VirusTotal
15 / 89
“Suspected Phishing | Cloudflare”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@dynadot.com.
The latest stored availability evidence still shows the domain reachable; 24 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
thespiritualspa.live — Ulaşılabilir · erişim kısıtlı (HTTP 403). Marka kimliğine bürünme: Scroll; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 15/89 (alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker); URLQuery 4 alerts; CF Radar malicious; PhishDestroy score 98/100. Kayıt kuruluşu: Dynadot.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | thespiritualspa.live |
malicious | Sinkholed |
| DigiCert UltraDNS | thespiritualspa.live |
malicious | Sinkholed |
| Quad9 DNS | thespiritualspa.live |
malicious | Sinkholed |
| DNS4EU | thespiritualspa.live |
malicious | Sinkholed |
On 2026-10-01, thespiritualspa.live returned an HTTP 403 status code in the recorded check. A PageSpeed performance score of 62 was recorded for the domain on 2026-09-19. The domain was first observed on 2026-09-19 according to the available evidence.
VirusTotal recorded 15 detections across 89 scanners for thespiritualspa.live on 2026-09-20. OTX listed 4 pulses for the domain on 2026-09-20. The PhishDestroy internal listing included thespiritualspa.live, and the domain was registered with Dynadot Inc on 2026-07-16. Its SSL certificate was issued by Google Trust Services / WE1, as scanned on 2026-09-19.
The VirusTotal and OTX records dated 2026-09-20 describe detection and pulse counts captured by those services on that day. The HTTP 403 response dated 2026-10-01 describes only the response recorded at that check, not all content on the domain. The PageSpeed score dated 2026-09-19 reflects a performance measurement taken on that date. These records come from different sources and dates, so they should be compared as separate observations rather than combined into a single conclusion.
For thespiritualspa.live, preserve the VirusTotal and OTX records as separate source documents for later comparison. Compare the HTTP response record against future checks to see whether the recorded status changes. Retain the PageSpeed observation alongside the other source records so that each dated measurement remains available for review. Use these preserved records to guide any further monitoring of thespiritualspa.live.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
cloudflareTarayıcı notu: cloudflare_ban: raw=cf_phishing_block; http=403; via=https_proxy; server=cloudflare; provider_error=cloudflare_phishing_interstitial
Tarama Sırasında Sağlayıcının Yanıtı: cloudflare_phishing_interstitial
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.
lex.ns.cloudflare.commckinley.ns.cloudflare.comLocation describes the IP network.
3102359518b84586f840f9cfc6d8573473027ab73fc67df8f04c46eb9b8ac4f4Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of thespiritualspa.live · checked Sep 19, 2026
172.67.191.143. 12 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20260919-74AD78 Recipient: abuse@dynadot.com Registrar: Dynadot LLC / Dynadot Inc (United States) Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin