: https://urlscan.io/result/01a1216a-20ad-75b3-9714-04ddb0ad73f8/
  SHA-256: 50bcbb37b9b568c290df0623577f3036063912040cc935b8d4b32819a2b5bfe7
- URLScan · 2026-10-12: https://screenshots.phishdestroy.io/us/01a1320c-3341-75b1-947d-388d2c8fa0f6.png
  Captured: 2026-10-12 21:37:38 UTC
  Source report: https://urlscan.io/result/01a1320c-3341-75b1-947d-388d2c8fa0f6/
  SHA-256: 50bcbb37b9b568c290df0623577f3036063912040cc935b8d4b32819a2b5bfe7
- URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a1472b-def9-7531-9295-e01bda545b52.png
  Captured: 2026-10-17 00:04:14 UTC
  Source report: https://urlscan.io/result/01a1472b-def9-7531-9295-e01bda545b52/
  SHA-256: 50bcbb37b9b568c290df0623577f3036063912040cc935b8d4b32819a2b5bfe7

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T17:51:52Z",
        "uuid": "01a13126-64da-76be-a861-fa5ff8f83e9f",
        "scanned_at": "2026-10-12T17:26:37Z",
        "final_url": "https://www.manorviews.co.nz/",
        "status": 200,
        "redirected": "parent-domain",
        "redirects": [
            {
                "to": "https://manorviews.co.nz/",
                "from": "http://manorviews.co.nz/",
                "status": 307
            },
            {
                "to": "https://www.manorviews.co.nz/",
                "from": "https://manorviews.co.nz/",
                "status": 308
            }
        ],
        "ip": "31.43.161.6",
        "ptr": "sites.framer.app",
        "domains": [
            "framerusercontent.com",
            "fonts.gstatic.com",
            "app.framerstatic.com",
            "framer.com",
            "events.framer.com",
            "manorviews.co.nz"
        ],
        "ips": [
            "3.175.115.32",
            "108.158.32.71",
            "3.175.115.12",
            "108.158.32.124",
            "142.251.222.3",
            "3.175.115.79",
            "18.67.110.67",
            "31.43.161.6",
            "31.43.160.6"
        ],
        "asns": [
            "16509",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "book.resonline.com.au",
            "maps.app.goo.gl"
        ],
        "doc_hash": "1111aa4fb6bfda1aa075e0d36b57e0bdec8a18b16632164aabb20f2426873588",
        "globals": [
            "process",
            "__framer_importFromPackage",
            "__framer_events",
            "MotionIsMounted",
            "__framer_editorBarDependencies",
            "__send_framer_event"
        ],
        "tls": {
            "san": [
                "www.manorviews.co.nz"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "www.manorviews.co.nz",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-09T21:39:48Z",
            "valid_from": "2026-09-10T21:39:49Z"
        },
        "domain_age_days": 3598,
        "apex_age_days": 3598,
        "tls_age_days": 31,
        "tls_valid_days": 89,
        "requests": 68,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": -96,
                "malicious": false
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Framer/af6a429",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000",
            "x-content-type-options": "nosniff"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T18:03:05Z",
        "uuid": "125a60db-1ce6-4e99-9eae-9571e236c044",
        "scanned_at": "2026-10-12T21:34:39Z",
        "final_url": "https://www.manorviews.co.nz/",
        "status": 200,
        "redirected": "subdomain",
        "history": [
            {
                "url": "https://manorviews.co.nz/",
                "status": 308
            },
            {
                "url": "https://www.manorviews.co.nz/",
                "status": 200
            }
        ],
        "dom_hash": "268ace30f125700f2ab7c7d4ef8539173533854256f25239efc7ec7d80cc95aa",
        "doc_hash": "1111aa4fb6bfda1aa075e0d36b57e0bdec8a18b16632164aabb20f2426873588",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "manorviews.co.nz",
                "type": "A",
                "value": "31.43.160.6"
            },
            {
                "name": "www.manorviews.co.nz",
                "type": "A",
                "value": "31.43.161.6"
            }
        ],
        "dnssec_valid": false,
        "ip": "31.43.161.6",
        "whois": {
            "registrar": "Dreamscape Networks International Pte Ltd t/a Crazy Domains",
            "created": "2009-08-20T20:28:03Z",
            "updated": "2026-07-10T22:46:49Z",
            "nameservers": [
                "ns1.crazydomains.com",
                "ns2.crazydomains.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T00:28:44Z",
        "analysis_at": "2026-10-13T02:17:29Z",
        "stats": {
            "timeout": 0,
            "harmless": 48,
            "malicious": 10,
            "suspicious": 1,
            "undetected": 33
        },
        "detections": {
            "Dr.Web": "malicious",
            "G-Data": "phishing",
            "Lionic": "malicious",
            "Webroot": "malicious",
            "Emsisoft": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Gridinsoft": "malicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "suspicious"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing, Travel (alphaMountain.ai)"
        },
        "popularity": {
            "Alexa": 662899,
            "Statvoo": 662899,
            "Cloudflare Radar": 1000000
        },
        "registrar": "Dreamscape Networks International Pte Ltd t/a Crazy Domains",
        "created": "2009-08-20T20:28:03Z",
        "updated": "2026-07-10T22:46:49Z",
        "first_seen": "2023-09-29T05:21:15Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "SOA",
                "rname": "admin.syrahost.com",
                "value": "ns.freeparking.co.nz"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "ALT1.ASPMX.L.GOOGLE.COM",
                "priority": 1
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "ASPMX.L.GOOGLE.COM",
                "priority": 5
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "ASPMX3.GOOGLEMAIL.COM",
                "priority": 10
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "ASPMX2.GOOGLEMAIL.COM",
                "priority": 10
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "ALT2.ASPMX.L.GOOGLE.COM",
                "priority": 5
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "google-site-verification=6Gid7R80jSDFN8dGgdl2d5wGbBOkntTeqHilGXWeWFo"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns.freeparking.co.nz"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 a mx ?all"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "31.43.160.6"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns2.freeparking.co.nz"
            }
        ],
        "dns_at": "2026-10-13T02:22:59Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "manorviews.co.nz"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5ec3bd96a59e8f36cf7eda334a489936664",
            "sha256": "d085bf16fed8c50e11850891257cafe201739fced15d8f1122ed8c1728e17d27",
            "subject": "manorviews.co.nz",
            "valid_to": "2026-12-09T18:30:29Z",
            "valid_from": "2026-09-10T18:30:30Z"
        },
        "whois": {
            "registrar": "Dreamscape Networks International Pte Ltd t/a Crazy Domains",
            "registrar_url": "https://www.crazydomains.com.au/",
            "created": "2009-08-20T20:28:03Z",
            "updated": "2026-07-10T22:46:49Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns1.crazydomains.com",
                "ns2.crazydomains.com"
            ],
            "dnssec": "unsigned"
        }
    }
}
```