# PhishDestroy threat dossier — pantera-scale.com ================================================================ Fetched: 2026-07-29 07:08:12 UTC Canonical: https://phishdestroy.io/domain/pantera-scale.com/ ## VERDICT ---------------------------------------------------------------- CRITICAL THREAT — DO NOT VISIT Composite threat score: 97/100 (PhishDestroy scoring — see methodology below) ## DETECTION EVIDENCE ---------------------------------------------------------------- VirusTotal: 1/91 security vendors flagged this domain Flagging vendors: Netcraft AlienVault OTX: 2 pulses (threat-intel feed mentions) Public blocklists: listed on 1 independent blocklist ## INFRASTRUCTURE ---------------------------------------------------------------- IP address: 45.84.205.143 (LT, Vilnius) ASN: AS47583 Hostinger International Limited Hosting org: Hostinger International Limited Registrar: HOSTINGER operations, UAB Nameservers: cosmos.dns-parking.com, nova.dns-parking.com Registered: 2026-04-12 Expires: 2027-04-12 Page title: pantera-scale.com ## TLS CERTIFICATE ---------------------------------------------------------------- Issuer: Let's Encrypt / YE1 Expires: 2026-09-09 Status: INVALID chain Fingerprint: 59b2433fe56540a6dbb3cda5eddfdeb469aec4239e722ec48f85a8cd82ed024a Subject Alternative Names (related infrastructure — often same operator): - www.pantera-scale.com ## ABUSE-REPORT HISTORY (evidence of registrar non-response) ---------------------------------------------------------------- Status: pending notification queue. No abuse reports filed yet — this domain is waiting for the next cycle of our automated abuse-reporter. ## TIMELINE ---------------------------------------------------------------- Domain registered: 2026-04-12 (per WHOIS / CT — may reflect a renewal or transfer date, not first-ever registration) First detected: 2026-07-27 07:30:02 UTC (by PhishDestroy tracker) First reported: 2026-07-27 08:41:58 UTC (abuse notice filed) Last verified: 2026-07-29 04:30:58 UTC Current status: ACTIVE / observable ## EXTERNAL CORROBORATION (third-party evidence) ---------------------------------------------------------------- URLScan.io: https://urlscan.io/result/019fa20a-d07c-72da-b434-a6974b4e6649/ URLQuery: https://urlquery.net/report/756ab2e4-c5fc-405d-b87f-123653a56116 Wayback Machine: https://web.archive.org/web/*/pantera-scale.com crt.sh CT logs: https://crt.sh/?q=%25.pantera-scale.com Google transparency: https://transparencyreport.google.com/safe-browsing/search?url=pantera-scale.com AlienVault OTX: https://otx.alienvault.com/indicator/domain/pantera-scale.com URLhaus: https://urlhaus.abuse.ch/host/pantera-scale.com/ ## ANALYST NARRATIVE ---------------------------------------------------------------- [Generated: 2026-07-27 07:34:34 UTC — narrative may predate facts above. Treat fields in TIMELINE / DETECTION EVIDENCE / INFRASTRUCTURE as authoritative if they differ from the prose below.] pantera-scale.com Generic Phishing Alert The domain pantera-scale.com was registered on 12 April 2026 through the Hostinger operations unit (UAB) and is currently delegated to the DNS parking nameservers cosmos.dns-parking.com and nova.dns-parking.com. DNS resolution points to the single IPv4 address 45.84.205.143, which is the only hosting endpoint observed for this indicator. The domain is listed on one public security blocklist and has been actively blocked by the PhishDestroy service, indicating that threat‑intelligence feeds have identified it as malicious. VirusTotal analysis shows that one out of ninety‑one scanned vendors flagged the domain, providing additional corroboration of its suspicious nature. No public SSL certificate details, HTTP response codes, or page‑title information have been disclosed, so the exact content and any credential‑harvesting mechanisms remain unknown. Likewise, Safe Browsing status, Open Threat Exchange references, and reputation scores have not been published, limiting the depth of the technical profile. The limited detection surface suggests a low‑profile infrastructure that relies on domain‑parking services and a single IP host, a pattern frequently observed in short‑lived phishing campaigns. Defenders should treat pantera-scale.com as a high‑risk indicator. Immediate actions include adding the domain to URL filtering and DNS‑sinkhole lists, enforcing block rules in email gateways, and monitoring outbound connections to the host IP 45.84.205.143. Because the hosting provider is Hostinger, organizations that allow outbound traffic to its network may wish to apply additional scrutiny or temporary outbound restrictions. Continuous re‑assessment is advised, as further intelligence such as page content, SSL fingerprints, or additional vendor detections could emerge. Until more detailed artefacts are released, the domain should be considered active and malicious. ## EVIDENCE HASHES ---------------------------------------------------------------- PhishDestroy Case ID: PD-20260727-814699 TLS cert SHA-256: 59b2433fe56540a6dbb3cda5eddfdeb469aec4239e722ec48f85a8cd82ed024a ## SCORING METHODOLOGY ---------------------------------------------------------------- Composite score is NOT derived from VirusTotal alone. PhishDestroy aggregates: - VirusTotal positive ratio - Public blocklist consensus (MetaMask, ScamSniffer, OpenPhish, PhishTank, URLhaus, CryptoFirewall, SEAL, Polkadot, Enkrypt, Phishunt, DiscordPhishing, PhishingDB) - Cloaking detection (HTTP 666 or rendering delta between bot and real visitor) - DNS-filter consensus (Quad9, CleanBrowsing, NextDNS, AdGuard, Cloudflare, etc.) - AlienVault OTX pulses + Cloudflare Radar + Google Safe Browsing - URLScan / URLQuery verdicts - Brand-impersonation heuristics (DOM analysis of forms, logos, wording) - Known phishing-kit fingerprinting (favicon hash, JS obfuscation signatures) - Wallet-drainer family classification (Angel, MS, Rainbow, Pink, Inferno, ...) - Free-TLS vs paid-cert ratio (throwaway infrastructure signal) - Registrar/hosting abuse history (this registrar's track record) - Human researcher sign-off (operator takedown team) A domain present in our database is ALREADY flagged. A low VT count by itself does NOT mean the domain is safe — new scam domains routinely show 0/95 VT for their first 7–30 days while actively draining wallets. Always cross-reference the composite score and the individual indicators above, not just VT. ## CORRECTIONS / APPEALS ---------------------------------------------------------------- Full HTML report: https://phishdestroy.io/domain/pantera-scale.com/ JSON API: https://api.destroy.tools/v1/check?domain=pantera-scale.com Appeal a flag: https://phishdestroy.io/appeals/ (responded to within 48 hours, FP rate <0.01%) Submit a report: https://t.me/PhishDestroy_bot About PhishDestroy: independent open-source threat-intelligence platform. Tracked: 193,191 domains (82,961 alive under monitoring, 107,970 confirmed takedowns/dead). Site: https://phishdestroy.io