f18.fun

Caution 172.67.149.223 En ligne
Last checked 1 hour, 43 minutes ago · Jul 23, 2026 11:03 AM UTC · First scanned Jul 23, 2026
SSL valid Newly registered website WHOIS hidden
0 Risk Score

Caution

Domain Age 45 days
Headers Grade F security
SSL Certificate Valid certificate
VT Score 0/0 engines
Blacklists 0 flagged
Wayback 4 snapshots
Was this report inaccurate? Report this site
Server Location
Location
Toronto, Canada
IP
172.67.149.223
Hosting
Cloudflare, Inc.
Share: Twitter Facebook LinkedIn
Certified Report JSON CSV
Is this site safe?

This site appears to be safe based on our analysis.

The domain is 45 days old, which is relatively new. The domain owner uses WHOIS privacy protection, hiding their identity. The site has poor security headers (grade F). The domain name closely resembles **att, ups, dhl** — possible typosquatting/impersonation.

✗ Domain Age: 45 days old — relatively new ✗ WHOIS Privacy: Owner identity hidden • Registrar: DYNADOT LLC ✓ SSL Certificate: Valid, expires in 47 days ✓ VirusTotal: Clean — 0/91 engines ✗ Security Headers: Grade F ✗ Typosquatting: Resembles: att, ups, dhl
No email server (MX record)
+5
Missing SPF or DMARC
+5
Poor security headers
+5
1 time scanned on ScamSandbox

Correlated domains

These domains share multiple infrastructure or registration signals with this domain — a pattern common in coordinated scam networks.

856limanbet.com 2026-06-0…
Created same period Same NS
betpas-resmiiadres.co 2026-06-1…
Same Registrar Created same period
gt9.asia 2026-06-3…
Same IP Same Registrar
1000x-crypto.com 2026-01-0…
Same IP
a2.eljaripeomexicanrestaurant.com 2020-03-2…
Same IP
awumake.com 2026-05-0…
Same IP
busque.ca 2017-01-1…
Same IP
clipsmaster-09.ru
Same IP
cryptic.com.mx 2026-03-0…
Same IP
erp-api-displaybg.fn-soft.com 2023-10-1…
Same IP
805455.com 2026-07-1…
Same Registrar

Domain Timeline

Info Warning Critical 5 events
Jun 8, 2026 Today
Domain Created

Domain f18.fun was registered.

WHOIS
SSL Certificate Issued

SSL certificate issued by Google Trust Services.

SSL Check
Domain Updated

Domain f18.fun WHOIS record was updated.

WHOIS
SSL Certificate Expires

SSL certificate will expire.

SSL Check
Domain Expires

Domain f18.fun is set to expire.

WHOIS
Domain Age
45 days old - Relatively young
WHOIS Privacy
Registration details are hidden behind privacy protection
Email Security
No SPF or DMARC records found
Typosquatting
Possible typosquatting of a known domain
Contact Info
Contact information found
Privacy Policy
Privacy policy page found
Redirects
1 redirect
Security Headers
F Grade
Security Score 0%
referrer_policy Not set
x_frame_options Not set
x_xss_protection Not set
permissions_policy Not set
x_content_type_options Not set
content_security_policy Not set
strict_transport_security Not set
cross_origin_opener_policy Not set
Missing: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, Cross-Origin-Opener-Policy
Server: cloudflare
SSL Certificate
Issuer Google Trust Services
Valid From N/A
Valid Until N/A
Days Until Expiry 47 days
Subject Alternative Names
f18.fun *.f18.fun
Redirect Chain
https://f18.fun
Content Analysis

Trust Signals

✓ Contact ✗ Social ✓ Privacy Policy ✗ Terms

Threat Signals

— Login Form — Payment Form Urgency: 1 — Hidden Elements — Iframes

Urgency Phrases Found

winner
Domain Mindmap
f18.fun
DNS
A: 172.67.149.223A: 104.21.88.5 NS: kellen.ns.cloudflare.com.NS: poppy.ns.cloudflare.com.
Server
cloudflare CDN: Cloudflare
Technologies
None detected
Ports
80 (HTTP) 443 (HTTPS) 8080 (HTTP-alt) 8443 (HTTPS-alt)
Related
113 domains Cloudflare, Inc. Shared Hosting

Domain Relationships

Sources: HackerTarget Reverse IP · urlscan.io · ipapi.co

Cloudflare, Inc. ⚠ Shared Hosting
1000x-crypto.com 2026-06-27.sqllq.com 805455.com 856limanbet.com 8live.bet a2.eljaripeomexicanrestaurant.com a3.eljaripeomexicanrestaurant.com admin.play247.blue allegrolokalnie.pl api-staging.theassociationapp.com.au app-retroverse.aftercode.tn autodiscover.sketchposter.com.au awumake.com bayam88.xyz betpas-resmiiadres.co betterqa.co bulmergroup.com.au busque.ca clipsmaster-09.ru conwhats.app cpanel.lonasvinilforte.com.br cpanel.sketchposter.com.au cpcontacts.sketchposter.com.au cryptic.com.mx dazzling.bond dramshopliabilityattorney.com electricianbelfieldarea.com.au eljaripeomexicanrestaurant.com ericbrearley.com.au erp-api-displaybg.fn-soft.com erp.flyingweb.com.br evexx.app falify.app get.theassociationapp.com.au gt9.asia harrisburgrestore.org hatgiongcaynhap.store huizeherman.be icoonshop.com imobiliariamanaca.com.br jazzyspins5.bond johngribbinstrata.com.au jordan.thknj.com keepapps.shop limanbet936.com live.spherecloud.app lonasvinilforte.com.br luckychips.bet mail.schuman.adv.br mexicogob.com mindzne.com mistorra.click mlira.net moravecs.com.es msuhallticket.in n8n.theassociationapp.com.au nada-web.plam06281.workers.dev noahlev.org notice.info-eu3830.com nthosting.in orvilexa.com parimatchindonesia.club pecfort.com.br perfect10partnerships.blog phamily.boston play.bigstrike.win podcastdatenbank.com r2assets.cc rakansafe.click revi-os.com revoke-ostium.com semanadeoferta.shop siap108.web.id singobet.app sketchposter.com.au smarttelecom.az spherecloud.app status.evexx.app stevaert.be sylverlight.net tamraght.org theassociationapp.com.au thiendinh3.tv tryaluxmediasolutions.com tube.guolingoogle.workers.dev unibee.com.au universalmusicbank.com usdt-ylc.com vetcare.com.ar vpgame8.site webmail.sketchposter.com.au www.88838n.cc www.bulmergroup.com.au www.clubyeronga.com.au www.cncablemanufacture.com www.groupfit.app www.huizeherman.be www.imobiliariamanaca.com.br www.johngribbinstrata.com.au www.michaelmacfar.com www.novellcoffee.co.uk www.perfect10partnerships.blog www.phamily.boston www.shot138.org www.sketchposter.com.au www.swayyem.com www.teelek88.bet www.trendnexuscrew.com www.unibee.com.au www.updatelogicroom.com www.vetcare.com.ar xmr.best zenoriveno.world
WHOIS Information
Registrar DYNADOT LLC
Created 2026-06-08T08:37:53.976000
Expires 2027-06-08T08:37:53.976000
Updated 2026-06-13T08:39:09.349000
Registrant Country US
Name Servers
kellen.ns.cloudflare.com poppy.ns.cloudflare.com
Port Scan
80 HTTP
443 HTTPS
8080 HTTP-alt
8443 HTTPS-a…

External Trust Scores

Average: 50.5%
1/100
Gridinsoft
1/100
Clean
PhishTank
Clean

Also check on:

2 sites checked. Scores are fetched directly from each platform.

Community Intelligence

Mixed

5 mentions found across community sources (1 positive, 4 neutral).

1 positive 4 neutral 0 negative

Noah Wyle's intro at Macworld is better than Andy Samberg at f8. Funnily enough I'm watching the movie right now - Mike Markkula just showed up and Steve just named himself employee #0.

> Working in a family business is protected. Even working as a 13-16 year old in some jobs is allowed as long as it’s outside of school hours. We allow for a gradual introduction into working for …

"if they scrape and present their content" - and you don't think this is relevant to Bard? It's less them 'punishing' Canada, and more being uncertain how these insane l…

Yep I love it for FT8. Fun little radio to play around with. If you want any more info my email is in my bio, feel free to email me.

Show HN: Remembering the year you were 18

Sources checked: Hacker News PhishTank
Threat Intelligence Sources
VirusTotal Clean
0/0 engines
View on VirusTotal →
AbuseIPDB Clean
0% confidence
PhishDestroy Low Risk
0 risk score
Wayback Machine
First Seen N/A
Last Seen N/A
Total Snapshots 4
Google Index & SEO
Robots.txt Present
Sitemap Present
Index Score N/A

Community Reports

No community reports yet for f18.fun. Be the first to share your experience.

Other Caution Websites Recently Analyzed

These domains received the same Caution verdict from ScamSandbox. Check them before visiting.

Screenshot of melbet.plus
melbet.plus
Caution 20/100
Screenshot of foazex.com
foazex.com
Caution 35/100
Screenshot of certfallback.com
certfallback.com
Caution 30/100
Screenshot of x.ug.to
x.ug.to
Caution 15/100
Screenshot of 94.140.14.33
94.140.14.33
Caution 15/100
Screenshot of edgecdn.io
edgecdn.io
Caution 15/100

What is f18.fun?

f18.fun is a website that was analyzed by ScamSandbox on July 23, 2026. Based on our automated analysis across 20 security sources, the domain shows some risk signals that warrant caution before entering personal information or making purchases.

The domain was registered approximately 45 days ago through DYNADOT LLC and the registrant is located in US. A domain age under 90 days is a significant risk indicator, as fraudulent websites are typically created shortly before launching their scam campaigns. The owner's registration details are hidden behind a WHOIS privacy service, which prevents public identification of who operates the site.

ScamSandbox cross-referenced f18.fun against the VirusTotal database, which aggregates results from multiple security vendors. No security vendor in the VirusTotal database has flagged this domain as malicious or suspicious, which is a positive trust indicator.

The site uses a valid SSL/TLS certificate issued by Google Trust Services . An SSL certificate encrypts data between the visitor and the server, but it does not guarantee the site is legitimate — scammers routinely obtain free SSL certificates for fraudulent sites.

f18.fun is hosted by Cloudflare, Inc. at IP address 172.67.149.223 . The server uses shared hosting, meaning multiple websites share the same IP address — a configuration common among both budget legitimate sites and disposable scam domains. The site received an F grade for HTTP security headers, the lowest possible rating. This means the site has not implemented any of the standard browser security protections — including Content-Security-Policy, X-Frame-Options, HSTS, and Referrer-Policy. These missing headers leave visitors more exposed to clickjacking, cross-site scripting (XSS), and data leakage attacks.

The overall risk score assigned to f18.fun by ScamSandbox is 15/100 (where 100 is the highest risk). This score is calculated by weighing signals from blacklist detections, domain age, WHOIS data, SSL certificate validity, HTTP security headers, content analysis, and community reports.

Security Provider Verdicts for f18.fun

The table below shows the verdict from each major security provider checked during this scan. A Flagged result means the provider detected malicious, phishing, or abusive activity. Clean means no threat was detected. Not checked means the source was unavailable or not queried during this scan.

VirusTotal Aggregated results from 80+ antivirus engines
Clean
Google Safe Browsing Google's real-time phishing and malware database
Not checked
PhishTank Community-verified phishing URL database
Not checked
URLhaus Malware distribution URL tracking by abuse.ch
Not checked
AbuseIPDB IP address abuse reports and blacklist
Clean
Community Reports User-submitted scam reports on ScamSandbox
No reports
Web Intelligence Reddit, forums, and scam-reporting platforms
No negative mentions

Tips for visiting f18.fun safely

f18.fun shows some caution signals. While it may be legitimate, here are some best practices before proceeding:

  • Verify the site's identity — check for a company registration number, physical address, and verifiable contact details.
  • Use secure payment methods — credit cards and PayPal provide fraud protection that debit cards and bank transfers do not.
  • Keep evidence of transactions — save screenshots of product listings, order confirmations, and all communication.
  • Look for customer reviews on independent platforms before making significant purchases.

Frequently Asked Questions about f18.fun

f18.fun received a Caution verdict from ScamSandbox, with a risk score of 15/100. This means the site is not definitively dangerous but shows some characteristics that warrant extra care before entering passwords, payment details, or personal data.

ScamSandbox assigned f18.fun the verdict "Caution" based on a weighted combination of signals including:

  • Young domain age (45 days), which correlates with higher fraud risk
  • Hidden WHOIS registration details — the owner's identity is concealed
  • HTTP security headers grade F — none of the standard browser protections are implemented
  • Urgency manipulation tactics detected in page content
  • Shared hosting environment — the server IP is shared with 113 other domains
  • Overall risk score of 15/100 after weighing all signals

Note: ScamSandbox uses automated analysis — while these signals indicate elevated risk, they do not constitute definitive proof of fraud. Always verify independently before drawing final conclusions.

ScamSandbox performs a multi-layered automated analysis of f18.fun in real time, querying 20 independent security sources simultaneously. The process includes:

  • Blacklist checks — VirusTotal, Google Safe Browsing, PhishTank, URLhaus, and AbuseIPDB
  • WHOIS and domain intelligence — registration date, registrar, registrant country, privacy status
  • SSL/TLS analysis — certificate validity, issuer, and expiration
  • DNS record analysis — A, MX, NS records, SPF and DMARC email security configuration
  • HTTP security headers — Content-Security-Policy, X-Frame-Options, HSTS, and other browser security directives
  • Content analysis — detection of login forms, payment forms, urgency language, and suspicious content patterns
  • Community intelligence — mentions on Reddit, scam-reporting forums, and user-submitted reports
  • Infrastructure analysis — hosting provider, IP geolocation, reverse IP lookup, and typosquatting detection
All results are combined into a single risk score from 0 (no risk) to 100 (maximum risk).

Based on public WHOIS records, f18.fun was registered on 2026-06-08T08:37:53.976000 through DYNADOT LLC. The registrant's identity is protected by a WHOIS privacy service, which means the true owner's name, address, and contact details are not publicly available. While WHOIS privacy is also used by legitimate site owners who want to avoid spam, it is also commonly used by fraudulent operators to hide their identity.

The site's server is operated by Cloudflare, Inc. . The hosting provider is separate from the domain registrar and does not necessarily identify the person who controls the website.

Yes. If you have personally experienced fraud, phishing, or deceptive practices from f18.fun, you can submit a community report directly on this page using the "Submit a Report" button in the Community Reports section above. Your report helps other users make informed decisions and contributes to our threat intelligence database.

You can also report the site to official authorities:

  • Google Safe Browsing — report phishing at safebrowsing.google.com/safebrowsing/report_phish/
  • PhishTank — submit phishing URLs at phishtank.org
  • FTC (US) — file a complaint at reportfraud.ftc.gov
  • Action Fraud (UK) — report at actionfraud.police.uk
  • DGCCRF (France) — report at signal.conso.gouv.fr