This domain, www.dgfddfhhd.pics, was registered on 15 March 2026 through Spaceship, Inc. and is currently resolved to the IPv4 address 47.242.217.10. The authoritative nameservers are launch1.spaceship.net and launch2.spaceship.net, indicating that the hosting provider is the same entity that supplied the registration service. VirusTotal has recorded 2 of 91 security‑vendor detections for the domain, confirming that at least a small subset of scanners have identified malicious behavior. The domain is listed on one external blocklist and has been actively blocked by the PhishDestroy mitigation platform, confirming that it is being treated as a phishing threat by at least one commercial defense service. The threat classification supplied is “generic phishing,” and the operational status is reported as active as of the assessment date, 2 August 2026.
No public SSL certificate information, HTTP response codes, or page‑title data are available in the current intelligence set, so the exact content served by the site remains unverified. Likewise, Safe Browsing, Open Threat Exchange, or additional reputation scores have not been disclosed. Consequently, defenders cannot confirm whether the site presents a credential‑harvesting page, redirects, or other payload mechanisms. Given the confirmed registration details, the presence on a blocklist, and the dual vendor detections, the domain should be treated as high‑risk.
Defensive teams are advised to add 47.242.217.10 and www.dgfddfhhd.pics to deny‑list rules in perimeter firewalls, DNS filtering solutions, and proxy devices. Continuous monitoring of the IP address for new detection signatures and periodic re‑scans with VirusTotal or similar multi‑engine services are recommended. Organizations employing email security gateways should ensure that messages containing this domain in URLs, links, or embedded content are quarantined or rejected.
探测与规避分析
隐身和流量分配检查
尚未扫描目前尚未记录到爬虫与浏览器之间的差异
针对该主机的爬虫与浏览器观察记录，以及针对“Keitaro”式流量分配系统的实时指纹检测。
存储的隐身标志
尚未扫描
上次隐形扫描
扫描说明:unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-373953.invalid', port=80): Max retries exceeded with url: / (Caused by
DOM Analysisanalyzed 2026年8月2日score 93/1001 brand signal
Submitted URLhttp://www.dgfddfhhd.pics/
Favicon Hash
案件 ID
ICANN OVERSIGHT
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest HTTP observation未知Probe Inconclusive20%2026-10-13 01:31:44 UTC
RDAP registration未知
Observed timelinelast reachable: 2026-09-15 22:18:16 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
Domain Status Transition2026-09-25 01:31:11 UTC
Domain state transitioned from alive to dead.
威胁响应 Pipeline
发现
Analysis
Monitoring
14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups+
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels+
Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
(US)
