rubensteinarchitects[.]com

PhishDestroy first observed rubensteinarchitects.com on Feb 26, 2026. The captured page title is “Error 404 - Not Found”. Current evidence score: 100/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, Google Safe Browsing, DNS security resolvers, Cloudflare Radar, and URLQuery. VirusTotal recorded 15 detections among 93 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Fortinet, G-Data, Google Safebrowsing, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Jul 18, 2026 at 18:45 UTC. Google Safe Browsing flagged the domain: Social Engineering on Mar 2, 2026 at 20:51 UTC. DNS security checks returned 5 blocking results across 14 tested policies: Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. URLQuery recorded 5 threat-system alerts on May 9, 2026 at 22:55 UTC. Non-positive and contextual checks: AlienVault OTX listed 14 community pulse references (not vendor detections) on Mar 1, 2026 at 02:18 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:17 UTC. PhishStats returned no feed match on Mar 2, 2026 at 19:04 UTC.

Cloaking was recorded with HTTP 200 on Aug 7, 2026 at 22:14 UTC. The cloaking probe recorded content divergence conditional delivery at 1/100 on Aug 7, 2026 at 22:14 UTC: alive_content: raw=ok; http=200; via=https_proxy; server=Apache. Registration records for the domain list Tucows Domains Inc. as the registrar and Feb 21, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 205.134.250.164 on AS22611 (INMOTION - InMotion Hosting, Inc., US). The recorded endpoint location is Los Angeles, US. The stored server header is Apache. DOM analysis on Jul 9, 2026 at 02:21 UTC returned 100/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt / R13 as the certificate issuer with validity through Apr 20, 2026; checked Mar 15, 2026 at 08:10 UTC.

The content indicators and 5 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.