# PhishDestroy domain threat record: taskerx.800876.xyz Content language: English Canonical HTML report: https://phishdestroy.io/domain/taskerx.800876.xyz/ Machine-readable companion: https://phishdestroy.io/domain/taskerx.800876.xyz/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 15:26:51 UTC - Last availability or vendor check: 2026-10-21 15:30:58 UTC - Stored record updated: 2026-10-21 16:30:31 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 1 - Matching public blocklists: OpenPhish - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: dropbox ## Stored infrastructure - Observed IP address: 188.114.97.3 - Registrar in stored WHOIS data: Name.com, Inc. - Registrar country in stored WHOIS data: CN - Registration date in stored WHOIS data: 2022-10-05 01:34:45 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15f14-9f87-710b-8b5d-f1a72c3f7a5e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/taskerx.800876.xyz - Certificate Transparency search: https://crt.sh/?q=%25.taskerx.800876.xyz - Web Archive lookup: https://web.archive.org/web/*/https://taskerx.800876.xyz/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed taskerx.800876.xyz as a suspicious domain based on automated analysis. The recorded page fetch returned HTTP 200 for the /features path on 2026-10-21, while a Cloudflare Radar scan showed HTTP 403 for the root URL on the same day. The domain was first seen by PhishDestroy on 2026-10-21. No page title was captured. How the scam works The current classification reflects a general risk associated with domains that trigger multiple security engine detections; it does not confirm any specific phishing, credential‑harvesting, or crypto‑related activity on this site. Without observed malicious forms or brand impersonation, the listing warns that the domain could be repurposed for typical phishing or fraud tactics. Evidence VirusTotal on 2026-10-21 reported three detections across 92 engines: two malicious (Certego, CRDF) and one suspicious (SOCRadar). Google Safe Browsing checked on 2026-10-21 did not flag the domain. OpenPhish listed the domain on its blocklist as of the same date. OTX recorded zero pulses on 2026-10-21. URLScan performed two captures on 2026-10-21; one scan returned a clean verdict, while another flagged the URL as malicious by its engine scoring system (score 28) but gave an overall non‑malicious verdict. The intake reason cited the two malicious VirusTotal vendors. Infrastructure The subdomain was created one day before detection, while the apex domain is 2,208 days old. TLS was issued by Google Trust Services on 2026-10-20 for 90 days, covering taskerx.800876.xyz and its wildcard. Hosting is provided through Cloudflare (network CloudFLARENET‑EU, recorded country GB) with a recorded IP of 188.114.97.3 and additional edge IPs such as 172.67.174.10 observed in scans. Nameservers are jason.ns.cloudflare.com and suzanne.ns.cloudflare.com, and DNSSEC is not enabled. What to do Do not submit credentials or personal data to this site. Organizations should block taskerx.800876.xyz at the firewall and monitor logs for connections to the recorded IPs or hostnames. Users who may have entered credentials should change passwords on the affected services. Continue to follow updates from PhishDestroy and other blocklists for any changes in status. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15f14-9f87-710b-8b5d-f1a72c3f7a5e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/7d9187b2-eeda-4108-a12f-720c0396c8fe Stored capture screenshot: https://i.ibb.co/S4Pjjtx1/57f121b17145.png Cloudflare Radar screenshot (2026-10-21T15:31:29Z): https://screenshots.phishdestroy.io/cf/7d9187b2-eeda-4108-a12f-720c0396c8fe.png URLScan screenshot (2026-10-21T08:46:42Z): https://screenshots.phishdestroy.io/us/01a15da3-a309-700c-9fb6-a7b84af5e45a.png URLScan capture report: https://urlscan.io/result/01a15da3-a309-700c-9fb6-a7b84af5e45a/ URLScan screenshot (2026-10-21T13:05:34Z): https://screenshots.phishdestroy.io/us/01a15e91-0457-73a5-9083-48178aae6ce7.png URLScan capture report: https://urlscan.io/result/01a15e91-0457-73a5-9083-48178aae6ce7/ URLScan screenshot (2026-10-21T15:34:16Z): https://screenshots.phishdestroy.io/us/01a15f18-c74c-7538-b403-bdcd4d88ac14.png URLScan capture report: https://urlscan.io/result/01a15f18-c74c-7538-b403-bdcd4d88ac14/ VirusTotal report: https://www.virustotal.com/gui/domain/taskerx.800876.xyz Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=taskerx.800876.xyz Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 15:38:39 UTC ## Stored page captures - Primary capture: https://i.ibb.co/S4Pjjtx1/57f121b17145.png Captured: 2026-10-21 15:30:58 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a15f14-9f87-710b-8b5d-f1a72c3f7a5e.png Captured: 2026-10-21 15:30:58 UTC Source report: https://urlscan.io/result/01a15f14-9f87-710b-8b5d-f1a72c3f7a5e/ - URLScan capture 2: https://urlscan.io/screenshots/01a15e91-0457-73a5-9083-48178aae6ce7.png Captured: 2026-10-21 15:26:51 UTC Source report: https://urlscan.io/result/01a15f14-9f87-710b-8b5d-f1a72c3f7a5e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7d9187b2-eeda-4108-a12f-720c0396c8fe.png Captured: 2026-10-21 15:31:29 UTC Source report: https://radar.cloudflare.com/scan/7d9187b2-eeda-4108-a12f-720c0396c8fe SHA-256: f58acbb11801ae3cb0bd38ce5d4618bf1d565ee2afce19d10b55e003a335ff4d - URLQuery: https://screenshots.phishdestroy.io/uq/3d3f2930-d75f-49df-9351-6cdae630cb69.png Source report: https://urlquery.net/report/3d3f2930-d75f-49df-9351-6cdae630cb69 SHA-256: f150a713dd5b4a531c3a0197762c10a37e3673219b844a84634868eefda9c8fd ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T15:37:54Z", "uuid": "01a15f14-9f87-710b-8b5d-f1a72c3f7a5e", "scanned_at": "2026-10-21T15:29:20Z", "final_url": "https://taskerx.800876.xyz/features", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://taskerx.800876.xyz/features", "from": "http://taskerx.800876.xyz/features", "status": 307 } ], "ip": "172.67.174.10", "domains": [ "fjord.dropboxstatic.com", "f.vimeocdn.com", "player.vimeo.com", "d.dropbox.com", "www.gstatic.com", "i.vimeocdn.com", "captions.vimeo.com", "arclight.vimeo.com", "vod-adaptive-ak.vimeocdn.com", "vimeo.com", "aem.dropbox.com", "static.cloudflareinsights.com" ], "ips": [ "162.159.128.61", "34.120.202.204", "23.15.3.137", "142.251.150.120", "151.101.192.217", "151.101.128.217", "18.67.65.112", "162.159.138.60", "162.125.1.20", "104.16.80.73", "108.138.85.44", "172.67.174.10" ], "asns": [ "13335", "396982", "20940", "15169", "54113", "16509", "19679" ], "countries": [ "US" ], "link_domains": [ "app.reclaim.ai", "dash.dropbox.com", "fax.dropbox.com", "www.dropbox.com", "sign.dropbox.com", "learn.dropbox.com", "www.docsend.com", "help.dropbox.com", "experience.dropbox.com", "blog.dropbox.com", "events.dropbox.com", "www.dropboxforum.com", "jobs.dropbox.com", "dropbox.gcs-web.com", "twitter.com", "www.facebook.com", "www.youtube.com" ], "social": [ "https://twitter.com/Dropbox", "https://www.facebook.com/Dropbox", "https://www.youtube.com/user/dropbox" ], "doc_hash": "cbb66a2628597f92ca7d8263faa10d85408b51a1d548430cfff89f0a3a92cfac", "script_hashes": [ "4f9513961ae3c9e0812f7943544eee95852430c2112fd27e1c5557095aa2352d", "28c6d6178634cb04968f0daf825fc0e0db627cea66bda20b2b0b0ad96c0f3d0f", "3f02bdf3176f7d93e065763ff9bcc9cbfe33d54744aa95d40d9238d36b4b5317", "28a4772e2136a78118420dd7183015825e1149194e590859dbed4ab87041ec24", "30088754016c138fd81e086043e9aed132999080ea8a5ed8f52b344adbf49ffe", "febe64a8552875f4d1f9c9d0af5a8c9106e3a6865dee9724beac77c7622a7cd2", "94f33fe4c8bef737050a9154e7e2a70a216623f36eb5580fd3c824dea17573c6", "3b1920b703e699be51687caec5a36910872f8dc8c108e5116fa06f0441fee082", "53900f74a5ea2315e70e4a58935bfbebc916b0dbb55104f2dd6dce672b55a2f5", "599363bcf37e8854c2cbaca02368a75807af39f45063b74e2bc9c34485dab643" ], "globals": [ "EDISON_METRICS_JS_EXECUTION_START", "CSP_SCRIPT_NONCE", "addEdisonLoadCallback", "addStormcrowLoadCallback", "edisonLoadCallbacks", "stormcrowLoadCallbacks", "__SERVED_BY_EDISON_WEB_SERVER__", "PAGE_INIT_DATA", "__VFL_MAP__", "_sentryDebugIds", "rspackChunk", "__init_data_raw__", "__DEV_SERVER_HOSTNAME__", "__SENTRY__", "EDISON_METRICS_REQUIRE_LOAD_CALLBACK_TIME", "EDISON_METRICS_INIT_PAGE_MODULE_LOAD_TIME", "sjcl", "clearImmediate", "setImmediate", "__REACT_INTL_CONTEXT__", "sinkSingleton", "__cfBeacon", "__DROPBOX_CLEARBIT_REVEAL__", "__injectCssCache", "_DBX_UXA_GLOBAL", "reactLenisVersion", "__initDecagonSalesChat", "_uxa", "_6si", "VimeoPlayerResizeEmbeds_" ], "cookies": [ "__cf_ob", "billing_cycle", "cf_clearance", "__cf_bm", "vuid" ], "storage_keys": [ "amp-sink-origin-id", "__storage_test__", "udcl", "pap_session_value", "udcl/retry_count", "pap_session_last_used" ], "tls": { "san": [ "800876.xyz", "taskerx.800876.xyz", "*.taskerx.800876.xyz" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "800876.xyz", "protocol": "QUIC", "valid_to": "2027-01-18T11:46:58Z", "valid_from": "2026-10-20T10:47:01Z" }, "domain_age_days": 1, "apex_age_days": 2208, "tls_age_days": 1, "tls_valid_days": 90, "requests": 163, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 28, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T15:37:56Z", "uuid": "7d9187b2-eeda-4108-a12f-720c0396c8fe", "scanned_at": "2026-10-21T15:31:29Z", "final_url": "https://taskerx.800876.xyz/", "status": 403, "history": [ { "url": "https://taskerx.800876.xyz/", "status": 403 } ], "dom_hash": "9a6eba1ecbd2330d21371baacdbe2749d9444c15f6db23074fdf0e34c869bc51", "doc_hash": "4f381db43bc4fbc2c1538a1cef97ebb6d68f881689ec84599f0734c1e9cbd4f5", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "taskerx.800876.xyz", "type": "A", "value": "104.21.88.77" }, { "name": "taskerx.800876.xyz", "type": "A", "value": "172.67.174.10" }, { "name": "taskerx.800876.xyz", "type": "AAAA", "value": "2606:4700:3035::ac43:ae0a" }, { "name": "taskerx.800876.xyz", "type": "AAAA", "value": "2606:4700:3036::6815:584d" } ], "dnssec_valid": false, "ip": "104.21.88.77", "whois": { "registrar": "Name.com, Inc.", "created": "2022-10-05T03:34:45Z", "updated": "2023-08-31T17:00:19Z", "expires": "2029-10-05T23:59:59Z", "nameservers": [ "jason.ns.cloudflare.com", "suzanne.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T15:30:09Z", "analysis_at": "2026-10-21T06:15:34Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 2, "suspicious": 1, "undetected": 36 }, "detections": { "CRDF": "malicious", "Certego": "phishing", "SOCRadar": "suspicious" }, "reputation": 0, "tags": [ "dga" ], "created": "2022-10-05T00:00:00Z", "updated": "2022-10-05T00:00:00Z", "first_seen": "2026-10-20T12:24:50Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::ac43:ae0a" }, { "ttl": 300, "type": "A", "value": "172.67.174.10" }, { "ttl": 300, "type": "A", "value": "104.21.88.77" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::6815:584d" } ], "dns_at": "2026-10-21T06:20:52Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "800876.xyz", "taskerx.800876.xyz", "*.taskerx.800876.xyz" ], "issuer": "Google Trust Services / WE1", "serial": "a1437406877db1620e35a04302bd7ce2", "sha256": "40cfbae615f44890d5e498f15175d7699cedbe7866291de2085d493984aeacfd", "subject": "800876.xyz", "valid_to": "2027-01-18T11:46:58Z", "valid_from": "2026-10-20T10:47:01Z" }, "whois": [] }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T15:38:05Z", "caa_records": { "domain": "taskerx.800876.xyz" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "agents": [ "Twitterbot", "facebookexternalhit", "*" ], "present": true, "llms_txt": true, "sitemaps": [ "https://www.dropbox.com/sitemapindex.xml" ] }, "sitemap": { "present": true, "url_count": 5000 }, "security_txt": { "present": true, "found_in": "/.well-known/security.txt" }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "dns_server": { "ns": [ { "ip": "173.245.59.179", "host": "jason.ns.cloudflare.com" }, { "ip": "162.159.38.87", "host": "suzanne.ns.cloudflare.com" } ], "zone": "800876.xyz" }, "location": { "ip": "2a06:98c1:3120::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "800876.xyz" }, "dns": { "A": [ "188.114.97.9", "188.114.96.9" ], "AAAA": [ "2a06:98c1:3121::9", "2a06:98c1:3120::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "tech_stack": { "technologies": [ "Cloudflare Turnstile", "Cloudflare" ] }, "whois": { "registrar": "Name.com, Inc.", "created": "2022-10-05T03:34:45Z", "updated": "2023-08-31T17:00:19Z", "expires": "2029-10-05T23:59:59Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "jason.ns.cloudflare.com", "suzanne.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "SAMEORIGIN", "referrer-policy": "same-origin" } } } } ```