Website safety scanner

Is 127052.com legit?

Be careful with this website

Our scanner found several signals that may make 127052.com risky for visitors. Avoid payments, logins or downloads unless you can verify the site independently.

Our score 29/100

High caution

Threat lists Match found Warning

SSL Valid Passed

Domain age 110 days New

Email protection Incomplete Check

Popularity Low data Unknown

Our verdict

Our automated scanner gives 127052.com a trust score of 29/100. Stronger trust signals include Configured free blacklist checks did not report a match, Abuse confidence score 0/100, Certificate valid with 44 days remaining. The main warnings or unknowns are 6 malicious detections, 110 days old, No mail exchange records found.

This is an automated trust analysis. It checks technical signals, public threat feeds, domain records and website configuration. It cannot prove intent, but it helps you decide whether extra caution is needed before you log in, pay, download files or share personal information.

Recommended action Do not enter payment details, passwords or personal information unless you can verify the website through an official source.

Website preview

Preview image generated from the scanned homepage. Visual appearance can change after the scan.

What to watch for

VirusTotal malicious detections -35 6 malicious detections
Recently registered domain -10 110 days old
No MX records -3 No mail exchange records found
Missing SPF record -4 No SPF policy found
Missing DMARC record -4 No DMARC policy found
Limited security headers -4 Missing: content-security-policy, strict-transport-security, x-content-type-options, permissions-policy
Limited company information found -5 Few contact, about, privacy, terms or refund signals found

What this means for you

Browsing the homepage: review normally, but watch for browser warnings or forced downloads.
Entering passwords: only continue if the domain clearly matches the official website.
Payments: verify company details, refund policy and payment method first.
Downloads: avoid files when threat intelligence or reputation warnings are present.

Is 127052.com safe to use?

127052.com currently has a low trust profile in our automated analysis. The score combines blacklist results, SSL status, DNS configuration, WHOIS data, redirect behavior, security headers, domain heuristics, IP reputation and popularity signals.

A high score does not guarantee that a website is legitimate, and a low score does not prove criminal intent. The purpose of this report is to show the technical evidence so visitors can make a more informed decision.

Brand and domain checks

Brand-like pattern: No common pattern detected
Redirects elsewhere: No
Final URL: https://www.127052.com/
Punycode detected: No

Contact and company signals

About page: No
Contact page: No
Privacy policy: No
Terms page: No
Refund policy: No

Payment risk indicators

Risk terms found: No data available
External links: 1
Recommendation: Do not enter payment details, passwords or personal information unless you can verify the website through an official source.

Trust signals found

No phishing list match found Configured free blacklist checks did not report a match
AbuseIPDB clean IP score Abuse confidence score 0/100
Valid SSL certificate Certificate valid with 44 days remaining
HTTPS reachable Website responds over HTTPS

Website popularity

5 Popularity score

06-28

Rank source: Tranco
Tranco rank: No data available
Estimated visitors: No reliable estimate available

Additional threat intelligence

AlienVault OTX pulses: 0
OTX reputation: No data available
AbuseIPDB score: 0/100
AbuseIPDB reports: 0
IP owner / ISP: Cloudflare, Inc.

VirusTotal details

Malicious detections: 6
Suspicious detections: 0
Harmless engines: 52
Undetected engines: 33
Reputation: 0
Community votes: harmless: 0, malicious: 0
Categories: alphaMountain.ai: Phishing (alphaMountain.ai)

Detected threats by engine

Engine	Category	Result	Method
alphaMountain.ai	malicious	phishing	blacklist
CRDF	malicious	malicious	blacklist
Emsisoft	malicious	phishing	blacklist
Fortinet	malicious	phishing	blacklist
Netcraft	malicious	malicious	blacklist
Webroot	malicious	malicious	blacklist

View all stored VirusTotal output

{
    "tld": "com",
    "last_https_certificate": {
        "cert_signature": {
            "signature_algorithm": "1.2.840.10045.4.3.3",
            "signature": "3064023012da5f8861a749dad653ba0868c002c889a84915a20c06e0146bd4cfeb1207962f6bd76465a61871e2d2701491e761e902300f0c7f908624c26650773cea7215ff23a20f97ab069f7898eb6c8dddc2b89da475d638dde98d97bd8d74d91e14162342"
        },
        "extensions": {
            "key_usage": [
                "digitalSignature"
            ],
            "extended_key_usage": [
                "serverAuth"
            ],
            "CA": false,
            "subject_key_identifier": "19800b819481a03c32c0c93590ee1237d5d05750",
            "authority_key_identifier": {
                "keyid": "8f0d13a2f62e7ed1506c3318385d598e237291ca"
            },
            "ca_information_access": {
                "CA Issuers": "http://e8.i.lencr.org/"
            },
            "subject_alternative_name": [
                "*.127052.com",
                "127052.com"
            ],
            "certificate_policies": [
                "2.23.140.1.2.1"
            ],
            "crl_distribution_points": [
                "http://e8.c.lencr.org/43.crl"
            ],
            "1.3.6.1.4.1.11129.2.4.2": "0481f900f7007e006cfe501943a85ea916bc52d133e4dcc91ef1411c7d258420"
        },
        "validity": {
            "not_after": "2026-08-11 18:37:32",
            "not_before": "2026-05-13 18:37:33"
        },
        "size": 911,
        "version": "V3",
        "public_key": {
            "algorithm": "EC",
            "ec": {
                "oid": "secp256r1",
                "pub": "3059301306072a8648ce3d020106082a8648ce3d030107034200046dc87ec78c64cb9e4cd9368744a2b49b05cf689df3ca91e689c9923e476602bd06864fd8a1c02d29772ef9c80aa386162aedf42eb3f1a0603dbef04c85b23911"
            }
        },
        "thumbprint_sha256": "137af596b1be18d2010add53d9dcaf2edf95afd7b18b3a6cdd84ff70dddea4da",
        "thumbprint": "b4af7719386f920e7160277dccde82491a505eb2",
        "serial_number": "65bbc1560371007e5ca021034cadc77a42a",
        "issuer": {
            "C": "US",
            "O": "Let's Encrypt",
            "CN": "E8"
        },
        "subject": {
            "CN": "127052.com"
        }
    },
    "last_analysis_results": {
        "Acronis": {
            "method": "blacklist",
            "engine_name": "Acronis",
            "category": "harmless",
            "result": "clean"
        },
        "0xSI_f33d": {
            "method": "blacklist",
            "engine_name": "0xSI_f33d",
            "category": "undetected",
            "result": "unrated"
        },
        "Abusix": {
            "method": "blacklist",
            "engine_name": "Abusix",
            "category": "harmless",
            "result": "clean"
        },
        "ADMINUSLabs": {
            "method": "blacklist",
            "engine_name": "ADMINUSLabs",
            "category": "harmless",
            "result": "clean"
        },
        "Axur": {
            "method": "blacklist",
            "engine_name": "Axur",
            "category": "undetected",
            "result": "unrated"
        },
        "ChainPatrol": {
            "method": "blacklist",
            "engine_name": "ChainPatrol",
            "category": "undetected",
            "result": "unrated"
        },
        "Criminal IP": {
            "method": "blacklist",
            "engine_name": "Criminal IP",
            "category": "harmless",
            "result": "clean"
        },
        "AILabs (MONITORAPP)": {
            "method": "blacklist",
            "engine_name": "AILabs (MONITORAPP)",
            "category": "harmless",
            "result": "clean"
        },
        "AlienVault": {
            "method": "blacklist",
            "engine_name": "AlienVault",
            "category": "harmless",
            "result": "clean"
        },
        "alphaMountain.ai": {
            "method": "blacklist",
            "engine_name": "alphaMountain.ai",
            "category": "malicious",
            "result": "phishing"
        },
        "AlphaSOC": {
            "method": "blacklist",
            "engine_name": "AlphaSOC",
            "category": "undetected",
            "result": "unrated"
        },
        "Antiy-AVL": {
            "method": "blacklist",
            "engine_name": "Antiy-AVL",
            "category": "harmless",
            "result": "clean"
        },
        "ArcSight Threat Intelligence": {
            "method": "blacklist",
            "engine_name": "ArcSight Threat Intelligence",
            "category": "undetected",
            "result": "unrated"
        },
        "AutoShun": {
            "method": "blacklist",
            "engine_name": "AutoShun",
            "category": "undetected",
            "result": "unrated"
        },
        "Bfore.Ai PreCrime": {
            "method": "blacklist",
            "engine_name": "Bfore.Ai PreCrime",
            "category": "undetected",
            "result": "unrated"
        },
        "BitDefender": {
            "method": "blacklist",
            "engine_name": "BitDefender",
            "category": "harmless",
            "result": "clean"
        },
        "Bkav": {
            "method": "blacklist",
            "engine_name": "Bkav",
            "category": "undetected",
            "result": "unrated"
        },
        "Blueliv": {
            "method": "blacklist",
            "engine_name": "Blueliv",
            "category": "harmless",
            "result": "clean"
        },
        "Certego": {
            "method": "blacklist",
            "engine_name": "Certego",
            "category": "harmless",
            "result": "clean"
        },
        "Chong Lua Dao": {
            "method": "blacklist",
            "engine_name": "Chong Lua Dao",
            "category": "harmless",
            "result": "clean"
        },
        "CINS Army": {
            "method": "blacklist",
            "engine_name": "CINS Army",
            "category": "harmless",
            "result": "clean"
        },
        "Cluster25": {
            "method": "blacklist",
            "engine_name": "Cluster25",
            "category": "undetected",
            "result": "unrated"
        },
        "CRDF": {
            "method": "blacklist",
            "engine_name": "CRDF",
            "category": "malicious",
            "result": "malicious"
        },
        "CSIS Security Group": {
            "method": "blacklist",
            "engine_name": "CSIS Security Group",
            "category": "undetected",
            "result": "unrated"
        },
        "Snort IP sample list": {
            "method": "blacklist",
            "engine_name": "Snort IP sample list",
            "category": "undetected",
            "result": "unrated"
        },
        "CMC Threat Intelligence": {
            "method": "blacklist",
            "engine_name": "CMC Threat Intelligence",
            "category": "harmless",
            "result": "clean"
        },
        "CTX AI": {
            "method": "blacklist",
            "engine_name": "CTX AI",
            "category": "harmless",
            "result": "clean"
        },
        "Cyan": {
            "method": "blacklist",
            "engine_name": "Cyan",
            "category": "undetected",
            "result": "unrated"
        },
        "Cyble": {
            "method": "blacklist",
            "engine_name": "Cyble",
            "category": "harmless",
            "result": "clean"
        },
        "CyRadar": {
            "method": "blacklist",
            "engine_name": "CyRadar",
            "category": "harmless",
            "result": "clean"
        },
        "DNS8": {
            "method": "blacklist",
            "engine_name": "DNS8",
            "category": "undetected",
            "result": "unrated"
        },
        "Dr.Web": {
            "method": "blacklist",
            "engine_name": "Dr.Web",
            "category": "harmless",
            "result": "clean"
        },
        "Ermes": {
            "method": "blacklist",
            "engine_name": "Ermes",
            "category": "undetected",
            "result": "unrated"
        },
        "ESET": {
            "method": "blacklist",
            "engine_name": "ESET",
            "category": "harmless",
            "result": "clean"
        },
        "ESTsecurity": {
            "method": "blacklist",
            "engine_name": "ESTsecurity",
            "category": "harmless",
            "result": "clean"
        },
        "EmergingThreats": {
            "method": "blacklist",
            "engine_name": "EmergingThreats",
            "category": "harmless",
            "result": "clean"
        },
        "Emsisoft": {
            "method": "blacklist",
            "engine_name": "Emsisoft",
            "category": "malicious",
            "result": "phishing"
        },
        "Forcepoint ThreatSeeker": {
            "method": "blacklist",
            "engine_name": "Forcepoint ThreatSeeker",
            "category": "harmless",
            "result": "clean"
        },
        "Fortinet": {
            "method": "blacklist",
            "engine_name": "Fortinet",
            "category": "malicious",
            "result": "phishing"
        },
        "G-Data": {
            "method": "blacklist",
            "engine_name": "G-Data",
            "category": "harmless",
            "result": "clean"
        },
        "GCP Abuse Intelligence": {
            "method": "blacklist",
            "engine_name": "GCP Abuse Intelligence",
            "category": "undetected",
            "result": "unrated"
        },
        "Google Safebrowsing": {
            "method": "blacklist",
            "engine_name": "Google Safebrowsing",
            "category": "harmless",
            "result": "clean"
        },
        "GreenSnow": {
            "method": "blacklist",
            "engine_name": "GreenSnow",
            "category": "harmless",
            "result": "clean"
        },
        "GreyNoise": {
            "method": "blacklist",
            "engine_name": "GreyNoise",
            "category": "undetected",
            "result": "unrated"
        },
        "Gridinsoft": {
            "method": "blacklist",
            "engine_name": "Gridinsoft",
            "category": "undetected",
            "result": "unrated"
        },
        "Guardpot": {
            "method": "blacklist",
            "engine_name": "Guardpot",
            "category": "undetected",
            "result": "unrated"
        },
        "Heimdal Security": {
            "method": "blacklist",
            "engine_name": "Heimdal Security",
            "category": "harmless",
            "result": "clean"
        },
        "Hunt.io Intelligence": {
            "method": "blacklist",
            "engine_name": "Hunt.io Intelligence",
            "category": "undetected",
            "result": "unrated"
        },
        "IPsum": {
            "method": "blacklist",
            "engine_name": "IPsum",
            "category": "harmless",
            "result": "clean"
        },
        "Juniper Networks": {
            "method": "blacklist",
            "engine_name": "Juniper Networks",
            "category": "harmless",
            "result": "clean"
        },
        "Kaspersky": {
            "method": "blacklist",
            "engine_name": "Kaspersky",
            "category": "undetected",
            "result": "unrated"
        },
        "LevelBlue": {
            "method": "blacklist",
            "engine_name": "LevelBlue",
            "category": "harmless",
            "result": "clean"
        },
        "Lionic": {
            "method": "blacklist",
            "engine_name": "Lionic",
            "category": "harmless",
            "result": "clean"
        },
        "Lumu": {
            "method": "blacklist",
            "engine_name": "Lumu",
            "category": "undetected",
            "result": "unrated"
        },
        "MalwarePatrol": {
            "method": "blacklist",
            "engine_name": "MalwarePatrol",
            "category": "harmless",
            "result": "clean"
        },
        "MalwareURL": {
            "method": "blacklist",
            "engine_name": "MalwareURL",
            "category": "undetected",
            "result": "unrated"
        },
        "Malwared": {
            "method": "blacklist",
            "engine_name": "Malwared",
            "category": "harmless",
            "result": "clean"
        },
        "Mimecast": {
            "method": "blacklist",
            "engine_name": "Mimecast",
            "category": "undetected",
            "result": "unrated"
        },
        "Netcraft": {
            "method": "blacklist",
            "engine_name": "Netcraft",
            "category": "malicious",
            "result": "malicious"
        },
        "OpenPhish": {
            "method": "blacklist",
            "engine_name": "OpenPhish",
            "category": "harmless",
            "result": "clean"
        },
        "Phishing Database": {
            "method": "blacklist",
            "engine_name": "Phishing Database",
            "category": "harmless",
            "result": "clean"
        },
        "PhishFort": {
            "method": "blacklist",
            "engine_name": "PhishFort",
            "category": "undetected",
            "result": "unrated"
        },
        "PhishLabs": {
            "method": "blacklist",
            "engine_name": "PhishLabs",
            "category": "undetected",
            "result": "unrated"
        },
        "Phishtank": {
            "method": "blacklist",
            "engine_name": "Phishtank",
            "category": "harmless",
            "result": "clean"
        },
        "PREBYTES": {
            "method": "blacklist",
            "engine_name": "PREBYTES",
            "category": "harmless",
            "result": "clean"
        },
        "PrecisionSec": {
            "method": "blacklist",
            "engine_name": "PrecisionSec",
            "category": "undetected",
            "result": "unrated"
        },
        "Quick Heal": {
            "method": "blacklist",
            "engine_name": "Quick Heal",
            "category": "harmless",
            "result": "clean"
        },
        "Quttera": {
            "method": "blacklist",
            "engine_name": "Quttera",
            "category": "harmless",
            "result": "clean"
        },
        "SafeToOpen": {
            "method": "blacklist",
            "engine_name": "SafeToOpen",
            "category": "undetected",
            "result": "unrated"
        },
        "Sansec eComscan": {
            "method": "blacklist",
            "engine_name": "Sansec eComscan",
            "category": "undetected",
            "result": "unrated"
        },
        "Scantitan": {
            "method": "blacklist",
            "engine_name": "Scantitan",
            "category": "harmless",
            "result": "clean"
        },
        "SCUMWARE.org": {
            "method": "blacklist",
            "engine_name": "SCUMWARE.org",
            "category": "harmless",
            "result": "clean"
        },
        "Seclookup": {
            "method": "blacklist",
            "engine_name": "Seclookup",
            "category": "harmless",
            "result": "clean"
        },
        "SecureBrain": {
            "method": "blacklist",
            "engine_name": "SecureBrain",
            "category": "undetected",
            "result": "unrated"
        },
        "SOCRadar": {
            "method": "blacklist",
            "engine_name": "SOCRadar",
            "category": "undetected",
            "result": "unrated"
        },
        "Sophos": {
            "method": "blacklist",
            "engine_name": "Sophos",
            "category": "harmless",
            "result": "clean"
        },
        "StopForumSpam": {
            "method": "blacklist",
            "engine_name": "StopForumSpam",
            "category": "harmless",
            "result": "clean"
        },
        "Sucuri SiteCheck": {
            "method": "blacklist",
            "engine_name": "Sucuri SiteCheck",
            "category": "harmless",
            "result": "clean"
        },
        "ThreatHive": {
            "method": "blacklist",
            "engine_name": "ThreatHive",
            "category": "harmless",
            "result": "clean"
        },
        "URLhaus": {
            "method": "blacklist",
            "engine_name": "URLhaus",
            "category": "harmless",
            "result": "clean"
        },
        "URLQuery": {
            "method": "blacklist",
            "engine_name": "URLQuery",
            "category": "undetected",
            "result": "unrated"
        },
        "Viettel Threat Intelligence": {
            "method": "blacklist",
            "engine_name": "Viettel Threat Intelligence",
            "category": "harmless",
            "result": "clean"
        },
        "VIPRE": {
            "method": "blacklist",
            "engine_name": "VIPRE",
            "category": "undetected",
            "result": "unrated"
        },
        "VX Vault": {
            "method": "blacklist",
            "engine_name": "VX Vault",
            "category": "harmless",
            "result": "clean"
        },
        "ViriBack": {
            "method": "blacklist",
            "engine_name": "ViriBack",
            "category": "harmless",
            "result": "clean"
        },
        "Webroot": {
            "method": "blacklist",
            "engine_name": "Webroot",
            "category": "malicious",
            "result": "malicious"
        },
        "Yandex Safebrowsing": {
            "method": "blacklist",
            "engine_name": "Yandex Safebrowsing",
            "category": "harmless",
            "result": "clean"
        },
        "ZeroCERT": {
            "method": "blacklist",
            "engine_name": "ZeroCERT",
            "category": "harmless",
            "result": "clean"
        },
        "desenmascara.me": {
            "method": "blacklist",
            "engine_name": "desenmascara.me",
            "category": "harmless",
            "result": "clean"
        },
        "Xcitium Verdict Cloud": {
            "method": "blacklist",
            "engine_name": "Xcitium Verdict Cloud",
            "category": "harmless",
            "result": "clean"
        },
        "ZeroFox": {
            "method": "blacklist",
            "engine_name": "ZeroFox",
            "category": "undetected",
            "result": "unrated"
        }
    },
    "last_modification_date": 1782561435,
    "tags": [],
    "last_https_certificate_date": 1782548051,
    "last_update_date": 1773100800,
    "last_analysis_date": 1782547508,
    "reputation": 0,
    "last_dns_records": [
        {
            "type": "NS",
            "ttl": 21600,
            "value": "armando.ns.cloudflare.com"
        },
        {
            "type": "A",
            "ttl": 300,
            "value": "104.21.69.188"
        },
        {
            "type": "A",
            "ttl": 300,
            "value": "172.67.212.49"
        },
        {
            "type": "SOA",
            "ttl": 1800,
            "value": "armando.ns.cloudflare.com",
            "rname": "dns.cloudflare.com",
            "serial": 2407314095,
            "refresh": 10000,
            "retry": 2400,
            "expire": 604800,
            "minimum": 1800
        },
        {
            "type": "NS",
            "ttl": 21600,
            "value": "evelyn.ns.cloudflare.com"
        }
    ],
    "last_analysis_stats": {
        "malicious": 6,
        "suspicious": 0,
        "undetected": 33,
        "harmless": 52,
        "timeout": 0
    },
    "last_dns_records_date": 1782548051,
    "rdap": {
        "handle": "3075495339_DOMAIN_COM-VRSN",
        "ldh_name": "127052.com",
        "events": [
            {
                "event_action": "registration",
                "event_date": "2026-03-09T12:36:17Z",
                "event_actor": "",
                "links": []
            },
            {
                "event_action": "expiration",
                "event_date": "2027-03-08T15:00:00Z",
                "event_actor": "",
                "links": []
            },
            {
                "event_action": "registrar expiration",
                "event_date": "2027-03-08T15:00:00Z",
                "event_actor": "",
                "links": []
            },
            {
                "event_action": "last changed",
                "event_date": "2026-06-13T01:26:26Z",
                "event_actor": "",
                "links": []
            },
            {
                "event_action": "last update of RDAP database",
                "event_date": "2026-06-27T08:14:11Z",
                "event_actor": "",
                "links": []
            }
        ],
        "links": [
            {
                "href": "https://rdap.gmo-onamae.com/rdap/v1/domain/127052.com",
                "rel": "self",
                "type": "application/rdap+json",
                "value": "https://rdap.gmo-onamae.com/rdap/v1/domain/127052.com",
                "title": "",
                "media": "",
                "href_lang": []
            }
        ],
        "notices": [
            {
                "title": "Terms of Use",
                "description": [
                    "Please query the RDAP service of the Registrar of Record identified in this output for information on how to contact the Registrar, Registrant, Admin, or Tech contact of the queried domain name.",
                    "",
                    "This RDAP service is provided by GMO Internet and only contains information pertaining to Internet domain names we have registered for our customers.",
                    "GMO Internet does not guarantee the accuracy of this data.",
                    "",
                    "By using this service you are agreeing;",
                    "",
                    "(1) only to use the data for lawful purposes.",
                    "(2) not to use any information presented here for any purpose other than determining ownership of domain names.",
                    "..."
                ],
                "links": [
                    {
                        "href": "https://rdap.gmo-onamae.com/tos",
                        "rel": "terms-of-service",
                        "type": "text/html",
                        "value": "https://rdap.gmo-onamae.com/rdap/v1/domain/127052.com",
                        "title": "",
                        "media": "",
                        "href_lang": []
                    }
                ],
                "type": ""
            },
            {
                "title": "Status Codes",
                "description": [
                    "For more information on domain status codes, please visit https://icann.org/epp"
                ],
                "links": [
                    {
                        "href": "https://icann.org/epp",
                        "rel": "glossary",
                        "type": "text/html",
                        "value": "https://rdap.gmo-onamae.com/rdap/v1/domain/127052.com",
                        "title": "",
                        "media": "",
                        "href_lang": []
                    }
                ],
                "type": ""
            },
            {
                "title": "RDDS Inaccuracy Complaint Form",
                "description": [
                    "URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"
                ],
                "links": [
                    {
                        "href": "https://icann.org/wicf",
                        "rel": "help",
                        "type": "text/html",
                        "value": "https://rdap.gmo-onamae.com/rdap/v1/domain/127052.com",
                        "title": "",
                        "media": "",
                        "href_lang": []
                    }
                ],
                "type": ""
            }
        ],
        "nameservers": [
            {
                "ldh_name": "armando.ns.cloudflare.com",
                "object_class_name": "nameserver",
                "handle": "",
                "unicode_name": "",
                "events": [],
                "links": [],
                "notices": [],
                "status": [],
                "lang": "",
                "port43": "",
                "entities": [],
                "remarks": []
            },
            {
                "ldh_name": "evelyn.ns.cloudflare.com",
                "object_class_name": "nameserver",
                "handle": "",
                "unicode_name": "",
                "events": [],
                "links": [],
                "notices": [],
                "status": [],
                "lang": "",
                "port43": "",
                "entities": [],
                "remarks": []
            }
        ],
        "rdap_conformance": [
            "rdap_level_0",
            "redacted",
            "icann_rdap_technical_implementation_guide_1",
            "icann_rdap_response_profile_1"
        ],
        "entities": [
            {
                "object_class_name": "entity",
                "handle": "49",
                "vcard_array": [
                    {
                        "name": "version",
                        "type": "text",
                        "values": [
                            "4.0"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "fn",
                        "type": "text",
                        "values": [
                            "GMO Internet Group, Inc. d/b/a Onamae.com"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "adr",
                        "parameters": {
                            "cc": [
                                "JP"
                            ]
                        },
                        "type": "text",
                        "values": [
                            "",
                            "",
                            "26-1 Sakuragaokacho",
                            "Shibuya-ku",
                            "Tokyo",
                            "150-8512",
                            ""
                        ]
                    },
                    {
                        "name": "email",
                        "type": "text",
                        "values": [
                            "onamae@internet.gmo"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "tel",
                        "parameters": {
                            "type": [
                                "voice"
                            ]
                        },
                        "type": "uri",
                        "values": [
                            "tel:+81.357287900"
                        ]
                    }
                ],
                "roles": [
                    "registrar"
                ],
                "public_ids": [
                    {
                        "type": "IANA Registrar ID",
                        "identifier": "49"
                    }
                ],
                "entities": [
                    {
                        "object_class_name": "entity",
                        "vcard_array": [
                            {
                                "name": "version",
                                "type": "text",
                                "values": [
                                    "4.0"
                                ],
                                "parameters": []
                            },
                            {
                                "name": "fn",
                                "type": "text",
                                "values": [
                                    "Abuse Contact"
                                ],
                                "parameters": []
                            },
                            {
                                "name": "email",
                                "type": "text",
                                "values": [
                                    "abuse@internet.gmo"
                                ],
                                "parameters": []
                            },
                            {
                                "name": "tel",
                                "parameters": {
                                    "type": [
                                        "voice"
                                    ]
                                },
                                "type": "uri",
                                "values": [
                                    "tel:+81.337709199"
                                ]
                            }
                        ],
                        "roles": [
                            "abuse"
                        ],
                        "handle": "",
                        "public_ids": [],
                        "entities": [],
                        "remarks": [],
                        "links": [],
                        "events": [],
                        "as_event_actor": [],
                        "status": [],
                        "port43": "",
                        "networks": [],
                        "autnums": [],
                        "url": "",
                        "lang": "",
                        "rdap_conformance": []
                    }
                ],
                "links": [
                    {
                        "href": "https://internet.gmo/",
                        "rel": "about",
                        "type": "application/rdap+json",
                        "value": "https://rdap.gmo-onamae.com/rdap/v1/",
                        "title": "",
                        "media": "",
                        "href_lang": []
                    }
                ],
                "remarks": [],
                "events": [],
                "as_event_actor": [],
                "status": [],
                "port43": "",
                "networks": [],
                "autnums": [],
                "url": "",
                "lang": "",
                "rdap_conformance": []
            },
            {
                "object_class_name": "entity",
                "handle": "THIN-19CD487852E",
                "vcard_array": [
                    {
                        "name": "version",
                        "type": "text",
                        "values": [
                            "4.0"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "fn",
                        "type": "text",
                        "values": [
                            "Whois Privacy Protection Service by onamae.com"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "org",
                        "type": "text",
                        "values": [
                            "Whois Privacy Protection Service by onamae.com"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "adr",
                        "parameters": {
                            "cc": [
                                "JP"
                            ]
                        },
                        "type": "text",
                        "values": [
                            "",
                            "",
                            "26-1 Sakuragaoka-cho",
                            "Shibuya-ku",
                            "Tokyo",
                            "150-8512",
                            ""
                        ]
                    },
                    {
                        "name": "email",
                        "type": "text",
                        "values": [
                            "proxy@whoisprotectservice.com"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "tel",
                        "parameters": {
                            "type": [
                                "voice"
                            ]
                        },
                        "type": "uri",
                        "values": [
                            "tel:+81.354562560"
                        ]
                    }
                ],
                "roles": [
                    "registrant"
                ],
                "public_ids": [],
                "entities": [],
                "remarks": [],
                "links": [],
                "events": [],
                "as_event_actor": [],
                "status": [],
                "port43": "",
                "networks": [],
                "autnums": [],
                "url": "",
                "lang": "",
                "rdap_conformance": []
            },
            {
                "object_class_name": "entity",
                "handle": "THIN-19CD487853F",
                "vcard_array": [
                    {
                        "name": "version",
                        "type": "text",
                        "values": [
                            "4.0"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "fn",
                        "type": "text",
                        "values": [
                            "Whois Privacy Protection Service by onamae.com"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "org",
                        "type": "text",
                        "values": [
                            "Whois Privacy Protection Service by onamae.com"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "adr",
                        "parameters": {
                            "cc": [
                                "JP"
                            ]
                        },
                        "type": "text",
                        "values": [
                            "",
                            "",
                            "26-1 Sakuragaoka-cho",
                            "Shibuya-ku",
                            "Tokyo",
                            "150-8512",
                            ""
                        ]
                    },
                    {
                        "name": "email",
                        "type": "text",
                        "values": [
                            "proxy@whoisprotectservice.com"
                        ],
                        "parameters": []
                    },
                    {
                        "name": "tel",
                        "parameters": {
                            "type": [
                                "voice"
                            ]
                        },
                        "type": "uri",
                        "values": [
                            "tel:+81.354562560"
                        ]
                    }
                ],
                "roles": [
                    "technical"
                ],
                "public_ids": [],
                "entities": [],
                "remarks": [],
                "links": [],
                "events": [],
                "as_event_actor": [],
                "status": [],
                "port43": "",
                "networks": [],
                "autnums": [],
                "url": "",
                "lang": "",
                "rdap_conformance": []
            }
        ],
        "object_class_name": "domain",
        "status": [
            "client transfer prohibited"
        ],
        "secure_dns": {
            "delegation_signed": false,
            "zone_signed": false,
            "max_sig_life": 0,
            "ds_data": [],
            "key_data": []
        },
        "unicode_name": "",
        "punycode": "",
        "type": "",
        "port43": "",
        "switch_name": "",
        "public_ids": [],
        "lang": "",
        "remarks": [],
        "nask0_state": "",
        "variants": []
    },
    "categories": {
        "alphaMountain.ai": "Phishing (alphaMountain.ai)"
    },
    "whois": "Create date: 2026-03-09 00:00:00\nDomain name: 127052.com\nDomain registrar id: 49.0\nDomain registrar url: http://gmo.jp\nExpiry date: 2027-03-09 00:00:00\nQuery time: 2026-03-10 11:56:32\nUpdate date: 2026-03-10 00:00:00",
    "total_votes": {
        "harmless": 0,
        "malicious": 0
    },
    "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
    "creation_date": 1773014400,
    "whois_date": 1804550400,
    "popularity_ranks": []
}

How this compares to trusted websites

Trusted websites usually use a valid SSL certificate and keep it renewed.
They often have clear contact details, company information, privacy terms and refund policies.
They rarely appear on malware, phishing or abuse intelligence lists.
They use stable DNS, email authentication and predictable redirects.

Sources checked

VirusTotal Google Safe Browsing URLHaus OpenPhish PhishTank AlienVault OTX AbuseIPDB WHOIS DNS SSL Security headers Tranco

Technical safety checks

These checks explain the underlying signals behind the verdict. They are useful when you want to know whether a website has a stable domain history, a valid SSL certificate, normal DNS records and expected security configuration.

Domain information

Domain: 127052.com
Registrar: GMO Internet, Inc.
Domain age: 110 days
Created: 2026-03-09T21:36:17+00:00
WHOIS privacy: Yes

SSL details

Valid SSL: Yes
Issuer: Let's Encrypt
Subject: 127052.com
Expires: 2026-08-11T18:37:32+00:00
Days remaining: 44

HTTP checks

HTTPS available: Yes
HTTP available: No
Status code: 403
Final URL: https://www.127052.com/
Page title: Attention Required! | Cloudflare

DNS records

A records: 104.21.69.188, 172.67.212.49
MX records: No data available
Nameservers: evelyn.ns.cloudflare.com, armando.ns.cloudflare.com
SPF record
DMARC record

Security headers

Present: x-frame-options, referrer-policy
Missing: content-security-policy, strict-transport-security, x-content-type-options, permissions-policy

Blacklist overview

VirusTotal malicious: 6
Google Safe Browsing unsafe: No
URLHaus listed: No data available
OpenPhish listed: No
PhishTank listed: No data available

Technical analysis

IP address: 104.21.69.188
ASN / organization: AS13335 Cloudflare, Inc.
Hosting provider: AS13335 Cloudflare, Inc.
Location: San Francisco, California, US
High entropy score: 2.252
Suspicious TLD: No
Suspicious keywords: No data available

Redirect chain

https://127052.com/

127052.com safety FAQ

Is 127052.com a scam?

This automated report cannot make a legal accusation. It gives 127052.com a trust score of 29/100 based on the security and reputation signals available at scan time. Review the warnings, threat detections and technical checks above before using the site.

Why did 127052.com get this trust score?

The score is weighted from multiple signals, including threat-list matches, domain age, SSL status, redirects, DNS records, SPF/DMARC, security headers, suspicious keywords, IP reputation and popularity data.

Should I enter personal or payment information?

Do not enter payment details, passwords or personal information unless you can verify the website through an official source.

How often is this analysis updated?

The report is generated from stored scan data. When the automation script refreshes the domain, the page updates the score, threat intelligence, technical checks and popularity history.