testnet[.]humanitu[.]run

testnet.humanitu.run is a subdomain of humanitu.run. PhishDestroy first observed the hostname on Feb 26, 2026. Current evidence score: 82/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal recorded 2 detections among 93 engines: G-Data, Gridinsoft on Apr 20, 2026 at 16:22 UTC. ScamSniffer, Polkadot, Enkrypt, and Codeesura listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 22:20 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:18 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:25 UTC; content was unavailable. The recorded creation date for the registrable domain humanitu.run is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 172.67.141.160 on AS13335 (CLOUDFLARENET, US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Mar 23, 2026 at 23:14 UTC returned 63/100. The evidence archive retains 1 visual capture from PhishDestroy; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists WE1 as the certificate issuer.

The record contains 5 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.