# PhishDestroy domain threat record: strkveil.online

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/strkveil.online/
Machine-readable companion: https://phishdestroy.io/domain/strkveil.online/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 08:30:14 UTC
- Last availability or vendor check: 2026-10-22 10:49:29 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: ledger

## Stored infrastructure

- Observed IP address: 172.66.3.26
- Registrar in stored WHOIS data: Porkbun LLC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date (registry RDAP, strkveil.online): 2026-10-19 17:08:44 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15d95-42ef-736c-b032-d78eb0ae5142/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/strkveil.online
- Certificate Transparency search: https://crt.sh/?q=%25.strkveil.online
- Web Archive lookup: https://web.archive.org/web/*/https://strkveil.online/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added strkveil.online to its internal blocklist on 2026-10-21 after an admin report. The recorded page title is “STRKShield · Your balance. Your business.” The prior AI assessment considered the page content too generic to determine malicious intent. PhishDestroy first observed the domain on 2026-10-21 and received an HTTP 200 response at that time.

How the scam works
The listing does not identify a specific fraud technique. Newly created domains that display vague financial‑oriented titles are sometimes used to lure users into entering credentials or interacting with fake services, but no concrete behavior was observed on this site.

Evidence
VirusTotal scanned the domain on 2026-10-19 with 92 engines and reported zero malicious and zero suspicious detections. Google Safe Browsing checked on 2026-10-21 and did not flag the site. urlscan captured the page on 2026-10-20, gave an overall clean verdict, while its machine‑learning engine flagged it as malicious with a high score; the overall verdict remained non‑malicious. A second urlscan capture on 2026-10-21 recorded the same page with a 307 redirect to HTTPS and a malicious ML tag but an overall clean rating. No external blocklists listed the domain as of 2026-10-21. PhishDestroy’s internal list marks the domain as listed. OTX recorded zero pulses on 2026-10-21.

Infrastructure
The domain was registered with Porkbun LLC on 2026-10-19. DNS resolution returned IP 172.66.3.26, which belongs to Cloudflare, Inc. and is recorded in Canada. Cloudflare provides CDN and firewall services for the address.

What to do
Visitors should avoid submitting credentials, private keys or personal data to the site and monitor any related accounts for unexpected activity. If credentials were entered, change them immediately. Defenders should add a rule to monitor or block traffic to strkveil.online and review logs for connections to the recorded IP address.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15d95-42ef-736c-b032-d78eb0ae5142/
VirusTotal report: https://www.virustotal.com/gui/domain/strkveil.online
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=strkveil.online
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-21 08:35:30 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/gL59nD5R/a067dc2c4dff.png
  Captured: 2026-10-21 08:31:18 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a15d95-42ef-736c-b032-d78eb0ae5142.png
  Captured: 2026-10-21 08:31:18 UTC
  Source report: https://urlscan.io/result/01a15d95-42ef-736c-b032-d78eb0ae5142/
- URLScan capture 2: https://urlscan.io/screenshots/01a15731-4249-7181-a4ad-d6c8bcef1709.png
  Captured: 2026-10-21 08:30:14 UTC
  Source report: https://urlscan.io/result/01a15d95-42ef-736c-b032-d78eb0ae5142/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a710a3f7-0400-4f66-9a5e-e2a2d325da91.png
  Captured: 2026-10-21 08:31:47 UTC
  Source report: https://radar.cloudflare.com/scan/a710a3f7-0400-4f66-9a5e-e2a2d325da91
  SHA-256: 1452a67e83510b3593598881010dea460d43f921d7630d9dc355742381703b1b
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15731-4249-7181-a4ad-d6c8bcef1709.png
  Captured: 2026-10-20 02:43:35 UTC
  Source report: https://urlscan.io/result/01a15731-4249-7181-a4ad-d6c8bcef1709/
  SHA-256: 693a29481eba369e216bce06a47043f4729e23607969b1128f372bf126a86b42

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T08:34:30Z",
        "uuid": "01a15d95-42ef-736c-b032-d78eb0ae5142",
        "scanned_at": "2026-10-21T08:30:35Z",
        "final_url": "https://strkveil.online/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://strkveil.online/",
                "from": "http://strkveil.online/",
                "status": 307
            }
        ],
        "ip": "172.66.3.26",
        "ips": [
            "172.66.3.26"
        ],
        "asns": [
            "13335"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "x.com",
            "strk20.starknet.io"
        ],
        "social": [
            "https://x.com/StrkVeil"
        ],
        "doc_hash": "55de374d5d95d7e3e6734e0f1e337f2ac655186744ebfea5c16587b33bebf400",
        "script_hashes": [
            "5aec9b536c277800d8611435a78ef1dc537745cbd4b5a1dc718e77eb5a3394a3",
            "99a7cbad40ee4cc37037fc164bebec95d709bbece55c60d8254be130b51102ab"
        ],
        "cookies": [
            "__Host-appgarden-visitor",
            "cf_clearance",
            "__cf_bm"
        ],
        "tls": {
            "san": [
                "strkveil.online"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "strkveil.online",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-17T17:19:09Z",
            "valid_from": "2026-10-19T16:19:11Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 1,
        "tls_valid_days": 90,
        "requests": 9,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T08:34:32Z",
        "uuid": "a710a3f7-0400-4f66-9a5e-e2a2d325da91",
        "scanned_at": "2026-10-21T08:31:47Z",
        "final_url": "https://strkveil.online/",
        "status": 200,
        "history": [
            {
                "url": "https://strkveil.online/",
                "status": 200
            }
        ],
        "dom_hash": "564691d9bf99842e2b3acbe690b64c8ca62d305e9bc437f29f8c4b9f52670ab0",
        "doc_hash": "8badcdbe080072f7702d9441c6aae3b7fbe84e6f06276905e54b7a8a297e0592",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "strkveil.online",
                "type": "A",
                "value": "172.66.3.26"
            },
            {
                "name": "strkveil.online",
                "type": "A",
                "value": "162.159.143.30"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.66.3.26",
        "whois": {
            "registrar": "Porkbun LLC",
            "created": "2026-10-19T17:08:44Z",
            "updated": "2026-10-19T17:09:15Z",
            "expires": "2027-10-19T17:08:44Z",
            "nameservers": [
                "curitiba.ns.porkbun.com",
                "fortaleza.ns.porkbun.com",
                "maceio.ns.porkbun.com",
                "salvador.ns.porkbun.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T08:31:01Z",
        "analysis_at": "2026-10-19T18:26:18Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "registrar": "Porkbun LLC",
        "created": "2026-10-19T17:08:44Z",
        "expires": "2027-10-19T17:08:44Z",
        "updated": "2026-10-19T17:09:15Z",
        "first_seen": "2026-10-19T18:00:13Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "curitiba.ns.porkbun.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "162.159.143.30"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "maceio.ns.porkbun.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "fortaleza.ns.porkbun.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "salvador.ns.porkbun.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "curitiba.ns.porkbun.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "172.66.3.26"
            }
        ],
        "dns_at": "2026-10-19T18:30:06Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "strkveil.online"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "6538c3c34d0911260e7b68ea5277e3b1",
            "sha256": "b6d88ef1b2792f3064a6620088f8feba3b85724eebfe1b1b3f69cec2fd5f5ddb",
            "subject": "strkveil.online",
            "valid_to": "2027-01-17T17:19:09Z",
            "valid_from": "2026-10-19T16:19:11Z"
        },
        "whois": {
            "registrar": "Porkbun LLC",
            "registrar_iana_id": "1861",
            "registrar_url": "https://porkbun.com",
            "created": "2026-10-19T17:08:44Z",
            "updated": "2026-10-19T17:09:15Z",
            "expires": "2027-10-19T17:08:44Z",
            "status": [
                "addPeriod",
                "clientDeleteProhibited",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "curitiba.ns.porkbun.com",
                "fortaleza.ns.porkbun.com",
                "maceio.ns.porkbun.com",
                "salvador.ns.porkbun.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "delete prohibited",
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-19T17:08:45Z",
                "last changed": "2026-10-19T17:08:44Z",
                "registration": "2026-10-19T17:08:45Z",
                "registrar expiration": "2027-10-19T17:08:45Z",
                "last update of RDAP database": "2026-10-19T17:08:44Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T08:34:48Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "strkveil.online"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-21T08:31:49Z",
            "first": "2026-10-21T08:31:49Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 1875
        },
        "social_tags": {
            "title": "STRKShield · Your balance. Your business.",
            "themeColor": "#e8e8e3",
            "description": "STRKShield — a Starknet privacy interface. Shield STRK, send privately, and explore shadow accounts with a supported wallet."
        },
        "trackers": {
            "requests": 9
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 8,
                "tls": 27,
                "wait": 236,
                "connect": 18,
                "download": 0
            },
            "response_ms": 289
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 1675,
            "co2_grams": 0.0001,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.58.37",
                    "host": "curitiba.ns.porkbun.com"
                },
                {
                    "ip": "162.159.8.140",
                    "host": "fortaleza.ns.porkbun.com"
                },
                {
                    "ip": "162.159.11.180",
                    "host": "maceio.ns.porkbun.com"
                },
                {
                    "ip": "162.159.10.150",
                    "host": "salvador.ns.porkbun.com"
                }
            ],
            "zone": "strkveil.online"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "__Host-appgarden-visitor",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "cf_clearance",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "__cf_bm",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                }
            ]
        },
        "location": {
            "ip": "162.159.143.30",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "strkveil.online"
        },
        "dns": {
            "A": [
                "162.159.143.30",
                "172.66.3.26"
            ],
            "NS": [
                "maceio.ns.porkbun.com",
                "curitiba.ns.porkbun.com",
                "salvador.ns.porkbun.com",
                "fortaleza.ns.porkbun.com"
            ],
            "SOA": "{\"nsname\": \"curitiba.ns.porkbun.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417915915, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "162.159.143.30",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://strkveil.online"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cloudflare Bot Management",
                "Priority Hints",
                "Cloudflare"
            ]
        },
        "whois": {
            "registrar": "Porkbun LLC",
            "created": "2026-10-19T17:08:44Z",
            "updated": "2026-10-19T17:09:15Z",
            "expires": "2027-10-19T17:08:44Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "addPeriod https://icann.org/epp"
            ],
            "nameservers": [
                "curitiba.ns.porkbun.com",
                "fortaleza.ns.porkbun.com",
                "maceio.ns.porkbun.com",
                "salvador.ns.porkbun.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```