# PhishDestroy domain threat record: manuelvila.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/manuelvila.com/
Machine-readable companion: https://phishdestroy.io/domain/manuelvila.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-28 01:21:26 UTC
- Last availability or vendor check: 2026-10-28 01:21:26 UTC
- Stored record updated: 2026-10-28 01:54:33 UTC
- VirusTotal detections in the stored snapshot: 5/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Cloudflare, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-20 11:22:08 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a18018-2cd0-705e-a3e5-c8eb00590558/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/manuelvila.com
- Certificate Transparency search: https://crt.sh/?q=%25.manuelvila.com
- Web Archive lookup: https://web.archive.org/web/*/https://manuelvila.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed manuelvila.com on 2026-10-28 after its intake system detected multiple security engine alerts. The recorded page displayed a simple personal title "Manuel Vila" and the HTTP response code was 200. An earlier AI assessment on 2026-10-27 considered the page clean, but the intake reason cited four malicious VirusTotal detections, prompting the block. The domain was registered eight days earlier on 2026-10-20.

How the scam works
A domain flagged by several security engines may be used for phishing, credential harvesting, or other fraudulent activities, but the available evidence does not show a specific malicious payload or impersonation on this page. Such listings serve as a precautionary indicator that the site could be leveraged for social engineering or scam campaigns.

Evidence
VirusTotal recorded five detections on 2026-10-27, with four vendors labeling the domain malicious (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Kaspersky) and one marking it suspicious (Gridinsoft). Google Safe Browsing checked on 2026-10-28 reported no flag. External blocklists MetaMask and SEAL listed the domain as of 2026-10-28. OTX showed three pulses referencing the domain on 2026-10-28, and urlscan.io scanned the site on 2026-10-28, assigning a high malicious score from its engine but an overall non‑malicious verdict.

Infrastructure
The domain was registered with Cloudflare, Inc. on 2026-10-20 and was observed behind Cloudflare's network, resolving to the IP 188.114.96.3 in the United States. The TLS certificate issued by Google Trust Services on 2026-10-20 is valid until 2027-01-18 and uses TLS 1.3 with strong cipher suites. The recorded HTTP response was 200 and the site included standard security headers such as HSTS and X‑Frame‑Options.

What to do
Treat the site as potentially unsafe; avoid entering any credentials, personal data, or cryptocurrency wallet information. If any sensitive information was submitted, change associated passwords and monitor accounts for unauthorized activity. Defenders should block the domain at the network perimeter and review logs for any connections to the recorded IP or hostname.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a18018-2cd0-705e-a3e5-c8eb00590558/
Cloudflare Radar report: https://radar.cloudflare.com/scan/fe0126d1-8fe5-42dc-93bd-1b1113beb641
Stored capture screenshot: https://i.ibb.co/N6zK7SM6/91681aa1368f.png
Cloudflare Radar screenshot (2026-10-28T01:52:05Z): https://screenshots.phishdestroy.io/cf/fe0126d1-8fe5-42dc-93bd-1b1113beb641.png
URLScan screenshot (2026-10-28T01:17:44Z): https://screenshots.phishdestroy.io/us/01a18015-8a5f-7662-9ed0-a0c1fbdb5d9e.png
URLScan capture report: https://urlscan.io/result/01a18015-8a5f-7662-9ed0-a0c1fbdb5d9e/
VirusTotal report: https://www.virustotal.com/gui/domain/manuelvila.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=manuelvila.com
Archived copy: https://web.archive.org/web/20261028012230/https://manuelvila.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-28 01:53:29 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/N6zK7SM6/91681aa1368f.png
  Captured: 2026-10-28 01:21:26 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a18018-2cd0-705e-a3e5-c8eb00590558.png
  Captured: 2026-10-28 01:21:26 UTC
  Source report: https://urlscan.io/result/01a18018-2cd0-705e-a3e5-c8eb00590558/
- URLScan · 2026-10-28: https://screenshots.phishdestroy.io/us/01a18015-8a5f-7662-9ed0-a0c1fbdb5d9e.png
  Captured: 2026-10-28 01:17:44 UTC
  Source report: https://urlscan.io/result/01a18015-8a5f-7662-9ed0-a0c1fbdb5d9e/
  SHA-256: 371153358c254f67f5e0c5837b543340b9b8062839aa204fa7018f1bf925b758
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/fe0126d1-8fe5-42dc-93bd-1b1113beb641.png
  Captured: 2026-10-28 01:52:05 UTC
  Source report: https://radar.cloudflare.com/scan/fe0126d1-8fe5-42dc-93bd-1b1113beb641
  SHA-256: dca41c1299e3e2de508bfbe7744d7be8419ab198cf0a991a0d9db9572d1922ab

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-28T01:52:45Z",
        "uuid": "01a18018-2cd0-705e-a3e5-c8eb00590558",
        "scanned_at": "2026-10-28T01:20:51Z",
        "final_url": "https://manuelvila.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://manuelvila.com/",
                "from": "http://manuelvila.com/",
                "status": 307
            },
            {
                "to": "http://manuelvila.com/",
                "from": "https://manuelvila.com/",
                "status": 307
            },
            {
                "to": "https://manuelvila.com/",
                "from": "http://manuelvila.com/",
                "status": 307
            }
        ],
        "ip": "188.114.96.3",
        "domains": [
            "cloudflareinsights.com",
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.16.79.73",
            "188.114.96.3"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "a745543f84e6ecf89cc368403293ef46e87742c30bd5ed87bf4cc9e60eb23362",
        "globals": [
            "__cfBeacon"
        ],
        "tls": {
            "san": [
                "manuelvila.com",
                "*.manuelvila.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "manuelvila.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-18T15:11:01Z",
            "valid_from": "2026-10-20T14:11:03Z"
        },
        "domain_age_days": 6,
        "apex_age_days": 6,
        "tls_age_days": 7,
        "tls_valid_days": 90,
        "requests": 9,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 91,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000",
            "x-frame-options": "DENY",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-28T01:52:46Z",
        "uuid": "fe0126d1-8fe5-42dc-93bd-1b1113beb641",
        "scanned_at": "2026-10-28T01:52:05Z",
        "final_url": "https://manuelvila.com/",
        "status": 200,
        "history": [
            {
                "url": "https://manuelvila.com/",
                "status": 200
            }
        ],
        "dom_hash": "87e4836957c8d884e2c856042470af0cf58b05dbc2da95d8ab0362b37ccd1ab8",
        "doc_hash": "a745543f84e6ecf89cc368403293ef46e87742c30bd5ed87bf4cc9e60eb23362",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "manuelvila.com",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "manuelvila.com",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "manuelvila.com",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            },
            {
                "name": "manuelvila.com",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            }
        ],
        "dnssec_valid": true,
        "ip": "127.0.1.24",
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "created": "2026-10-20T13:22:08Z",
            "updated": "2026-10-20T13:29:28Z",
            "expires": "2027-10-20T13:22:08Z",
            "nameservers": [
                "anahi.ns.cloudflare.com",
                "clint.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-28T01:51:56Z",
        "analysis_at": "2026-10-27T03:44:53Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 4,
            "suspicious": 1,
            "undetected": 35
        },
        "detections": {
            "CRDF": "malicious",
            "Kaspersky": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "registrar": "Cloudflare, Inc.",
        "created": "2026-10-20T13:22:08Z",
        "expires": "2027-10-20T13:22:08Z",
        "updated": "2026-10-20T13:29:28Z",
        "first_seen": "2026-10-20T14:20:31Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "clint.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "anahi.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::6815:5591"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "anahi.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route2.mx.cloudflare.net",
                "priority": 35
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route3.mx.cloudflare.net",
                "priority": 50
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route1.mx.cloudflare.net",
                "priority": 98
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:ceab"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 include:_spf.mx.cloudflare.net ~all"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.206.171"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.85.145"
            }
        ],
        "dns_at": "2026-10-27T04:21:34Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "manuelvila.com",
                "*.manuelvila.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "4f87cf87727398670e29d06787aa27cf",
            "sha256": "2a73d502d6967adfd5fc1d16d3272384467dcc71171b723939ade7fd8b908931",
            "subject": "manuelvila.com",
            "valid_to": "2027-01-18T15:11:01Z",
            "valid_from": "2026-10-20T14:11:03Z"
        },
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "registrar_iana_id": "1910",
            "registrar_url": "http://www.cloudflare.com",
            "created": "2026-10-20T13:22:08Z",
            "updated": "2026-10-20T13:22:14Z",
            "expires": "2027-10-20T13:22:08Z",
            "status": [
                "addperiod",
                "clientTransferProhibited",
                "clienttransferprohibited"
            ],
            "nameservers": [
                "anahi.ns.cloudflare.com",
                "clint.ns.cloudflare.com"
            ],
            "dnssec": "signedDelegation"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "add period"
            ],
            "events": {
                "expiration": "2027-10-20T13:22:08Z",
                "last changed": "2026-10-20T13:22:14Z",
                "registration": "2026-10-20T13:22:08Z",
                "last update of RDAP database": "2026-10-20T13:22:14Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-28T01:53:04Z",
        "mail_config": {
            "mx": [
                "route2.mx.cloudflare.net",
                "route3.mx.cloudflare.net",
                "route1.mx.cloudflare.net"
            ],
            "spf": "v=spf1 include:_spf.mx.cloudflare.net ~all",
            "dane": true,
            "spf_lookups": 1
        },
        "caa_records": {
            "domain": "manuelvila.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-28T01:22:30Z",
            "first": "2011-02-07T19:41:13Z",
            "changes": 1,
            "days_archived": 5,
            "scans_per_day": 0,
            "avg_page_bytes": 1393
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://manuelvila.com/sitemap-index.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 14
        },
        "social_tags": {
            "ogUrl": "https://manuelvila.com/",
            "title": "Manuel Vila",
            "ogType": "website",
            "ogImage": "https://manuelvila.com/og-default.png",
            "ogTitle": "Manuel Vila",
            "generator": "Astro v7.4.1",
            "description": "Manuel Vila. Web personal en español e inglés · Personal site in Spanish and English.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://manuelvila.com/",
            "ogDescription": "Manuel Vila. Web personal en español e inglés · Personal site in Spanish and English."
        },
        "trackers": {
            "requests": 7,
            "trackers": [
                {
                    "name": "Cloudflare Insights",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 7,
                "tls": 51,
                "wait": 37,
                "connect": 8,
                "download": 1
            },
            "response_ms": 104
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 9200,
            "co2_grams": 0.0003,
            "cleaner_than": 74
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.38.24",
                    "host": "anahi.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.90",
                    "host": "clint.ns.cloudflare.com"
                }
            ],
            "zone": "manuelvila.com"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Washington",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "manuelvila.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "MX": [
                "{\"exchange\": \"route2.mx.cloudflare.net\", \"priority\": 35}",
                "{\"exchange\": \"route1.mx.cloudflare.net\", \"priority\": 98}",
                "{\"exchange\": \"route3.mx.cloudflare.net\", \"priority\": 50}"
            ],
            "NS": [
                "clint.ns.cloudflare.com",
                "anahi.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"anahi.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418007282, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "v=spf1 include:_spf.mx.cloudflare.net ~all"
            ],
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": true,
            "rrsig": true,
            "dnskey": true
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": "DENY",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://manuelvila.com"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Astro",
                "Cloudflare Browser Insights",
                "Priority Hints",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 3
        },
        "whois": {
            "registrar": "Cloudflare, Inc.",
            "created": "2026-10-20T13:22:08Z",
            "updated": "2026-10-20T13:29:28Z",
            "expires": "2027-10-20T13:22:08Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "anahi.ns.cloudflare.com",
                "clint.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000",
                "x-frame-options": "DENY",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()"
            }
        }
    }
}
```