btbroadbannds[.]visual[.]com

btbroadbannds.visual.com is a subdomain of visual.com. PhishDestroy first observed the hostname on Feb 26, 2026. The captured page title is “404 - Page Not Found”. Current evidence score: 88/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, DNS security resolvers, and Cloudflare Radar. VirusTotal recorded 10 detections among 93 engines: alphaMountain.ai, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, Kaspersky, Lionic, Phishing Database, Sophos, Webroot on Jul 18, 2026 at 18:45 UTC. DNS security checks returned 2 blocking results across 14 tested policies: Cloudflare Family, Cloudflare Security; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:55 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:16 UTC.

HTTP 404 was recorded on Aug 7, 2026 at 22:14 UTC; content was unavailable. Registration records for the registrable domain visual.com list Spaceship, Inc. as the registrar and Feb 21, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 52.33.133.246 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The recorded endpoint location is Boardman, US. DOM analysis on Jul 28, 2026 at 02:20 UTC returned 88/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Sectigo Limited / Sectigo RSA Domain Validation Secure Server CA as the certificate issuer with validity through Apr 7, 2026; checked Mar 15, 2026 at 08:10 UTC.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.