# PhishDestroy domain threat record: obmenoff.live

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/obmenoff.live/
Machine-readable companion: https://phishdestroy.io/domain/obmenoff.live/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 13:01:25 UTC
- Last availability or vendor check: 2026-10-22 13:01:25 UTC
- Stored record updated: 2026-10-22 16:30:28 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 200
- Registration date (registry RDAP, obmenoff.live): 2026-10-19 02:49:32 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a163b2-4396-712d-84a1-5ee111ed4e05/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/obmenoff.live
- Certificate Transparency search: https://crt.sh/?q=%25.obmenoff.live
- Web Archive lookup: https://web.archive.org/web/*/https://obmenoff.live/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added obmenoff.live to its internal blocklist after an admin report that the page displays a Russian “Сайт в разработке” notice. The domain was first seen by PhishDestroy on 2026-10-22, three days after its registration on 2026-10-19. An HTTP 200 response was recorded on the same day.

How the scam works
The current listing does not reveal a concrete scam technique; it merely flags the domain as suspicious because newly created crypto‑related sites are often abused for phishing or fraudulent exchanges. No malicious forms, wallet requests, or credential harvesters were observed on the page.

Evidence
VirusTotal scanned the domain on 2026-10-22 with 92 engines and reported 0 malicious and 0 suspicious detections. Google Safe Browsing also returned no flag on that date. OTX listed 4 pulses referencing the domain as of 2026-10-22, but without a malicious verdict. URLScan captured the site on 2026-10-22; its machine‑learning engine gave a malicious score of 86, yet the overall verdict was non‑malicious. Cloudflare Radar flagged the domain under the “phishing” category and noted risks such as “Newly Seen Domains” and “Security Risks.” PhishDestroy’s internal blocklist marks the domain as present, while external blocklists showed zero hits.

Infrastructure
The domain was registered on 2026-10-19 with NICENIC INTERNATIONAL GROUP CO., LIMITED. TLS was provided by Let’s Encrypt, issued on 2026-10-19 and valid until 2027-01-17 for obmenoff.live and *.obmenoff.live. DNS records observed on 2026-10-22 pointed to Cloudflare IPs (A 188.114.96.9, 188.114.97.9; AAAA 2a06:98c1:3120::9, 2a06:98c1:3121::9) and the network was identified as CloudFLARENET‑EU in Great Britain; no DNSSEC data were present.

What to do
Visitors should avoid entering credentials, wallet addresses, or private keys on the site; if any data were submitted, change related passwords and monitor accounts for unusual activity. Defenders should add obmenoff.live to web‑filter blocklists and review server logs for connections to the recorded IPs, applying policies only to this exact domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a163b2-4396-712d-84a1-5ee111ed4e05/
Cloudflare Radar report: https://radar.cloudflare.com/scan/222237e4-e46f-4491-84dd-dfd32d89a86b
URLQuery report: https://urlquery.net/report/2afbde59-4126-4a4e-9fed-bdf564c4d292
Stored capture screenshot: https://i.ibb.co/M5kvcf5H/6e555ed82fd8.png
Cloudflare Radar screenshot (2026-10-22T13:36:41Z): https://screenshots.phishdestroy.io/cf/222237e4-e46f-4491-84dd-dfd32d89a86b.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/2afbde59-4126-4a4e-9fed-bdf564c4d292.png
URLScan screenshot (2026-10-22T12:56:12Z): https://screenshots.phishdestroy.io/us/01a163ae-dbf8-708e-84a8-e6169210d5c3.png
URLScan capture report: https://urlscan.io/result/01a163ae-dbf8-708e-84a8-e6169210d5c3/
URLScan screenshot (2026-10-22T12:58:22Z): https://screenshots.phishdestroy.io/us/01a163b0-d407-7052-b575-98d30dc35d26.png
URLScan capture report: https://urlscan.io/result/01a163b0-d407-7052-b575-98d30dc35d26/
VirusTotal report: https://www.virustotal.com/gui/domain/obmenoff.live
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=obmenoff.live
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 13:39:23 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/M5kvcf5H/6e555ed82fd8.png
  Captured: 2026-10-22 13:01:25 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a163b2-4396-712d-84a1-5ee111ed4e05.png
  Captured: 2026-10-22 13:01:25 UTC
  Source report: https://urlscan.io/result/01a163b2-4396-712d-84a1-5ee111ed4e05/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/222237e4-e46f-4491-84dd-dfd32d89a86b.png
  Captured: 2026-10-22 13:36:41 UTC
  Source report: https://radar.cloudflare.com/scan/222237e4-e46f-4491-84dd-dfd32d89a86b
  SHA-256: 3fcc520fcb968f55517fe7e39a00fbfc82521439cdb167a7dd3e08a523b6177b
- URLQuery: https://screenshots.phishdestroy.io/uq/2afbde59-4126-4a4e-9fed-bdf564c4d292.png
  Source report: https://urlquery.net/report/2afbde59-4126-4a4e-9fed-bdf564c4d292
  SHA-256: d0ecdd2c517f7ddf31372cd8b7839b4feb7f904f595755c3ea8d6d109cccb19b
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163ae-dbf8-708e-84a8-e6169210d5c3.png
  Captured: 2026-10-22 12:56:12 UTC
  Source report: https://urlscan.io/result/01a163ae-dbf8-708e-84a8-e6169210d5c3/
  SHA-256: f62c5557c76272071262ca908e11d8729dda2daa98a81a2aa633d856f28d3dc9
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163b0-d407-7052-b575-98d30dc35d26.png
  Captured: 2026-10-22 12:58:22 UTC
  Source report: https://urlscan.io/result/01a163b0-d407-7052-b575-98d30dc35d26/
  SHA-256: 917bda3393a0df5b31ea5b6358fda0bd4898cfc749399ddcc6b9f419fb3dc62b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T13:03:29Z",
        "uuid": "01a163b2-4396-712d-84a1-5ee111ed4e05",
        "scanned_at": "2026-10-22T12:59:55Z",
        "final_url": "https://obmenoff.live/",
        "status": 200,
        "ip": "2a06:98c1:3120::3",
        "ips": [
            "188.114.96.3",
            "2a06:98c1:3120::3"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "504550caba7d8a43d883587be129d8815948379ba6b93462df1a385cae6f1457",
        "script_hashes": [
            "833567d505fed696beed49ecf5ff70ea1f2b838f0c8f64c1b8d2b5564a68e343",
            "2c752a401191671d5bbbe7514f5828bbb0a7cc50bfbe77ddaf1b1ccba4412ed2",
            "6fae740f3b027bbe7ef3763f726c42e8b2232e55889caae96c7354b30646e352",
            "53685a01264114d894a9029fa5db30ffad50793404b1ce72b28daf944aaecbc9"
        ],
        "globals": [
            "webpackChunk_N_E",
            "__next_f",
            "next",
            "_N_E_STYLE_LOAD"
        ],
        "tls": {
            "san": [
                "*.obmenoff.live",
                "obmenoff.live"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "obmenoff.live",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-17T16:49:03Z",
            "valid_from": "2026-10-19T16:49:04Z"
        },
        "domain_age_days": 2,
        "apex_age_days": 2,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 86,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T13:38:36Z",
        "uuid": "222237e4-e46f-4491-84dd-dfd32d89a86b",
        "scanned_at": "2026-10-22T13:36:41Z",
        "final_url": "https://obmenoff.live/",
        "status": 200,
        "history": [
            {
                "url": "https://obmenoff.live/",
                "status": 200
            }
        ],
        "dom_hash": "4564820c3252c5364d96c7fa24610bd2452fb1a82fa7971b6e51a07caff1e357",
        "doc_hash": "d8bb4a1a6b445711e6b56dd63022fcbc57c1a5065f15beffda2c021927c9ca51",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "obmenoff.live",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "obmenoff.live",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "obmenoff.live",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            },
            {
                "name": "obmenoff.live",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.97.0",
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-19T02:49:32Z",
            "updated": "2026-10-19T17:40:31Z",
            "expires": "2027-10-19T02:49:32Z",
            "nameservers": [
                "santino.ns.cloudflare.com",
                "indie.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T13:36:23Z",
        "analysis_at": "2026-10-22T13:25:18Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "first_seen": "2026-10-19T18:01:52Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:de56"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "indie.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "santino.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.17.56"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "indie.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.222.86"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:1138"
            }
        ],
        "dns_at": "2026-10-22T13:30:37Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.obmenoff.live",
                "obmenoff.live"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "58bbaaf7f9ac28de113f185f14ee9cc8c5e",
            "sha256": "d9114eb4e4b0d844d348f177ed6003a9718e2b10706b185c037b00e8e504ba27",
            "subject": "obmenoff.live",
            "valid_to": "2027-01-17T16:49:03Z",
            "valid_from": "2026-10-19T16:49:04Z"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-18T16:00:00Z",
                "registration": "2026-10-18T16:00:00Z",
                "registrar expiration": "2027-10-18T16:00:00Z",
                "last update of RDAP database": "2026-10-18T16:00:00Z"
            },
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T13:38:48Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "obmenoff.live"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "social_tags": {
            "title": "Сайт в разработке",
            "description": "Crypto exchange"
        },
        "trackers": {
            "requests": 6
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 14,
                "wait": 356,
                "connect": 28,
                "download": 0
            },
            "response_ms": 399
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 6315,
            "co2_grams": 0.0002,
            "cleaner_than": 82
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.1",
                    "host": "santino.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.194.163",
                    "host": "indie.ns.cloudflare.com"
                }
            ],
            "zone": "obmenoff.live"
        },
        "location": {
            "ip": "2a06:98c1:3121::9",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "obmenoff.live"
        },
        "dns": {
            "A": [
                "188.114.97.9",
                "188.114.96.9"
            ],
            "NS": [
                "indie.ns.cloudflare.com",
                "santino.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"indie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417946046, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::9",
                "2a06:98c1:3120::9"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::9",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://obmenoff.live"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Node.js",
                "React",
                "Next.js",
                "Priority Hints",
                "HSTS",
                "Cloudflare",
                "Webpack",
                "Module Federation",
                "HTTP/3"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```