# wf.managepci.com: Recorded Wells Fargo PCI Compliance Portal Login | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/wf.managepci.com/ Machine-readable companion: https://phishdestroy.io/domain/wf.managepci.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-10 21:38:58 UTC - Selected availability observation: 2026-11-11T00:54:56Z - Stored record updated: 2026-11-11 00:54:56 UTC - VirusTotal detections in the stored snapshot: 4/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): wells fargo ## Stored infrastructure - Observed IP address: 54.235.202.70 - Registrar in stored WHOIS data: Amazon Registrar, Inc. - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 (observed: 2026-11-11T00:54:56Z) - Registration date in stored WHOIS data: 2021-12-02 09:20:21 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1c764-8498-700c-a84c-516af8e9979f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/wf.managepci.com - Certificate Transparency search: https://crt.sh/?q=%25.wf.managepci.com - Web Archive lookup: https://web.archive.org/web/*/https://wf.managepci.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records wf.managepci.com as showing a Wells Fargo-branded PCI Compliance portal login page with username and password fields. On 2026-11-10, wf.managepci.com displayed a Wells Fargo-branded Payment Card Industry (PCI) Compliance portal login page. A banner welcomes users to the portal and notes that previous login credentials should be used, with a cookies policy link and a close control. The main panel is headed "Please login" and provides Username and Password fields, a red Login button, and links for Forgot password and Forgot username, alongside a Register option for first-time users. The right-hand column, titled "Welcome to the Wells Fargo Portal," explains that businesses accepting branded payment cards must take steps to reduce fraud exposure and comply with the PCI DSS standard. The stored VirusTotal domain result reports 4 detections out of 92 engines. VIPRE reported "phishing"; Kaspersky reported "phishing". Package revision: 0a2c72a016622d121955836a7944cb131c97f909883ce45317dab9029a11ffa5 Text generated (not scan time): 2026-11-10 23:41:09 Reviewed evidence snapshot: {"domain":"wf.managepci.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"wf.managepci.com","final_host":"wf.managepci.com","redirects":[{"to":"https://wf.managepci.com/","from":"http://wf.managepci.com/","status":307}],"captured_at":"2026-11-10T21:37:05.209000Z","uuid":"01a1c764-8498-700c-a84c-516af8e9979f","report_url":"https://urlscan.io/result/01a1c764-8498-700c-a84c-516af8e9979f/","sha256":"d7b9910f1d4b8f9233e21483ea416d4639ebd72150448416eb7373626e5c745e","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":4,"engines":92,"malicious":4,"suspicious":0,"analysis_date":"2026-11-07","retrieved_date":"2026-11-10","vendor_labels":{"VIPRE":"phishing","Kaspersky":"phishing","Gridinsoft":"phishing","SafeToOpen":"phishing"},"flagging_vendors":["VIPRE","Kaspersky","Gridinsoft","SafeToOpen"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 4 detections out of 92 engines. VIPRE reported \"phishing\"; Kaspersky reported \"phishing\".","page_paragraph_target_characters":545} Source facts (timestamps as stored): {"record_id":1907391,"first_recorded_at":"2026-11-10 22:38:58","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":4,"denominator":92,"malicious":4,"suspicious":0,"vendors":{"VIPRE":"phishing","Kaspersky":"phishing","Gridinsoft":"phishing","SafeToOpen":"phishing"},"observed_at":"2026-11-07T14:27:54Z","checked_at":null,"fetched_at":"2026-11-10T22:14:45Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":4,"denominator":92,"malicious":null,"suspicious":null,"vendors":["Gridinsoft","Kaspersky","SafeToOpen","VIPRE"],"observed_at":"2026-11-07 14:27:54","checked_at":"2026-11-10 23:14:45","fetched_at":"2026-11-10 22:14:46","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"VIPRE":"phishing","Kaspersky":"phishing","Gridinsoft":"phishing","SafeToOpen":"phishing"},"vendor_names":["VIPRE","Kaspersky","Gridinsoft","SafeToOpen"],"stats":{"timeout":0,"harmless":56,"malicious":4,"suspicious":0,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-10 23:11:03"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-11 00:31:31"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1907391,"scope":"checked_url","observed_at":"2026-11-11T00:54:56Z","http_status":200,"http_observed_at":"2026-11-11T00:54:56Z","stored_http_code":200,"stored_http_observed_at":"2026-11-11T00:54:56Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-10: https://screenshots.phishdestroy.io/us/01a1c764-8498-700c-a84c-516af8e9979f.png Captured: 2026-11-10 21:37:05 UTC Source report: https://urlscan.io/result/01a1c764-8498-700c-a84c-516af8e9979f/ SHA-256: d7b9910f1d4b8f9233e21483ea416d4639ebd72150448416eb7373626e5c745e - URLScan · 2025-11-13 · via managepci.com: https://screenshots.phishdestroy.io/us/019a7c2f-d86a-7722-9a4d-33a5bb14c651.png Captured: 2025-11-13 07:48:36 UTC Source report: https://urlscan.io/result/019a7c2f-d86a-7722-9a4d-33a5bb14c651/ SHA-256: afc42dd532074c8ee94456480ebf5737adee30e659f923df3798e40f864afd25 - URLScan · 2025-12-03: https://screenshots.phishdestroy.io/us/019ae500-35b6-70bc-a6c7-84d27434b054.png Captured: 2025-12-03 16:16:38 UTC Source report: https://urlscan.io/result/019ae500-35b6-70bc-a6c7-84d27434b054/ SHA-256: afc42dd532074c8ee94456480ebf5737adee30e659f923df3798e40f864afd25 - URLScan · 2026-01-09: https://screenshots.phishdestroy.io/us/019ba0c9-b338-752f-9ee0-a6c1a0bec2ab.png Captured: 2026-01-09 03:25:42 UTC Source report: https://urlscan.io/result/019ba0c9-b338-752f-9ee0-a6c1a0bec2ab/ SHA-256: 2b3ac3469f0feffda9f500d0cdba67953f6cad596d4b269491a66ed264eda0f2 - URLScan · 2026-06-30: https://screenshots.phishdestroy.io/us/019f16e7-efbe-7534-ae3a-2b78a59d0278.png Captured: 2026-06-30 05:02:18 UTC Source report: https://urlscan.io/result/019f16e7-efbe-7534-ae3a-2b78a59d0278/ SHA-256: 7ae8c112ae4611e756d35a2766662816d41237d3993ccc8b5da7d790865f041e - URLScan · 2026-09-18 · via managepci.com: https://screenshots.phishdestroy.io/us/01a0b68d-c544-72a0-9e5a-4027a4056ec4.png Captured: 2026-09-18 22:05:55 UTC Source report: https://urlscan.io/result/01a0b68d-c544-72a0-9e5a-4027a4056ec4/ SHA-256: e0b60966c9a79048a42a1b28a8e067a2d0acdb541dd2c6b14f00271acb6ce605 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/18eede45-42b3-4efc-b16f-d7b1aab96440.png Captured: 2026-11-10 22:12:11 UTC Source report: https://radar.cloudflare.com/scan/18eede45-42b3-4efc-b16f-d7b1aab96440 SHA-256: 26865d7b9485033a33de3f03f9edf24d47817e520f7a441a48c180fd307c1809 - URLQuery: https://screenshots.phishdestroy.io/uq/8f9fa939-b5e2-48ac-b2e9-a9e70338b095.png Source report: https://urlquery.net/report/8f9fa939-b5e2-48ac-b2e9-a9e70338b095 SHA-256: d13cf523fe3fc005ee83a3d7e0c822fba1ff17f06ba6aa0c015aacd59fcabfb6 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-10T21:43:47Z", "uuid": "01a1c764-8498-700c-a84c-516af8e9979f", "scanned_at": "2026-11-10T21:37:05Z", "final_url": "https://wf.managepci.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://wf.managepci.com/", "from": "http://wf.managepci.com/", "status": 307 } ], "ip": "54.235.202.70", "ptr": "ec2-54-235-202-70.compute-1.amazonaws.com", "domains": [ "us01-prod-sair-static-assets.s3.amazonaws.com", "static.zdassets.com", "fonts.gstatic.com", "ekr.zdassets.com", "fonts.googleapis.com" ], "ips": [ "142.251.20.94", "16.15.167.180", "142.251.110.95", "216.198.53.3", "54.235.202.70" ], "asns": [ "15169", "14618", "209242" ], "countries": [ "US" ], "link_domains": [ "www.wellsfargo.com" ], "doc_hash": "0c2fc65d892b52acab6fa0822d2c8ff5ddde96cc2b8fac145f59baba257565da", "script_hashes": [ "39a6a44bb6a070c14a24ed1c0785a85bee629ab6febd9535dcd1e99e6c9b3c96", "637179442d7872e9984bbef8ccf2ee343219917d2d811443832a3d220615c58d", "0e800e85b43cf40880b6e43366852924f5064e7b1e0c0362dd7aa6ca13d533f4", "7d559be3410f827ce7a18ac57ba042b3c24b443ee618420c873f7a9b448f168a", "7c6927ad58bd72b2e4c8b87495fda3ebf00cdfcc229eff7d8189a340cc776e99", "021fc4deca265a154d9c355d9fa07817cc110820024199c4ecc233c2d5ab2613", "6f7a67487dd4d9d218fdbe5688e04e36bb68c18ce5ffc53d3610dc8557c9f0fb" ], "globals": [ "zEWebpackACJsonp", "zE", "zEmbed", "webpackChunkair3", "$localize", "Zone", "__zone_symbol__Promise", "__zone_symbol__fetch", "__zone_symbol__setTimeout", "__zone_symbol__clearTimeout", "__zone_symbol__setInterval", "__zone_symbol__clearInterval", "__zone_symbol__requestAnimationFrame", "__zone_symbol__cancelAnimationFrame", "__zone_symbol__webkitRequestAnimationFrame", "__zone_symbol__webkitCancelAnimationFrame", "__zone_symbol__alert", "__zone_symbol__prompt", "__zone_symbol__confirm", "__zone_symbol__MutationObserver", "__zone_symbol__WebKitMutationObserver", "__zone_symbol__IntersectionObserver", "__zone_symbol__FileReader", "__zone_symbol__ononpagerevealpatched", "__zone_symbol__ononsearchpatched", "__zone_symbol__ononappinstalledpatched", "__zone_symbol__ononbeforeinstallpromptpatched", "__zone_symbol__ononabortpatched", "__zone_symbol__ononbeforeinputpatched", "__zone_symbol__ononbeforematchpatched", "__zone_symbol__ononbeforetogglepatched", "__zone_symbol__ononblurpatched", "__zone_symbol__ononcancelpatched", "__zone_symbol__ononcanplaypatched", "__zone_symbol__ononcanplaythroughpatched", "__zone_symbol__ononchangepatched", "__zone_symbol__ononclickpatched", "__zone_symbol__ononclosepatched", "__zone_symbol__ononcommandpatched", "__zone_symbol__ononcontentvisibilityautostatechangepatched" ], "cookies": [ "sairLocale" ], "storage_keys": [ "SGS_CURRENT_LANG_KEY", "SGS_I18N_LANG_KEY", "SGS_I18N_TIMESTAMP", "SGS_TRANSLATIONS_MAIN" ], "tls": { "san": [ "*.managepci.com", "managepci.com" ], "cipher": "AES_256_GCM", "issuer": "SSL.com RSA SSL subCA", "subject": "*.managepci.com", "protocol": "TLS 1.3", "valid_to": "2027-02-03T14:50:41Z", "valid_from": "2026-02-03T14:50:41Z" }, "domain_age_days": 555, "apex_age_days": 1776, "tls_age_days": 280, "tls_valid_days": 365, "requests": 30, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 4, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "wellsfargo" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Wells Fargo" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains", "content-security-policy": "default-src 'self' *.sysnet.ie *.sysnetgs.com player.vimeo.com data:; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.zdassets.com https://ekr.zdassets.com https", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), midi=(), usb=()", "cross-origin-opener-policy": "same-origin-allow-popups" } }, "cf": { "v": 1, "fetched_at": "2026-11-10T22:13:34Z", "uuid": "18eede45-42b3-4efc-b16f-d7b1aab96440", "scanned_at": "2026-11-10T22:12:11Z", "final_url": "https://wf.managepci.com/", "status": 200, "history": [ { "url": "https://wf.managepci.com/", "status": 200 } ], "dom_hash": "417cbd8838f4de76438364db86686623dc7feb58a012d66f999439aceff64041", "doc_hash": "0c2fc65d892b52acab6fa0822d2c8ff5ddde96cc2b8fac145f59baba257565da", "domain_risks": [ "Economy & Finance", "Business & Economy" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "wf.managepci.com", "type": "CNAME", "value": "produs-strustusa.sgsonline.net" }, { "name": "wf.managepci.com", "type": "CNAME", "value": "produs-strustusa.sgsonline.net" } ], "dnssec_valid": false, "ip": "127.0.1.4", "whois": { "registrar": "Amazon Registrar, Inc.", "created": "2021-12-02T10:20:21Z", "updated": "2026-10-28T10:22:11Z", "expires": "2027-12-02T10:20:21Z", "nameservers": [ "ns-1349.awsdns-40.org", "ns-1810.awsdns-34.co.uk", "ns-58.awsdns-07.com", "ns-956.awsdns-55.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-10T22:14:45Z", "analysis_at": "2026-11-07T14:27:54Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 4, "suspicious": 0, "undetected": 32 }, "detections": { "VIPRE": "phishing", "Kaspersky": "phishing", "Gridinsoft": "phishing", "SafeToOpen": "phishing" }, "reputation": 0, "popularity": { "Cisco Umbrella": 900816 }, "registrar": "Amazon Registrar, Inc.", "created": "2021-12-02T10:20:21Z", "expires": "2027-12-02T10:20:21Z", "updated": "2026-10-28T10:22:11Z", "first_seen": "2025-05-05T20:27:20Z", "dns": [ { "ttl": 60, "type": "A", "value": "54.235.202.70" }, { "ttl": 30, "type": "CNAME", "value": "ab4d7c00232ad42f38844f594a30627f-1668523885.us-east-1.elb.amazonaws.com" }, { "ttl": 29, "type": "CNAME", "value": "ab4d7c00232ad42f38844f594a30627f-1668523885.us-east-1.elb.amazonaws.com" }, { "ttl": 60, "type": "A", "value": "100.30.162.160" }, { "ttl": 299, "type": "CNAME", "value": "produs-strustusa.sgsonline.net" }, { "ttl": 60, "type": "A", "value": "3.225.70.124" }, { "ttl": 300, "type": "CNAME", "value": "produs-strustusa.sgsonline.net" } ], "dns_at": "2026-11-07T14:31:31Z", "jarm": "29d29d00029d29d00042d42d0000000464fb8c6842ac133bede81390a48134", "cert": { "san": [ "*.managepci.com", "managepci.com" ], "issuer": "SSL Corporation / SSL.com RSA SSL subCA", "serial": "51d56443c0d0a0e7c9529d975544134c", "sha256": "80abd9bbf7afdd64e01ae44e3d17ad793aad3c96f83e1b393dac96f2f4bc8dba", "subject": "*.managepci.com", "valid_to": "2027-02-03T14:50:41Z", "valid_from": "2026-02-03T14:50:41Z", "observed_at": "2026-11-07T14:31:31Z" }, "whois": { "registrar": "Amazon Registrar, Inc.", "registrar_iana_id": "468", "registrar_url": "http://registrar.amazon.com", "created": "2021-12-02T10:20:21Z", "updated": "2026-10-28T10:22:11Z", "expires": "2027-12-02T10:20:21Z", "status": [ "ok" ], "nameservers": [ "ns-1349.awsdns-40.org", "ns-1810.awsdns-34.co.uk", "ns-58.awsdns-07.com", "ns-956.awsdns-55.net" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-10T22:11:25Z", "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-11-10T22:02:54Z", "first": "2026-02-02T17:55:56Z", "changes": 4, "days_archived": 6, "scans_per_day": 0.02, "avg_page_bytes": 6026 }, "social_tags": { "title": "Wells Fargo" }, "trackers": { "requests": 7, "trackers": [ { "name": "Amazon Web Services", "company": "Amazon", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Zendesk CDN", "company": "Zendesk", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.zdassets.com/ekr/snippet.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 409, "tls": 113, "wait": 118, "connect": 107, "download": 213 }, "response_ms": 960 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 45877, "co2_grams": 0.0017, "cleaner_than": 39 }, "dns_server": { "ns": [ { "ip": "205.251.192.58", "host": "ns-58.awsdns-07.com" }, { "ip": "205.251.195.188", "host": "ns-956.awsdns-55.net" }, { "ip": "205.251.197.69", "host": "ns-1349.awsdns-40.org" }, { "ip": "205.251.199.18", "host": "ns-1810.awsdns-34.co.uk" } ], "zone": "managepci.com" }, "location": { "ip": "100.30.162.160", "asn": "14618", "org": "Amazon.com", "city": "Ashburn", "country": "US" }, "ssl": { "issuer": "SSL Corporation / SSL.com RSA SSL subCA", "subject": "*.managepci.com" }, "dns": { "A": [ "3.225.70.124", "54.235.202.70", "100.30.162.160" ], "CNAME": [ "produs-strustusa.sgsonline.net" ] }, "dnssec": { "ds": true, "rrsig": false, "dnskey": true }, "hsts": { "header": "max-age=31536000; includeSubDomains", "message": "HSTS header does not contain the preload directive." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), midi=(), usb=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "default-src 'self' *.sysnet.ie *.sysnetgs.com player.vimeo.com data:; frame-ancestors 'self'; script-src 'self' 'unsafe-", "strictTransportPolicy": "max-age=31536000; includeSubDomains", "crossOriginOpenerPolicy": "same-origin-allow-popups", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "3.225.70.124", "family": 4 }, "redirects": { "chain": [ "https://wf.managepci.com" ] }, "whois": { "registrar": "Amazon Registrar, Inc.", "created": "2021-12-02T10:20:21Z", "updated": "2026-10-28T10:22:11Z", "expires": "2027-12-02T10:20:21Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "ns-1349.awsdns-40.org", "ns-1810.awsdns-34.co.uk", "ns-58.awsdns-07.com", "ns-956.awsdns-55.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains", "content-security-policy": "default-src 'self' *.sysnet.ie *.sysnetgs.com player.vimeo.com data:; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zende", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), midi=(), usb=()", "cross-origin-opener-policy": "same-origin-allow-popups" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1c764-8498-700c-a84c-516af8e9979f.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1c764-8498-700c-a84c-516af8e9979f/","captured_at":"2026-11-10T21:37:05Z","sha256":"d7b9910f1d4b8f9233e21483ea416d4639ebd72150448416eb7373626e5c745e","model_image_sha256":"4f317c821003060b4ccf7324cc6c4a8e321bc3018e3492e9f2b71cf2d4708866","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/wf.managepci.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1907391, "scope": "checked_url", "observed_at": "2026-11-11T00:54:56Z", "http_status": 200, "http_observed_at": "2026-11-11T00:54:56Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-11T00:54:56Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```