This domain, www.dgfddfhhd.pics, was registered on 15 March 2026 through Spaceship, Inc. and is currently resolved to the IPv4 address 47.242.217.10. The authoritative nameservers are launch1.spaceship.net and launch2.spaceship.net, indicating that the hosting provider is the same entity that supplied the registration service. VirusTotal has recorded 2 of 91 security‑vendor detections for the domain, confirming that at least a small subset of scanners have identified malicious behavior. The domain is listed on one external blocklist and has been actively blocked by the PhishDestroy mitigation platform, confirming that it is being treated as a phishing threat by at least one commercial defense service. The threat classification supplied is “generic phishing,” and the operational status is reported as active as of the assessment date, 2 August 2026.
No public SSL certificate information, HTTP response codes, or page‑title data are available in the current intelligence set, so the exact content served by the site remains unverified. Likewise, Safe Browsing, Open Threat Exchange, or additional reputation scores have not been disclosed. Consequently, defenders cannot confirm whether the site presents a credential‑harvesting page, redirects, or other payload mechanisms. Given the confirmed registration details, the presence on a blocklist, and the dual vendor detections, the domain should be treated as high‑risk.
Defensive teams are advised to add 47.242.217.10 and www.dgfddfhhd.pics to deny‑list rules in perimeter firewalls, DNS filtering solutions, and proxy devices. Continuous monitoring of the IP address for new detection signatures and periodic re‑scans with VirusTotal or similar multi‑engine services are recommended. Organizations employing email security gateways should ensure that messages containing this domain in URLs, links, or embedded content are quarantined or rejected.
DOM Analysisanalyzed 2026年8月2日score 93/1001 brand signal
Submitted URLhttp://www.dgfddfhhd.pics/
Favicon Hash
ケース ID
ICANN OVERSIGHT
認定と RAA の背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
地元の警察 — たとえ直ちに行動を起こせなくても、公式な記録が残される
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
詐欺による金銭の返還を装った詐欺 — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
About this reportSources, observation dates and corrections
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.
(US)
