davo318[.]com

PhishDestroy first observed davo318.com on Aug 15, 2026. Stored content metadata identifies Generic as the apparent target. The captured page title is “Uphold Pro”. Current evidence score: 85/100 (critical).

Positive findings are stored from 6 sources: MetaMask, SEAL, Spamhaus DBL, Cloudflare Radar, URLQuery, and URLScan. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 15, 2026 at 22:20 UTC. Spamhaus DBL: DBL_PHISH on Aug 15, 2026 at 22:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLQuery recorded 2 detections; no observation timestamp was retained. URLScan returned a malicious verdict with score 100; scan metadata assigned phishing as its category on Aug 15, 2026 at 23:08 UTC. Non-positive and contextual checks: On Aug 15, 2026 at 22:58 UTC, VirusTotal recorded 0 detections among 91 engines; Google Safe Browsing returned no flag. The 0/91 VirusTotal snapshot and the positive findings above are conflicting observations from different sources or collection times.

The collector marked the hostname reachable on Aug 15, 2026 at 22:27 UTC, but did not retain the HTTP response code. Registration records for the domain list GMO Internet Group, Inc. d/b/a Onamae.com as the registrar and Aug 14, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 104.21.1.240. The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services as the certificate issuer.

The content indicators and 6 positive source findings support the current Generic impersonation and phishing classification. The target field identifies Generic, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.