# patriotfighters.netlify.app — Personal Invitation Link Page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/patriotfighters.netlify.app/ Machine-readable companion: https://phishdestroy.io/domain/patriotfighters.netlify.app/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-29 18:17:38 UTC - Last availability or vendor check: 2026-10-30 12:10:23 UTC - Stored record updated: 2026-10-30 14:07:53 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): zoom ## Stored infrastructure - Observed IP address: 35.157.26.135 - Registrar in stored WHOIS data: Netlify - Last stored HTTP status: 200 - Registration date (registry RDAP, netlify.app): 2018-05-08 22:48:05 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a188df-b42a-709e-8b4c-946ea2d5403c/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/patriotfighters.netlify.app - Certificate Transparency search: https://crt.sh/?q=%25.patriotfighters.netlify.app - Web Archive lookup: https://web.archive.org/web/*/https://patriotfighters.netlify.app/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package The captured page at patriotfighters.netlify.app, reviewed by PhishDestroy, displays a message asking visitors to open a personal invitation link from their email. The captured page at patriotfighters.netlify.app presents a single instruction: "Please open your personal invitation link from your email." The page title is "Your invitation," and the only visible interaction is following that emailed link, as no form or other control appears on the screen. A "Powered by Netlify" badge in the corner indicates the hosting platform. PhishDestroy's VirusTotal check of the domain patriotfighters.netlify.app returned 0 detections out of 92 engines, with 0 malicious and 0 suspicious verdicts. No vendor flagged the domain in this analysis. Package revision: 1fa35cf69321fd152184eefaa89d5317428a0f2e8cb7e98b66fbc6242a6c279f Text generated (not scan time): 2026-10-29 20:46:56 Reviewed evidence snapshot: {"domain":"patriotfighters.netlify.app","screenshot_available":true,"page_title":"Your invitation","initial_ai_description":"Insufficient page content for analysis","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":0,"engines":92,"malicious":0,"suspicious":0,"retrieved_date":"2026-10-29","analysis_date":"2026-10-29","scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T19:43:52Z","final_host":"patriotfighters.netlify.app","captured_on":"2026-10-29"}} Source facts (timestamps as stored): {"record_id":1707418,"first_recorded_at":"2026-10-29 19:17:38","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-29T19:36:18Z","checked_at":"2026-10-29 20:42:25","fetched_at":"2026-10-29T19:42:19Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-10-29 19:36:18","checked_at":"2026-10-29 20:42:25","fetched_at":"2026-10-29 19:42:26","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-29 20:42:41"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-29 20:30:12"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-30 13:10:23"}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a188df-b42a-709e-8b4c-946ea2d5403c.png Captured: 2026-10-29 18:17:38 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a188df-b42a-709e-8b4c-946ea2d5403c.png Captured: 2026-10-29 18:17:38 UTC Source report: https://urlscan.io/result/01a188df-b42a-709e-8b4c-946ea2d5403c/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/49aff703-18b1-4a1d-a050-86539730da7a.png Captured: 2026-10-29 19:43:52 UTC Source report: https://radar.cloudflare.com/scan/49aff703-18b1-4a1d-a050-86539730da7a SHA-256: 8cba5fdaa8043f480fab564d831a886170930ce1b0bf0e0534a69fc00fa63d59 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-29T19:02:27Z", "uuid": "01a188df-b42a-709e-8b4c-946ea2d5403c", "scanned_at": "2026-10-29T18:15:58Z", "final_url": "https://patriotrising.org/free-bar/", "status": 200, "redirected": "off-domain", "redirects": [ { "to": "https://patriotrising.org/free-bar", "from": "https://patriotfighters.netlify.app/" }, { "to": "https://patriotrising.org/free-bar/", "from": "https://patriotrising.org/free-bar", "status": 301 } ], "ip": "104.21.58.233", "domains": [ "fonts.gstatic.com", "patriotfighters.netlify.app", "static.cloudflareinsights.com", "cdnjs.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "142.251.41.163", "104.16.79.73", "104.17.24.14", "172.253.115.95", "104.21.58.233", "98.84.224.111" ], "asns": [ "15169", "13335", "14618" ], "countries": [ "US" ], "link_domains": [ "patriotstore.us" ], "doc_hash": "196b9e4e65f9524c84c156d8770a3879d0d8aa933683355790511d6ee662c1fb", "globals": [ "THREE", "__THREE__", "BarScene", "invitationRecipient", "__cfBeacon" ], "tls": { "san": [ "*.netlify.app", "netlify.app" ], "cipher": "AES_128_GCM", "issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "subject": "*.netlify.app", "protocol": "TLS 1.3", "valid_to": "2027-03-19T23:59:59Z", "valid_from": "2026-02-16T00:00:00Z" }, "domain_age_days": 900, "apex_age_days": 900, "tls_age_days": 1, "tls_valid_days": 90, "requests": 15, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 91, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Netlify", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload" } }, "cf": { "v": 1, "fetched_at": "2026-10-29T19:46:25Z", "uuid": "49aff703-18b1-4a1d-a050-86539730da7a", "scanned_at": "2026-10-29T19:43:52Z", "final_url": "https://patriotfighters.netlify.app/", "status": 200, "history": [ { "url": "https://patriotfighters.netlify.app/", "status": 200 } ], "dom_hash": "32e5971b4ffbe5188b5ddb3b4b1e471ac673a78e7ee753b987509fb40f037e21", "doc_hash": "196b9e4e65f9524c84c156d8770a3879d0d8aa933683355790511d6ee662c1fb", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "patriotfighters.netlify.app", "type": "A", "value": "63.176.8.218" }, { "name": "patriotfighters.netlify.app", "type": "A", "value": "35.157.26.135" }, { "name": "patriotfighters.netlify.app", "type": "AAAA", "value": "2a05:d014:58f:6200::258" }, { "name": "patriotfighters.netlify.app", "type": "AAAA", "value": "2a05:d014:58f:6200::259" } ], "dnssec_valid": false, "ip": "127.0.1.13", "whois": { "registrar": "Name.com, Inc.", "created": "2018-05-08T22:48:05Z", "updated": "2026-06-22T22:48:05Z", "expires": "2031-05-08T22:48:05Z", "nameservers": [ "dns1.p01.nsone.net", "dns2.p01.nsone.net", "dns3.p01.nsone.net", "dns4.p01.nsone.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-29T19:42:19Z", "analysis_at": "2026-10-29T19:36:18Z", "stats": { "timeout": 0, "harmless": 0, "malicious": 0, "suspicious": 0, "undetected": 92 }, "reputation": 0, "registrar": "Name.com, Inc.", "created": "2018-05-08T22:48:05Z", "expires": "2025-05-08T22:48:05Z", "updated": "2024-04-11T16:00:14Z", "first_seen": "2026-10-20T21:29:26Z", "dns": [ { "ttl": 311, "type": "AAAA", "value": "2600:1f18:16e:df01::259" }, { "ttl": 120, "type": "A", "value": "98.84.224.111" }, { "ttl": 120, "type": "A", "value": "18.208.88.157" }, { "ttl": 311, "type": "AAAA", "value": "2600:1f18:16e:df01::258" } ], "dns_at": "2026-10-29T19:36:34Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "*.netlify.app", "netlify.app" ], "issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1", "serial": "cd5d0afb0611b5bd9d692535c0ca7c4", "sha256": "bc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478", "subject": "*.netlify.app", "valid_to": "2027-03-19T23:59:59Z", "valid_from": "2026-02-16T00:00:00Z" }, "whois": { "registrar": "Name.com, Inc.", "registrar_iana_id": "625", "registrar_url": "http://www.name.com", "created": "2018-05-08T22:48:05Z", "updated": "2024-04-11T16:00:14Z", "expires": "2025-05-08T22:48:05Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "dns1.p01.nsone.net", "dns2.p01.nsone.net", "dns3.p01.nsone.net", "dns4.p01.nsone.net" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-29T18:30:49Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "count": 3, "domain": "netlify.app", "issuers": [ "amazon.com", "digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226" ] }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "title": "Your invitation" }, "trackers": { "requests": 2 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 4, "tls": 13, "wait": 302, "connect": 123, "download": 0 }, "response_ms": 442 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 864, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "198.51.45.1", "host": "dns2.p01.nsone.net" }, { "ip": "198.51.44.65", "host": "dns3.p01.nsone.net" }, { "ip": "198.51.45.65", "host": "dns4.p01.nsone.net" }, { "ip": "198.51.44.1", "host": "dns1.p01.nsone.net" } ], "zone": "netlify.app" }, "location": { "ip": "2a05:d014:58f:6200::259", "asn": "16509", "org": "Amazon.com, Inc.", "city": "Frankfurt", "country": "DE" }, "ssl": { "issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1", "subject": "*.netlify.app" }, "dns": { "A": [ "63.176.8.218", "35.157.26.135" ], "AAAA": [ "2a05:d014:58f:6200::259", "2a05:d014:58f:6200::258" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2a05:d014:58f:6200::258", "family": 6 }, "redirects": { "chain": [ "https://patriotfighters.netlify.app" ] }, "headers": { "headers": { "server": "Netlify", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload" } } } } ```