Has this PHISH been taken down now?

Viruses and worms
1

Apparently it has: https://toolbar.netcraft.com/site_report?url=urun.in
Here it as flagged 23 times over the last 30 days: https://checkphish.ai/domain/urun.in
420 PHISHes on 104.18.49.245 which is Cloudflare abuse: https://www.shodan.io/host/104.18.49.245
See involved relations now from that last IP: https://checkphish.ai/ip/104.18.49.245
History blacklisted etc.: https://sitecheck.sucuri.net/results/urun.in (1 month ago)
Gone now: https://toolbar.netcraft.com/site_report?url=urun.in
See: https://www.virustotal.com/gui/ip-address/104.27.150.126/relations
PHISHING on suspicious ga domain: http://niaspamenas.ga/ seen once : https://checkphish.ai/domain/niaspamenas.ga

polonus

2

Another suspicious site, according to Forcepoint Threatseeker:
https://www.virustotal.com/gui/url/bfab8b979be1c81f5f574ac6bb1f6192b5fa3659bb208c7b99856bf3c46d5443/detection
for -https://sdraw.xyz/rnd_bkg.js → https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=cyN9fHcueHl6YA%3D%3D~enc
& https://www.virustotal.com/gui/url/ca32c72e7dcc77c4d557dc92d713f6729f4c4de866319719be98252b95a43f5c/details
Given as benign with a -10 risk factor for being hosted at ASN: 13335 CLOUDFLARENET - CloudFlare, Inc.,US
Steam community has a reputation of phishing: https://checkphish.ai/ip/104.18.49.245

pol