changeduns[.]info

changeduns.info entered the PhishDestroy evidence set on Aug 7, 2026. The assembled evidence scores 58/100 (elevated).

Two independent sources are positive: VirusTotal and Spamhaus DBL. VirusTotal recorded 1 detections among 91 engines: Fortinet on Aug 7, 2026 at 13:21 UTC. Spamhaus DBL: DBL_SPAM on Aug 7, 2026 at 14:30 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. On Aug 7, 2026 at 13:21 UTC, URLQuery recorded no positive detection; Google Safe Browsing returned no flag. URLScan captured the page on Aug 7, 2026 at 13:20 UTC.

The collector marked the hostname reachable on Aug 7, 2026 at 13:20 UTC, but did not retain the HTTP response code. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Aug 5, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. DOM analysis completed on Aug 7, 2026 at 14:20 UTC; stored DOM score 0/100. The evidence archive retains 4 visual captures from PhishDestroy, URLScan, URLQuery, and Cloudflare Radar. TLS metadata lists Google Trust Services as the certificate issuer.

No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as phishing. The stored record does not establish the post-click interaction, and it does not claim a confirmed wallet-draining transaction or credential submission.