# PhishDestroy domain threat record: tapakhoki.biz Content language: English Canonical HTML report: https://phishdestroy.io/domain/tapakhoki.biz/ Machine-readable companion: https://phishdestroy.io/domain/tapakhoki.biz/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 07:33:38 UTC - Last availability or vendor check: 2026-10-24 11:13:44 UTC - Stored record updated: 2026-10-24 14:23:55 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.220.66 - Registrar in stored WHOIS data: NameCheap, Inc. - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date (registry RDAP, tapakhoki.biz): 2026-10-17 05:42:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16cd3-495f-757b-bba3-a058b01289da/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/tapakhoki.biz - Certificate Transparency search: https://crt.sh/?q=%25.tapakhoki.biz - Web Archive lookup: https://web.archive.org/web/*/https://tapakhoki.biz/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI recorded an “unknown” verdict because the page content was insufficient for analysis. The domain was first seen by PhishDestroy on 2026-10-24 returning HTTP 200 and showing the title “TAPAKHOKI – Jejak Keberuntungan dalam Setiap Langkah”. The listing was triggered by the domain’s age of seven days. How the scam works The listing does not confirm any specific fraud technique; it reflects the elevated risk that newly registered domains are often used for phishing, credential harvesting, or fraudulent services. Such sites may present attractive branding or promises to lure visitors and then attempt to collect personal or financial information. Evidence VirusTotal scanned the domain on 2026-10-24 with 92 engines and reported 0 malicious and 0 suspicious detections. Google Safe Browsing checked the URL on 2026-10-24 and did not flag it. urlscan.io captured a scan on 2026-10-24; its engine analysis gave a malicious score of 97 but the overall verdict was non‑malicious. OTX listed four pulses mentioning the domain as of 2026-10-24. PhishDestroy’s internal blocklist marked the domain as true on 2026-10-24, while external blocklists showed zero matches on that date. Infrastructure The domain was registered with NameCheap on 2026-10-17. DNS records observed on 2026-10-24 listed A addresses 172.67.220.66 and 104.21.62.50 and AAAA addresses 2606:4700:3032::6815:3e32 and 2606:4700:3037::ac43:dc42. The TLS certificate, issued by Let’s Encrypt / YE2, covered *.tapakhoki.biz and tapakhoki.biz and was valid until 2027-01-15. Cloudflare was recorded as the CDN and WAF provider, and DNSSEC was not enabled. What to do Visitors should treat the site as suspicious and avoid entering credentials, payment details, or personal information. If any data was submitted, change related passwords and monitor accounts for unusual activity. Defenders can block the exact domain in perimeter defenses and review logs for connections to tapakhoki.biz after 2026-10-24. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16cd3-495f-757b-bba3-a058b01289da/ Cloudflare Radar report: https://radar.cloudflare.com/scan/4272fabc-8842-4938-8e04-3e75603d61c9 Stored capture screenshot: https://i.ibb.co/Sw7KfNfK/6fab23493b5b.png Cloudflare Radar screenshot (2026-10-24T08:06:26Z): https://screenshots.phishdestroy.io/cf/4272fabc-8842-4938-8e04-3e75603d61c9.png URLScan screenshot (2026-10-24T07:34:08Z): https://screenshots.phishdestroy.io/us/01a16cd4-af78-739c-ab76-8c6264d5cd3e.png URLScan capture report: https://urlscan.io/result/01a16cd4-af78-739c-ab76-8c6264d5cd3e/ VirusTotal report: https://www.virustotal.com/gui/domain/tapakhoki.biz Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=tapakhoki.biz Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 08:12:26 UTC ## Stored page captures - Primary capture: https://i.ibb.co/Sw7KfNfK/6fab23493b5b.png Captured: 2026-10-24 07:33:38 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16cd3-495f-757b-bba3-a058b01289da.png Captured: 2026-10-24 07:33:38 UTC Source report: https://urlscan.io/result/01a16cd3-495f-757b-bba3-a058b01289da/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4272fabc-8842-4938-8e04-3e75603d61c9.png Captured: 2026-10-24 08:06:26 UTC Source report: https://radar.cloudflare.com/scan/4272fabc-8842-4938-8e04-3e75603d61c9 SHA-256: f56d4fed927ac1da610c038e381417704d7a06dacdda2e206971e181b427f544 - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16cd4-af78-739c-ab76-8c6264d5cd3e.png Captured: 2026-10-24 07:34:08 UTC Source report: https://urlscan.io/result/01a16cd4-af78-739c-ab76-8c6264d5cd3e/ SHA-256: d3a22ba0d47cf62d6844d9aec6255394dfa95590bf69b5320ddb2cdf5b6568e1 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T08:11:39Z", "uuid": "01a16cd3-495f-757b-bba3-a058b01289da", "scanned_at": "2026-10-24T07:32:37Z", "final_url": "https://tapakhoki.biz/", "status": 200, "ip": "172.67.220.66", "domains": [ "cdn.ampproject.org", "fonts.gstatic.com", "fonts.googleapis.com", "tapakhoki.bizwp-content" ], "ips": [ "142.251.14.94", "142.251.110.95", "142.251.20.132", "172.67.220.66" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "link_domains": [ "unguku.me", "otwbulan.com" ], "doc_hash": "9346dcc02f02b8cb9cb83d59baf71f7612e0ac82b9d701921012032ad5043627", "globals": [ "AMP", "AMP_CONFIG", "AMP_EXP", "__AMP_LOG", "__AMP_ERRORS", "__AMP_REPORT_ERROR", "__AMP_TOP", "__AMP_SERVICES", "__AMP__EXPERIMENT_TOGGLES", "__AMP_MODE", "__AMP_TAG", "__AMP_EXTENDED_ELEMENTS", "__AMP_BASE_CE_CLASS" ], "tls": { "san": [ "*.tapakhoki.biz", "tapakhoki.biz" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "tapakhoki.biz", "protocol": "TLS 1.3", "valid_to": "2027-01-15T05:55:47Z", "valid_from": "2026-10-17T05:55:48Z" }, "domain_age_days": 5, "apex_age_days": 5, "tls_age_days": 7, "tls_valid_days": 89, "requests": 43, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T08:11:41Z", "uuid": "4272fabc-8842-4938-8e04-3e75603d61c9", "scanned_at": "2026-10-24T08:06:26Z", "final_url": "https://tapakhoki.biz/", "status": 200, "history": [ { "url": "https://tapakhoki.biz/", "status": 200 } ], "dom_hash": "b3ac099788e1632c68a2f2c3c9ba231c6e18a8239efe8db75d3c3f7277ccd374", "doc_hash": "9346dcc02f02b8cb9cb83d59baf71f7612e0ac82b9d701921012032ad5043627", "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "tapakhoki.biz", "type": "A", "value": "104.21.62.50" }, { "name": "tapakhoki.biz", "type": "A", "value": "172.67.220.66" }, { "name": "tapakhoki.biz", "type": "AAAA", "value": "2606:4700:3032::6815:3e32" }, { "name": "tapakhoki.biz", "type": "AAAA", "value": "2606:4700:3037::ac43:dc42" } ], "dnssec_valid": false, "ip": "104.21.62.50", "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-17T05:42:34Z", "updated": "2026-10-22T05:42:37Z", "expires": "2027-10-17T05:42:34Z", "nameservers": [ "venus.ns.cloudflare.com", "jason.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-24T08:05:10Z", "analysis_at": "2026-10-24T07:47:24Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 0, "suspicious": 0, "undetected": 39 }, "reputation": 0, "registrar": "NameCheap, Inc.", "created": "2026-10-17T05:42:34Z", "expires": "2027-10-17T05:42:34Z", "updated": "2026-10-17T06:39:31Z", "first_seen": "2026-10-17T07:05:21Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:dc42" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::6815:3e32" }, { "ttl": 300, "type": "A", "value": "172.67.220.66" }, { "ttl": 21600, "type": "NS", "value": "jason.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "venus.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "jason.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.62.50" } ], "dns_at": "2026-10-24T07:53:28Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.tapakhoki.biz", "tapakhoki.biz" ], "issuer": "Let's Encrypt / YE2", "serial": "66c4a75226976ded50150956cc0235372ea", "sha256": "59b3947c7a60ab21650fb4d59d5e4ade334755e49b9155c690132264313b9d52", "subject": "tapakhoki.biz", "valid_to": "2027-01-15T05:55:47Z", "valid_from": "2026-10-17T05:55:48Z" }, "whois": { "registrar": "NameCheap, Inc.", "registrar_iana_id": "1068", "registrar_url": "http://www.namecheap.com", "created": "2026-10-17T05:42:34Z", "updated": "2026-10-17T06:39:31Z", "expires": "2027-10-17T05:42:34Z", "status": [ "addPeriod", "clientTransferProhibited", "serverTransferProhibited" ], "nameservers": [ "jason.ns.cloudflare.com", "venus.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "server transfer prohibited" ], "events": { "registration": "2026-10-17T05:42:34Z", "registrar expiration": "2027-10-17T05:42:34Z", "last update of RDAP database": "2026-10-24T07:53:27Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T08:01:23Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "tapakhoki.biz" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-24T07:34:13Z", "first": "2026-10-24T07:34:13Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 17675 }, "robots_txt": { "agents": [ "Googlebot", "Slurp", "bingbot", "*" ], "present": true }, "sitemap": { "present": true, "url_count": 1 }, "social_tags": { "ogUrl": "https://tapakhoki.biz/", "title": "TAPAKHOKI - Jejak Keberuntungan dalam Setiap Langkah", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "images/favicon.png", "ogTitle": "TAPAKHOKI - Jejak Keberuntungan dalam Setiap Langkah", "generator": "WordPress 6.6.2", "ogSiteName": "TAPAKHOKI", "description": "TAPAKHOKI menggambarkan jejak keberuntungan dalam setiap langkah. Kenali TAPAKHOKI melalui tapak, perjalanan, dan hoki yang hadir menyertai.", "twitterCard": "summary_large_image", "canonicalUrl": "https://tapakhoki.biz", "ogDescription": "TAPAKHOKI menggambarkan jejak keberuntungan dalam setiap langkah. Kenali TAPAKHOKI melalui tapak, perjalanan, dan hoki yang hadir menyertai." }, "trackers": { "requests": 11, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "AMP Project", "company": "OpenJS Foundation", "category": "Utilities", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.ampproject.org/v0.mjs", "https://cdn.ampproject.org/v0.js", "https://cdn.ampproject.org/v0/amp-anim-0.1.mjs", "https://cdn.ampproject.org/v0/amp-anim-0.1.js", "https://cdn.ampproject.org/v0/amp-bind-0.1.mjs", "https://cdn.ampproject.org/v0/amp-bind-0.1.js" ], "third_party_scripts": 6 }, "status": { "up": true, "code": 200, "timings": { "dns": 12, "tls": 15, "wait": 203, "connect": 6, "download": 177 }, "response_ms": 413 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 108873, "co2_grams": 0.004, "cleaner_than": 20 }, "dns_server": { "ns": [ { "ip": "173.245.58.235", "host": "venus.ns.cloudflare.com" }, { "ip": "108.162.193.179", "host": "jason.ns.cloudflare.com" } ], "zone": "tapakhoki.biz" }, "location": { "ip": "2606:4700:3032::6815:3e32", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "tapakhoki.biz" }, "dns": { "A": [ "172.67.220.66", "104.21.62.50" ], "NS": [ "jason.ns.cloudflare.com", "venus.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"jason.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417759737, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3032::6815:3e32", "2606:4700:3037::ac43:dc42" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3032::6815:3e32", "family": 6 }, "redirects": { "chain": [ "https://tapakhoki.biz" ] }, "linked_pages": { "external": [ "https://unguku.me/kwtbrivz", "https://otwbulan.com/whatsapp", "https://otwbulan.com/telegram" ], "external_count": 3, "internal_count": 1 }, "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-17T05:42:34Z", "updated": "2026-10-22T05:42:37Z", "expires": "2027-10-17T05:42:34Z", "status": [ "clientTransferProhibited https://icann.org/epp", "serverTransferProhibited https://icann.org/epp" ], "nameservers": [ "jason.ns.cloudflare.com", "venus.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html" } } } } ```