# PhishDestroy domain threat record: swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev Content language: English Canonical HTML report: https://phishdestroy.io/domain/swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev/ Machine-readable companion: https://phishdestroy.io/domain/swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 21:42:59 UTC - Last availability or vendor check: 2026-10-22 23:07:04 UTC - Stored record updated: 2026-10-22 23:07:04 UTC - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Cloudflare, Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, pages.dev): 2020-09-02 02:33:29 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1658f-dc42-760e-871e-7d91418d7036/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev - Certificate Transparency search: https://crt.sh/?q=%25.swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev - Web Archive lookup: https://web.archive.org/web/*/https://swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/1Jvp7ShW/58a46a14979c.png Captured: 2026-10-22 21:42:59 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1658f-dc42-760e-871e-7d91418d7036.png Captured: 2026-10-22 21:42:59 UTC Source report: https://urlscan.io/result/01a1658f-dc42-760e-871e-7d91418d7036/ - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a15220-bfc9-76fe-b1f5-f0cdf8761ff6.png Captured: 2026-10-19 03:07:27 UTC Source report: https://urlscan.io/result/01a15220-bfc9-76fe-b1f5-f0cdf8761ff6/ SHA-256: 4f40c84dac6b1d335afd547db34803a69898f9e8f4b61e9633ed265dcfd52d1f - URLScan · 2026-08-18: https://screenshots.phishdestroy.io/us/01a0167e-0953-73ba-892b-bd3886a6d36f.png Captured: 2026-08-18 20:09:22 UTC Source report: https://urlscan.io/result/01a0167e-0953-73ba-892b-bd3886a6d36f/ SHA-256: 986b87c839e1017ef22b71b3831b1ee48014767a661907defeec5a0fb10a61e1 - URLScan · 2026-10-18: https://screenshots.phishdestroy.io/us/01a14fc5-65ab-70b9-8a8f-2592188758f1.png Captured: 2026-10-18 16:08:26 UTC Source report: https://urlscan.io/result/01a14fc5-65ab-70b9-8a8f-2592188758f1/ SHA-256: 071169d14fc3c053b00e8eddb5d5ab8ca3b5f7d9fe47a7b9fc5d996dc091e3cf - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a15510-068f-7214-b416-f1dbce5b519e.png Captured: 2026-10-19 16:48:19 UTC Source report: https://urlscan.io/result/01a15510-068f-7214-b416-f1dbce5b519e/ SHA-256: 4a2967b9491beb9b6f23bd2ea7dc9e8f06d4484d224cf22fa3486215f0ba041e - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a1556e-3dd1-75dc-96fb-48c666e7f95e.png Captured: 2026-10-19 18:30:59 UTC Source report: https://urlscan.io/result/01a1556e-3dd1-75dc-96fb-48c666e7f95e/ SHA-256: 0566d5a2b37b148c29ab4deaed4bde6b390a75d1d1f4b984fe8064263ca039d0 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c42-a2c1-757a-8e3b-d27d0ec4ddbf.png Captured: 2026-10-21 02:20:43 UTC Source report: https://urlscan.io/result/01a15c42-a2c1-757a-8e3b-d27d0ec4ddbf/ SHA-256: 645a719b564badedb20c67c469dfa1987dbad667118c5b0be95363b5e9bf4212 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "vt": { "v": 1, "fetched_at": "2026-10-22T22:03:21Z", "analysis_at": "2026-10-21T06:57:41Z", "stats": { "timeout": 0, "harmless": 50, "malicious": 10, "suspicious": 0, "undetected": 32 }, "detections": { "G-Data": "phishing", "Sophos": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "phishing", "Gridinsoft": "phishing", "MalwareURL": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "tags": [ "dga" ], "registrar": "CloudFlare, Inc.", "created": "2020-09-02T02:33:29Z", "expires": "2026-09-02T02:33:29Z", "updated": "2025-03-17T14:56:22Z", "first_seen": "2026-08-17T15:15:38Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.66.44.73" }, { "ttl": 21600, "type": "NS", "value": "collins.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "woz.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:310c::ac42:2c49" }, { "ttl": 300, "type": "A", "value": "172.66.47.183" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "collins.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:310c::ac42:2fb7" } ], "dns_at": "2026-10-21T06:58:05Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev", "*.swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev" ], "issuer": "Google Trust Services / WE1", "serial": "49f0507a0b66db6b0e2eea24b8a02d42", "sha256": "9658a84318801e345ffde5c9a3da4b7ea916c9c0eee56ad00fbd63e90eb754ea", "subject": "swnvd0fdran-jkstrlpw-7j4h6d-jk811a.pages.dev", "valid_to": "2027-01-13T18:49:25Z", "valid_from": "2026-10-15T17:51:34Z" }, "whois": { "registrar": "CloudFlare, Inc.", "registrar_iana_id": "1910", "registrar_url": "None", "created": "2020-09-02T02:33:29Z", "updated": "2023-09-04T18:15:07Z", "expires": "2026-09-02T02:33:29Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited", "clientUpdateProhibited", "clientdeleteprohibited", "clienttransferprohibited", "clientupdateprohibited" ], "nameservers": [ "adi.ns.cloudflare.com", "karl.ns.cloudflare.com" ], "dnssec": "unsigned" } } } ```