dapala[.]net

PhishDestroy first observed dapala.net on Jun 12, 2026. The captured page title is “Apache2 Ubuntu Default Page: It works”. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 16 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, SOCRadar, Sophos, Viettel Threat Intelligence, VIPRE, Webroot on Jul 29, 2026 at 05:38 UTC. Spamhaus DBL: DBL_BOTNET on Jul 29, 2026 at 07:22 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories malware and security threats; its verdict timestamp was not retained. Non-positive and contextual checks: Gridinsoft assigned a trust score of 18/100; no observation timestamp was retained. AlienVault OTX listed 30 community pulse references (not vendor detections) on Jul 29, 2026 at 05:41 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Jul 29, 2026 at 05:38 UTC. URLScan completed without a malicious verdict (score 0) on Aug 1, 2026 at 03:31 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Mar 18, 2026 as the creation date. At collection time, the hostname resolved to 127.0.0.1. The recorded endpoint location is --. The stored server header is nginx. The evidence archive retains 1 visual capture from PhishDestroy. TLS metadata lists PhishDestroy as the certificate issuer with validity through Jan 6, 2036; checked Jul 29, 2026 at 10:02 UTC.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.