URLScan verdict
malicious
Signaler“Home | Barbie.phar”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@rashost.com.
The latest stored availability evidence still shows the domain reachable; 28 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
barbiepharbeauty.shop — Dernier actif connu (HTTP 200). Usurpation de l'identité de la marque : Radiant; Type d'arnaque : Impersonation. Résumé des preuves: URLScan malicious verdict; Spamhaus DBL_SPAM; PhishDestroy score 65/100.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
barbiepharbeauty.shop was observed with an HTTP status 200 response on 2026-10-12, documenting a successful connection at that time. The domain was also listed in the publisher-owned PhishDestroy catalogue as of the same period.
The HTTP status source recorded a 200 code for barbiepharbeauty.shop on 2026-10-12. OTX measured four pulse entries for the domain on 2026-10-11. URLScan reported an available scan for barbiepharbeauty.shop on 2026-10-11. PhishDestroy internally listed the domain as of 2026-10-11, and the SSL certificate was issued by Let's Encrypt / YE2, scanned on 2026-10-11.
The PhishDestroy listing contains a record of barbiepharbeauty.shop in its internal catalogue, documenting its inclusion for security review purposes. OTX provides a measurement of pulse entries, which are external intelligence references, and URLScan offers a snapshot of the domain's observed web content. The HTTP status record describes a successful connection, showing technical accessibility on the recorded date. These observations together provide a timeline of recorded measurements from multiple sources.
For barbiepharbeauty.shop, preserve the HTTP status, OTX, URLScan, and PhishDestroy records for ongoing comparison and review. Use these documented measurements to inform future checks and monitor for any changes in observed evidence. Maintain a reference to the domain's inclusion in the PhishDestroy catalogue for context in security assessments.
Enregistrement des observations « crawler contre navigateur » pour cet hôte, ainsi qu'une vérification en temps réel des empreintes numériques pour les systèmes de répartition du trafic de type Keitaro.
Note relative à la numérisation: alive_content: raw=ok; http=200; via=https_proxy
mckinley.ns.cloudflare.comnoah.ns.cloudflare.comLocation describes the IP network.
6e6a3f609f5931896ab7aaeb4dce608bdba01f6eee773f02be09011d71a9280dSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
23.252.79.166. 10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20261011-E46DF1 Recipient: abuse@rashost.com AUP & Terms of Service Violations: Acceptable Use Policy: Active phishing operations targeting internet users directly violate standard AUP provisions prohibiting fraud and deceptive practices. Terms of Service: Material breach of service terms regarding malicious use, providing contractual justification for immediate suspension. Applicable Legal Framework (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Investigation Notice: We fully respect your internal investigation processes and discretion. Prompt remediation protects innocent users while mitigating regulatory compliance scrutiny, legal liability, and brand reputation risks associated with ongoing malicious infrastructure.
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Template-based draft · optional AI wording assistance requires separate consent
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerRapports de phishing récents et changements de disponibilité observés
SurveillerSurveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif