ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
MALICIOUS — CRITICAL
Is huga-style.com a phishing site?
huga-style[.]
Analysis of huga-style.com indicates the domain is actively registered and resolves to a single IPv4 address (176.57.66.181).
72/100 evidence score · Critical
- VirusTotal
- 4/91
- Blocklists
- No stored match
- Disponibilité
- Dernier actif connu · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@ps.kz.
The latest stored availability evidence still shows the domain reachable; 23 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
23 days
Reports sent
1
Latest case ID
PD-20260717-68A606
Current status
HTTP 200 at latest stored check
Jump to section
Résumé du rapport
huga-style.com — Dernier actif connu (HTTP 200). Résumé des preuves: VirusTotal 4/91 (CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 72/100. Bureau d’enregistrement: PS Internet Company LLP.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
Analysis of huga-style.com indicates the domain is actively registered and resolves to a single IPv4 address (176.57.66.181). The domain was created on 25 December 2024 via PS Internet Company LLP and uses three nameservers (ns1.ps.kz, ns2.ps.kz, ns3.ps.kz). No public content has been examined, but the threat classification is listed as generic_phishing, suggesting the site may be used to harvest credentials or other sensitive information. VirusTotal records show the domain was scanned by 91 security vendors, none of which reported detections; however, the absence of detections does not constitute validation of safety. The domain remains active as of the report date (17 July 2026) and is flagged under investigation. Uncertainty persists regarding the specific phishing campaign, target audience, and any payload delivered. Defensive teams should block network traffic to 176.57.66.181 and to the domain huga-style.com, monitor DNS queries for the associated nameservers, and incorporate the domain into URL filtering policies. Continued observation of WHOIS changes, DNS resolution patterns, and any emerging intelligence from sandbox or telemetry sources is recommended to determine if the domain begins hosting malicious payloads or expands its operational footprint.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
VirusTotal
4 det.
URLScan
Certificat TLS
Let's Encrypt / YR1 20d
Âge
1.6 yr
Statut observé
Dernier actif connu 200
DestroyList
Répertorié
Reports Sent
1
Couverture des données12 recorded checks
VirusTotal
4 / 91
URLQuery
checked — no detections recorded
PhishStats
pas vérifié
OTX
no community references
CF Radar
scan completed
URLScan capture
rapport stocké
URLScan verdict
Analyse terminée
Blocs DNS
pas vérifié
TLS
valid certificate, 20d
WHOIS
20 mo old
Capture d'écran
3 captures · 3 sources
Chaîne de redirection
non sondé
Processus de réponse aux menaces Pipeline
Découverte
Checks
Reports
Disponibilité
12/13
Menace détectée
huga-style.com détectés et mis en file d'attente en vue d'une analyse complète
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
Analyse URLScan terminée ; ce résultat de capture Web ne modifie pas le verdict de menace de page · score 0
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
4/91 recorded on VirusTotal
Google Safe Browsing
Checked via Rapport de transparence de Google
robots.txt: 8 paths
Found 8 disallowed/allowed paths in robots.txt — reveals site structure
Sitemap: 100 pages
Site publishes a sitemap with 100 listed pages
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Le rapport contient des résultats de technologie ou d’analyse médico-légale stockés.
Sent Report Recorded
Stored sent-report record for registrar PS Internet Company LLP, hosting provider, 1 abuse contact
abuse@ps.kz
DestroyList publié
Listed in the public PhishDestroy/DestroyList repository
Monitoring Continues
Le domaine reste accessible ou restreint en accès ; des contrôles futurs pourraient mettre à jour cette observation.
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Domaine
URLScan Verdict
Analyse terminée
score 0 report ↗
Serveur / ASN
ddos-guard · AS57724 DDOS-GUARD LTD
Réputation de l’IP
abuse score 0/100 0 reports checked 17/07/2026
Bureau d’enregistrement
PS Internet Company LLP
Adresse IP
176.57.66.181
EnregistrementCréé 25/12/2024 — Expires 25/12/2026
Statut HTTP200
Détails techniquesDNS, SAN SSL, horodatages
Première détection17/07/2026
DOM Analysisanalyzed 17/07/2026score 71/100
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttps://huga-style.com/new3days?… query redacted
Serveurs de nomsns1.ps.kzns2.ps.kzns3.ps.kz
MX Records10 emx.mail.ru
TLS Fingerprint
TLS Observationvalid from 01/06/2026scanned 17/07/2026
Favicon Hash
Case ID
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Une accréditation est un contrat, pas un label de sécurité.
Vérifier les frais de l’ICANN
Lire le RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Technologies · 6 identified
T
Tilda
CMS
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confiance à 100 %
J
jQuery
JavaScript libraries
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confiance à 100 %
Facebook Pixel
Analytics
Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Confiance à 100 %
D
DDoS-Guard
Sécurité
DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.
ddos-guard.net Confiance à 100 %
C
cdnjs
CDN
Detected via Cloudflare Radar · Wappalyzer engine
Signaler ce domaine
Envoyez des éléments de preuve et contribuez à protéger les autres
Analyse VirusTotal
4 / Les fournisseurs de sécurité 91 ont signalé ce domaine
View on VT
Last analyzed First positive detection Previous stored snapshot: 2 detections
CRDF
Forcepoint ThreatSeeker
Gridinsoft
SOCRadar
Analyse de la configuration du site
Stored observations are retained with their original collection time.
robots.txt
Present · HTTP 200
/tilda/form*
/tilda/rec*
/tilda/click*
/tilda/scroll*
/tilda/popup*
/tilda/cart*
/tilda/product*
/tilda/event*
Sitemap
100 pages · HTTP 200
Données factuelles et rapports externesIndependent lookups and source reports
Analyse de sécurité
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-20260717-68A606 Recipient: abuse@ps.kz Page title stored with report: New Private Tab
OSINT et renseignement
DNS et réseau
Référencement naturel et nom de domaine
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Action Fraud
Signaler la fraude et la cybercriminalité en Angleterre, au Pays de Galles et en Irlande du Nord
Contact centre0300 123 2040
PhishDestroy listing review Pas un rapport des forces de l'ordre
Recours en matière de nom de domaine
Demandez un examen si vous possédez ce domaine et pensez que la liste est incorrecte
Méfiez-vous des escrocs qui prétendent vous aider à récupérer vos biens ! Les criminels peuvent recontacter leurs victimes tout en se faisant passer pour des enquêteurs, des avocats ou des agents de recouvrement. Ne payez pas de frais initiaux et ne partagez pas vos informations d'identification. En savoir plus sur la fraude liée aux aides à la reprise →
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Annuaire de 97 pays
Brouillon assisté par l'IA : les détails de l'incident sont traités par le fournisseur d'IA
Examinez-le et soumettez-le vous-même
Infrastructure et rapports associésStored relationships and adjacent records
Content matches 4
Rapports récents sur les menaces 4
Rapports récemment ajoutés à partir de la base de données PhishDestroy. Ces liens de découverte n’impliquent pas d’infrastructure ou de propriété partagée.