# notes-to-outlook.com: Payout Desk articles and guides listing | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/notes-to-outlook.com/ Machine-readable companion: https://phishdestroy.io/domain/notes-to-outlook.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-09 19:38:53 UTC - Selected availability observation: 2026-11-10T03:53:58Z - Stored record updated: 2026-11-10 03:53:58 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): Microsoft ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 (observed: 2026-11-10T03:53:58Z) - Registration date in stored WHOIS data: 2026-11-02 23:34:40 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1c1d1-256e-75dd-9136-eb7ce361c087/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/notes-to-outlook.com - Certificate Transparency search: https://crt.sh/?q=%25.notes-to-outlook.com - Web Archive lookup: https://web.archive.org/web/*/https://notes-to-outlook.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records notes-to-outlook.com showing a Payout Desk page of articles and guides covering affiliate payouts, networks, and conversions. On 2026-11-09, notes-to-outlook.com displayed a page branded "Payout Desk: articles and guides," described as independent articles and guides from the editorial team. The page shows counts of 17 articles and 599 services, with a sidebar offering Articles and Services list navigation. Below, a grid of article cards covers topics such as CPA network agreements, affiliate account approval, identity verification, rejected leads, reversals and clawbacks, offer caps, payout requests, payout methods, and reconciling statements. Each card shows a title and a short summary. The stored VirusTotal domain result reports 0 detections out of 92 engines. Package revision: 9fd4d2b15a96e780155efbd89561d923db3fb1a0b6a593ec52acd93f74aba2bd Text generated (not scan time): 2026-11-09 21:14:24 Reviewed evidence snapshot: {"domain":"notes-to-outlook.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"notes-to-outlook.com","final_host":"notes-to-outlook.com","redirects":[],"captured_at":"2026-11-09T19:37:59.273000Z","uuid":"01a1c1d1-256e-75dd-9136-eb7ce361c087","report_url":"https://urlscan.io/result/01a1c1d1-256e-75dd-9136-eb7ce361c087/","sha256":"c7c8b00be6738e695488daa5a5543fadfdb83f10f3a21f31d9e4d3e63fca5a99","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"Insufficient page content for analysis","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":0,"engines":92,"malicious":0,"suspicious":0,"analysis_date":"2026-11-09","retrieved_date":"2026-11-09","vendor_labels":[],"flagging_vendors":[]},"virustotal_public_summary":"The stored VirusTotal domain result reports 0 detections out of 92 engines.","page_paragraph_target_characters":603} Source facts (timestamps as stored): {"record_id":1884835,"first_recorded_at":"2026-11-09 20:38:53","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-11-09T19:43:52Z","checked_at":null,"fetched_at":"2026-11-09T20:11:24Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-11-09 19:43:52","checked_at":"2026-11-09 21:11:24","fetched_at":"2026-11-09 20:11:24","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":[],"vendor_names":[],"stats":{"timeout":0,"harmless":59,"malicious":0,"suspicious":0,"undetected":33}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-09 21:11:37"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-10 00:31:36"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1884835,"scope":"checked_url","observed_at":"2026-11-10T03:53:58Z","http_status":200,"http_observed_at":"2026-11-10T03:53:58Z","stored_http_code":200,"stored_http_observed_at":"2026-11-10T03:53:58Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - Stored capture: https://i.ibb.co/vx4LVyNx/a6ca569bedfa.png - URLScan · 2026-11-09: https://screenshots.phishdestroy.io/us/01a1c1d1-256e-75dd-9136-eb7ce361c087.png Captured: 2026-11-09 19:37:59 UTC Source report: https://urlscan.io/result/01a1c1d1-256e-75dd-9136-eb7ce361c087/ SHA-256: c7c8b00be6738e695488daa5a5543fadfdb83f10f3a21f31d9e4d3e63fca5a99 - URLScan · 2026-11-03: https://screenshots.phishdestroy.io/us/01a19edf-4d6f-726c-aa60-1ae7729b89ba.png Captured: 2026-11-03 00:46:43 UTC Source report: https://urlscan.io/result/01a19edf-4d6f-726c-aa60-1ae7729b89ba/ SHA-256: a40a53c5170b25aeb9441a40102de14655bee3894073dbe8d614e32a91ae6afe - URLScan · 2026-11-03: https://screenshots.phishdestroy.io/us/01a19f22-3871-719d-9587-6ad098f65bde.png Captured: 2026-11-03 01:59:48 UTC Source report: https://urlscan.io/result/01a19f22-3871-719d-9587-6ad098f65bde/ SHA-256: 614389c2c292b1905dd562df4aa67b5c3da45717fd6c5186760c4e38ab94594d - URLScan · 2026-11-03: https://screenshots.phishdestroy.io/us/01a1a39d-b474-729e-a2c9-aab0c4170e17.png Captured: 2026-11-03 22:53:11 UTC Source report: https://urlscan.io/result/01a1a39d-b474-729e-a2c9-aab0c4170e17/ SHA-256: 2ad4aad258151e4b5dd5c9d811cfeab9dd120b48ca32d89babc79e4978df1d77 - URLScan · 2026-11-09: https://screenshots.phishdestroy.io/us/01a1c1d4-ef0b-700c-9f1b-8f6509776d4b.png Captured: 2026-11-09 19:42:07 UTC Source report: https://urlscan.io/result/01a1c1d4-ef0b-700c-9f1b-8f6509776d4b/ SHA-256: c7c8b00be6738e695488daa5a5543fadfdb83f10f3a21f31d9e4d3e63fca5a99 - URLScan · 2026-11-09: https://screenshots.phishdestroy.io/us/01a1c27f-5657-72af-a5ba-75bdd1f9de50.png Captured: 2026-11-09 22:48:21 UTC Source report: https://urlscan.io/result/01a1c27f-5657-72af-a5ba-75bdd1f9de50/ SHA-256: f53b4f6e3156e8b7e07a9f1aede8cd20cd3473e980dba2beafb2dfd5d2e0b1a3 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5a254e86-f0d9-44ef-872c-b78bf89a2838.png Captured: 2026-11-09 20:12:44 UTC Source report: https://radar.cloudflare.com/scan/5a254e86-f0d9-44ef-872c-b78bf89a2838 SHA-256: 2c96535de6d9dd94d2344845b3f45db3fe4c9a52bbd593452797eec2fa51ba2a ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-09T19:39:49Z", "uuid": "01a1c1d1-256e-75dd-9136-eb7ce361c087", "scanned_at": "2026-11-09T19:37:59Z", "final_url": "https://notes-to-outlook.com/", "status": 200, "ip": "104.21.47.35", "domains": [ "static.cloudflareinsights.com" ], "ips": [ "104.21.47.35" ], "asns": [ "13335" ], "doc_hash": "d77dde1598ecca196b6219da1b3ddcefdeab48541afbf74d6017ed572cec8386", "tls": { "san": [ "*.notes-to-outlook.com", "notes-to-outlook.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "notes-to-outlook.com", "protocol": "QUIC", "valid_to": "2027-01-31T23:40:05Z", "valid_from": "2026-11-02T23:40:06Z" }, "domain_age_days": 3630, "apex_age_days": 3630, "tls_age_days": 6, "tls_valid_days": 89, "requests": 3, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": -66, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "includeSubDomains; max-age=63072000; preload", "content-security-policy": "default-src 'none'; script-src 'self'; font-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; img-src 'self'", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "interest-cohort=(), payment=(), geolocation=(), accelerometer=(), gyroscope=(), clipboard-read=(), idle-detection=(), camera=(), ambient-light-sensor=(), display-capture=(), microphone=()", "cross-origin-opener-policy": "same-origin", "cross-origin-resource-policy": "same-site", "priority": "u=0,i" } }, "cf": { "v": 1, "fetched_at": "2026-11-09T20:13:47Z", "uuid": "5a254e86-f0d9-44ef-872c-b78bf89a2838", "scanned_at": "2026-11-09T20:12:44Z", "final_url": "https://notes-to-outlook.com/", "status": 200, "history": [ { "url": "https://notes-to-outlook.com/", "status": 200 } ], "dom_hash": "748c6d97f28931f4dcfc55231defac650bc6504dd4fca3d0afd7508526733492", "doc_hash": "d77dde1598ecca196b6219da1b3ddcefdeab48541afbf74d6017ed572cec8386", "domain_risks": [ "Technology" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "notes-to-outlook.com", "type": "A", "value": "188.114.96.0" }, { "name": "notes-to-outlook.com", "type": "A", "value": "188.114.97.0" }, { "name": "notes-to-outlook.com", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "notes-to-outlook.com", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "127.0.1.6", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-11-03T00:34:40Z", "updated": "2026-11-03T00:35:55Z", "expires": "2027-11-03T00:34:40Z", "nameservers": [ "harley.ns.cloudflare.com", "maisie.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-09T20:11:24Z", "analysis_at": "2026-11-09T19:43:52Z", "stats": { "timeout": 0, "harmless": 59, "malicious": 0, "suspicious": 0, "undetected": 33 }, "reputation": 0, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-11-03T00:34:40Z", "expires": "2027-11-03T00:34:40Z", "updated": "2026-11-03T00:35:55Z", "first_seen": "2023-12-15T03:48:13Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "maisie.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::ac43:aa59" }, { "ttl": 300, "type": "A", "value": "104.21.47.35" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::6815:2f23" }, { "ttl": 21600, "type": "NS", "value": "harley.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "harley.ns.cloudflare.com" }, { "ttl": 120, "type": "TXT", "value": "google-site-verification=5xdAlpKj4qrcholGTa7rckN5ihTcw28m1-O7Nsxdo08" }, { "ttl": 300, "type": "A", "value": "172.67.170.89" } ], "dns_at": "2026-11-09T19:43:55Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.notes-to-outlook.com", "notes-to-outlook.com" ], "issuer": "Let's Encrypt / YE1", "serial": "621efe1b5b37b832c24c20e32c9dc322d0d", "sha256": "5e35ef513fba568f2e7c2a756dd6d4ce9c556c1ecd124ed351aacd89eeae4a9f", "subject": "notes-to-outlook.com", "valid_to": "2027-01-31T23:40:05Z", "valid_from": "2026-11-02T23:40:06Z" }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765", "registrar_url": "https://nicenic.com", "created": "2026-11-03T00:34:40Z", "updated": "2026-11-03T00:34:40Z", "expires": "2027-11-03T00:34:40Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "harley.ns.cloudflare.com", "maisie.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-11-03T00:34:40Z", "registration": "2026-11-03T00:34:40Z", "registrar expiration": "2027-11-03T00:34:40Z", "last update of RDAP database": "2026-11-03T16:51:35Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-11-09T20:14:00Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-11-09T19:40:12Z", "first": "2008-08-20T15:43:27Z", "changes": 82, "days_archived": 130, "scans_per_day": 0.02, "avg_page_bytes": -8042594 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://notes-to-outlook.com/sitemap-index.xml" ] }, "sitemap": { "present": true, "url_count": 275 }, "social_tags": { "ogUrl": "https://notes-to-outlook.com/", "title": "Payout Desk — articles and guides", "ogType": "website", "ogTitle": "Payout Desk — articles and guides", "ogSiteName": "Payout Desk", "description": "A small library of practical guides on CPA networks, payouts and offer terms: every piece shows when it was published, and the site says who to write to.", "twitterCard": "summary", "canonicalUrl": "https://notes-to-outlook.com/", "ogDescription": "A small library of practical guides on CPA networks, payouts and offer terms: every piece shows when it was published, and the site says who to write to." }, "trackers": { "requests": 1 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 15, "tls": 40, "wait": 1071, "connect": 6, "download": 555 }, "response_ms": 1687 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 96401, "co2_grams": 0.0035, "cleaner_than": 23 }, "dns_server": { "ns": [ { "ip": "162.159.44.128", "host": "harley.ns.cloudflare.com" }, { "ip": "108.162.194.89", "host": "maisie.ns.cloudflare.com" } ], "zone": "notes-to-outlook.com" }, "location": { "ip": "2a06:98c1:3120::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "notes-to-outlook.com" }, "dns": { "A": [ "188.114.97.3", "188.114.96.3" ], "NS": [ "harley.ns.cloudflare.com", "maisie.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"harley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2419155468, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "google-site-verification=5xdAlpKj4qrcholGTa7rckN5ihTcw28m1-O7Nsxdo08" ], "AAAA": [ "2a06:98c1:3121::3", "2a06:98c1:3120::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "includeSubDomains; max-age=63072000; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "interest-cohort=(), payment=(), geolocation=(), accelerometer=(), gyroscope=(), clipboard-read=(), idle-detection=(), ca", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "default-src 'none'; script-src 'self'; font-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; frame-ancesto", "strictTransportPolicy": "includeSubDomains; max-age=63072000; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": "same-site" }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://notes-to-outlook.com" ] }, "tech_stack": { "technologies": [ "HSTS", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 28 }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-11-03T00:34:40Z", "updated": "2026-11-03T00:35:55Z", "expires": "2027-11-03T00:34:40Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "harley.ns.cloudflare.com", "maisie.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "includeSubDomains; max-age=63072000; preload", "content-security-policy": "default-src 'none'; script-src 'self'; font-src 'self'; style-src 'self' 'unsafe-inline'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; img-src 'self'", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "interest-cohort=(), payment=(), geolocation=(), accelerometer=(), gyroscope=(), clipboard-read=(), idle-detection=(), camera=(), ambient-light-sensor=(), display-capture=(), microphone=()", "cross-origin-opener-policy": "same-origin", "cross-origin-resource-policy": "same-site" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1c1d1-256e-75dd-9136-eb7ce361c087.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1c1d1-256e-75dd-9136-eb7ce361c087/","captured_at":"2026-11-09T19:37:59Z","sha256":"c7c8b00be6738e695488daa5a5543fadfdb83f10f3a21f31d9e4d3e63fca5a99","model_image_sha256":"d306c23994539143242b21695456c1ce54312d4c3aeee4b835c8a788fb96f9e8","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/notes-to-outlook.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1884835, "scope": "checked_url", "observed_at": "2026-11-10T03:53:58Z", "http_status": 200, "http_observed_at": "2026-11-10T03:53:58Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-10T03:53:58Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```