# PhishDestroy domain threat record: profeco.online

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/profeco.online/
Machine-readable companion: https://phishdestroy.io/domain/profeco.online/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 07:13:21 UTC
- Last availability or vendor check: 2026-10-25 12:22:52 UTC
- Stored record updated: 2026-10-25 12:33:43 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: GoDaddy.com, LLC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 301
- Registration date in stored WHOIS data: 2022-01-06 04:32:15 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a171e6-b351-720e-9716-d3348a0ec93f/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/profeco.online
- Certificate Transparency search: https://crt.sh/?q=%25.profeco.online
- Web Archive lookup: https://web.archive.org/web/*/https://profeco.online/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed profeco.online on 2026-10-25 as a suspicious domain. The site’s recorded title reads “Denuncia o queja ante PROFECO - Profeco Online - Reseñas y Comparativas online”, suggesting it pretends to handle consumer complaints for Mexico’s PROFECO agency. The domain responded with an HTTP 301 redirect to the www subdomain and the target page returned HTTP 200 when fetched on the same date.

How the scam works
No concrete malicious behavior was observed, but domains that mimic official agencies can be used to harvest personal data or lure users into fraudulent complaint processes. Typical attacks involve presenting a fake complaint form, collecting identifying information, or redirecting visitors to malicious ads. Because the page includes third‑party advertising scripts and lacks security headers, it could be leveraged for credential harvesting or drive‑by threats, though none were directly detected.

Evidence
VirusTotal scanned the domain on 2026-10-01 (analysis) and retrieved results on 2026-10-25 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked on 2026-10-25 and did not flag the URL. OTX listed one pulse referencing the domain as of 2026-10-25, which is a single‑source mention and not a detection. PhishDestroy’s internal blocklist marked the domain as suspicious on 2026-10-25. A urlscan capture on 2026-10-25 gave the machine‑learning engine a malicious score of 77, but the overall verdict was non‑malicious.

Infrastructure
The domain was registered on 2022-01-06 through GoDaddy.com, LLC and was set to expire on 2027-01-06. DNS was served by Cloudflare nameservers ace.ns.cloudflare.com and olivia.ns.cloudflare.com, and the domain was observed to resolve to IP 188.114.97.3, which belonged to CloudFLARENET‑EU and was recorded in the United Kingdom. TLS used a certificate issued by Google Trust Services, valid from 2026-09-29 to 2026-12-28, covering profeco.online and *.profeco.online.

What to do
Visitors should avoid submitting personal or financial information on the site and treat any request for credentials as suspicious. If credentials were entered, change them immediately on the affected service. Security teams can block traffic to profeco.online at the firewall or proxy level and monitor logs for any connections to the recorded IP or Cloudflare hostnames. Keep the domain on blocklists and continue to monitor for any future malicious activity.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a171e6-b351-720e-9716-d3348a0ec93f/
Cloudflare Radar report: https://radar.cloudflare.com/scan/e9d277e8-9ccb-457a-8dd3-4a58c793294f
Stored capture screenshot: https://i.ibb.co/TBgZYzWc/4f19c39ef9cb.png
Cloudflare Radar screenshot (2026-10-25T07:15:13Z): https://screenshots.phishdestroy.io/cf/e9d277e8-9ccb-457a-8dd3-4a58c793294f.png
VirusTotal report: https://www.virustotal.com/gui/domain/profeco.online
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=profeco.online
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 07:18:33 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/TBgZYzWc/4f19c39ef9cb.png
  Captured: 2026-10-25 07:13:21 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a171e6-b351-720e-9716-d3348a0ec93f.png
  Captured: 2026-10-25 07:13:21 UTC
  Source report: https://urlscan.io/result/01a171e6-b351-720e-9716-d3348a0ec93f/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e9d277e8-9ccb-457a-8dd3-4a58c793294f.png
  Captured: 2026-10-25 07:15:13 UTC
  Source report: https://radar.cloudflare.com/scan/e9d277e8-9ccb-457a-8dd3-4a58c793294f
  SHA-256: 7314ef7bee586b35cb41e16487d4e228aa571e5cdcc959fb5f50ae9734f4527a
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a171ec-278f-7609-81fa-49a358326d4e.png
  Captured: 2026-10-25 07:18:03 UTC
  Source report: https://urlscan.io/result/01a171ec-278f-7609-81fa-49a358326d4e/
  SHA-256: 54c0e619a95074f6425079761d0cf39f01804bec4ede75597c57a2c34ee3a441

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T07:17:52Z",
        "uuid": "01a171e6-b351-720e-9716-d3348a0ec93f",
        "scanned_at": "2026-10-25T07:11:56Z",
        "final_url": "https://www.profeco.online/",
        "status": 200,
        "ip": "188.114.97.3",
        "domains": [
            "pagead2.googlesyndication.com",
            "ep2.adtrafficquality.google",
            "ep1.adtrafficquality.google",
            "region1.google-analytics.com",
            "fonts.gstatic.com",
            "www.googletagmanager.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "2a00:1450:4001:c13::84",
            "142.251.13.155",
            "2001:4860:4802:32::36",
            "192.178.183.94",
            "142.251.13.157",
            "2a00:1450:4001:c15::61",
            "2a00:1450:4001:c13::5f",
            "188.114.97.3"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "DE",
            "US"
        ],
        "link_domains": [
            "profeco.online",
            "www.gob.mx"
        ],
        "doc_hash": "36f47971b0309848452a163711ee4633a3a698a2eeca8dfc54db9dfe33529f5d",
        "script_hashes": [
            "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
            "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
            "338b6caf4953e4c8d8678a23baad98f1529731ae8e303307f2e9688b34411e9b",
            "fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1",
            "5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9",
            "94010bdf799ebf7ebd25c44cda0c2aca9d5707cbf8d054d1ee8b1db2224dce74",
            "2449bcdb76bb77ecd953f38a63ed4bc38906758048eb24581013b24f023bdc97",
            "a90ee1790dc52a0667d116c2d14770ce7694ae8094722f7c2a25b3f248948ed6",
            "10061ef470dd5f6a1a29e0102b0c876931054044d010b64a268818eaae59d365",
            "0e06a5ea7b6cfed15e8039ca1b52dd6ee28edd27012569fb4ccdade8a918be19"
        ],
        "globals": [
            "jQuery",
            "CookiesEuBanner",
            "gtag",
            "dataLayer",
            "wp",
            "swv",
            "wpcf7",
            "clickCounterAjax",
            "tocplus",
            "ct_localizations",
            "blocksyJsonP",
            "ctEvents",
            "ctFrontend",
            "google_js_reporting_queue",
            "google_srt",
            "BGtEY",
            "google_logging_queue",
            "ggeac",
            "google_persistent_state_async",
            "google_measure_js_timing",
            "google_tag_data",
            "google_reactive_ads_global_state",
            "google_ad_modifications",
            "adsbygoogle",
            "google_sa_queue",
            "google_process_slots",
            "google_ama_state",
            "google_unique_id",
            "fqjyf",
            "google_rum_task_id_counter",
            "google_user_agent_client_hint",
            "google_tag_manager",
            "elementorModules",
            "googletag",
            "onYouTubeIframeAPIReady",
            "gaGlobal",
            "elementorFrontendConfig",
            "__elementorChunks",
            "__elementorLoadChunk",
            "elementorFrontend"
        ],
        "cookies": [
            "_ga_KP6RDGT93X",
            "_ga"
        ],
        "storage_keys": [
            "google_auto_fc_cmp_setting"
        ],
        "tls": {
            "san": [
                "profeco.online",
                "*.profeco.online"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "profeco.online",
            "protocol": "QUIC",
            "valid_to": "2026-12-28T07:46:00Z",
            "valid_from": "2026-09-29T06:47:21Z"
        },
        "domain_age_days": 1753,
        "apex_age_days": 1753,
        "tls_age_days": 26,
        "tls_valid_days": 90,
        "requests": 323,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 77,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T07:17:55Z",
        "uuid": "e9d277e8-9ccb-457a-8dd3-4a58c793294f",
        "scanned_at": "2026-10-25T07:15:13Z",
        "final_url": "https://www.profeco.online/",
        "status": 200,
        "redirected": "subdomain",
        "history": [
            {
                "url": "https://profeco.online/",
                "status": 301
            },
            {
                "url": "https://www.profeco.online/",
                "status": 200
            }
        ],
        "dom_hash": "60467a07b389621babb3b201933764d7a81c05b75889d1554b0cbc797e6f0803",
        "doc_hash": "36bf3c58f9a34bcaa3e8188e7a403f4d32c07e575dc57acf71e56ca995c24fd1",
        "domain_risks": [
            "Government/Legal",
            "Government & Politics",
            "Politics, Advocacy, and Government-Related"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "profeco.online",
                "type": "A",
                "value": "188.114.97.3"
            },
            {
                "name": "profeco.online",
                "type": "A",
                "value": "188.114.96.3"
            },
            {
                "name": "profeco.online",
                "type": "AAAA",
                "value": "2a06:98c1:3120::3"
            },
            {
                "name": "profeco.online",
                "type": "AAAA",
                "value": "2a06:98c1:3121::3"
            },
            {
                "name": "www.profeco.online",
                "type": "A",
                "value": "188.114.97.3"
            },
            {
                "name": "www.profeco.online",
                "type": "A",
                "value": "188.114.96.3"
            },
            {
                "name": "www.profeco.online",
                "type": "AAAA",
                "value": "2a06:98c1:3120::3"
            },
            {
                "name": "www.profeco.online",
                "type": "AAAA",
                "value": "2a06:98c1:3121::3"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.97.3",
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2022-01-06T05:32:15Z",
            "updated": "2026-06-03T00:18:16Z",
            "expires": "2027-01-06T23:59:59Z",
            "nameservers": [
                "ace.ns.cloudflare.com",
                "olivia.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T07:14:45Z",
        "analysis_at": "2026-10-01T16:07:17Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 36
        },
        "reputation": 0,
        "created": "2022-01-06T00:00:00Z",
        "updated": "2026-04-15T00:00:00Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ace.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "olivia.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 +a +mx +ip4:51.91.107.203 include:_spf.gestiondeservidor.net ~all"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "ace.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::6815:37e"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.3.126"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "_dc-mx.f16da85bfdca.profeco.online",
                "priority": 0
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.130.180"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:82b4"
            }
        ],
        "dns_at": "2026-10-01T16:11:14Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "profeco.online",
                "*.profeco.online"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "95c5d029078a29fc133aa592442ab8dd",
            "sha256": "adecfaf9768e94c5f7807b80b92cc80aef5525ffdf18f2d0c844724b353ab2b8",
            "subject": "profeco.online",
            "valid_to": "2026-12-28T07:46:00Z",
            "valid_from": "2026-09-29T06:47:21Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "client update prohibited",
                "client renew prohibited",
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-01-06T23:59:59Z",
                "last changed": "2026-06-03T00:18:16Z",
                "registration": "2022-01-06T05:32:15Z",
                "last update of RDAP database": "2026-10-01T16:11:13Z"
            },
            "registrar": "GoDaddy.com, LLC",
            "registrar_iana_id": "146"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T07:16:24Z",
        "mail_config": {
            "mx": [
                "_dc-mx.f16da85bfdca.profeco.online"
            ],
            "spf": "v=spf1 +a +mx +ip4:51.91.107.203 include:_spf.gestiondeservidor.net ~all",
            "dkim": [
                "default"
            ],
            "dkim_bits": 2048,
            "spf_lookups": 4
        },
        "caa_records": {
            "domain": "profeco.online"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-25T07:14:46Z",
            "first": "2023-08-31T11:30:11Z",
            "changes": 37,
            "days_archived": 38,
            "scans_per_day": 0.03,
            "avg_page_bytes": 35743
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://www.profeco.online/sitemap_index.xml"
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://www.googletagmanager.com/gtag/js",
                "https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"
            ],
            "third_party_scripts": 2
        },
        "status": {
            "up": true,
            "code": 301,
            "timings": {
                "dns": 3,
                "tls": 53,
                "wait": 18689,
                "connect": 20,
                "download": 0
            },
            "response_ms": 18765
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.65",
                    "host": "ace.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.221",
                    "host": "olivia.ns.cloudflare.com"
                }
            ],
            "zone": "profeco.online"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "profeco.online"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "MX": [
                "{\"exchange\": \"_dc-mx.f16da85bfdca.profeco.online\", \"priority\": 0}"
            ],
            "NS": [
                "olivia.ns.cloudflare.com",
                "ace.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"ace.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416333924, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "v=spf1 +a +mx +ip4:51.91.107.203 include:_spf.gestiondeservidor.net ~all"
            ],
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "linked_pages": {
            "external": [
                "https://www.profeco.online/",
                "https://www.profeco.online/aguascalientes/",
                "https://www.profeco.online/baja-california/",
                "https://www.profeco.online/cdmx/",
                "https://www.profeco.online/chihuahua/",
                "https://www.profeco.online/coahuila/",
                "https://www.profeco.online/guanajuato/",
                "https://www.profeco.online/hidalgo/",
                "https://www.profeco.online/jalisco/",
                "https://www.profeco.online/michoacan/",
                "https://www.profeco.online/nuevo-leon/",
                "https://www.profeco.online/oaxaca/",
                "https://www.profeco.online/puebla/",
                "https://www.profeco.online/queretaro/",
                "https://www.profeco.online/sonora/",
                "https://www.profeco.online/veracruz/",
                "https://www.profeco.online/yucatan/",
                "https://www.profeco.online/quejas/",
                "https://www.profeco.online/repep/",
                "https://www.profeco.online/revista/mejores-apps-para-floristas",
                "https://www.profeco.online/revista/como-tramitar-curp-biometrica",
                "https://www.profeco.online/revista/importancia-rastreo-paquetes-compras-linea/",
                "https://www.profeco.online/denuncia/",
                "https://www.profeco.online/concilianet/",
                "https://www.profeco.online/revista/"
            ],
            "external_count": 35,
            "internal_count": 35
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2022-01-06T05:32:15Z",
            "updated": "2026-06-03T00:18:16Z",
            "expires": "2027-01-06T23:59:59Z",
            "status": [
                "clientUpdateProhibited https://icann.org/epp",
                "clientRenewProhibited https://icann.org/epp",
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ace.ns.cloudflare.com",
                "olivia.ns.cloudflare.com"
            ]
        }
    }
}
```