# PhishDestroy domain threat record: adapostul-de-caini-corabia.ro Content language: English Canonical HTML report: https://phishdestroy.io/domain/adapostul-de-caini-corabia.ro/ Machine-readable companion: https://phishdestroy.io/domain/adapostul-de-caini-corabia.ro/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-20 09:50:12 UTC - Last availability or vendor check: 2026-10-22 10:00:23 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 13/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.248.198.0 - Registrar in stored WHOIS data: TES Euro Media SRL - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-01-22 23:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a158b6-17e4-7758-b1b1-883e17155eff/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/adapostul-de-caini-corabia.ro - Certificate Transparency search: https://crt.sh/?q=%25.adapostul-de-caini-corabia.ro - Web Archive lookup: https://web.archive.org/web/*/https://adapostul-de-caini-corabia.ro/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed adapostul-de-caini-corabia.ro as a suspicious domain on 2026-10-20. No page title was recorded, so the site’s claimed purpose is unknown. The listing reflects observed indicators rather than a confirmed malicious activity. How the scam works The presence of detections and blocklist mentions indicates the domain could be used for typical online fraud such as phishing, credential harvesting, or malicious redirects, but no specific mechanism was observed on the page. Without a concrete classification, the risk remains generic and depends on how the site is leveraged by an attacker. Visitors should treat any request for personal data or login credentials with suspicion. Evidence VirusTotal scanned the domain on 2026-10-17 and reported 13 detections from 92 engines, including alerts from AlphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Fortinet, G-Data, and Kaspersky. Google Safe Browsing checked on 2026-10-20 did not flag the domain. No external blocklists listed the domain as of the same date, while PhishDestroy’s internal blocklist marked it as suspicious. OTX recorded four pulses referencing the domain on 2026-10-20. Infrastructure The domain was registered on 2026-01-23 through TES Euro Media SRL. A recorded IP address for the site is 185.248.198.0. The TLS certificate observed on 2026-10-20 was issued by Let’s Encrypt / YE1. These details describe the registration and hosting footprint without implying intent. What to do If you visited the site, verify that no credentials, personal data, or authentication tokens were entered; change any passwords that may have been used. Monitor accounts for unexpected activity and report suspicious behavior to your security team. Defenders should add a rule to block traffic to the exact domain and recorded IP, and review logs for any connections originating from internal users. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a158b6-17e4-7758-b1b1-883e17155eff/ VirusTotal report: https://www.virustotal.com/gui/domain/adapostul-de-caini-corabia.ro Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=adapostul-de-caini-corabia.ro Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-20 10:21:09 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a158b6-17e4-7758-b1b1-883e17155eff.png Captured: 2026-10-20 09:50:12 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a158b6-17e4-7758-b1b1-883e17155eff.png Captured: 2026-10-20 09:50:12 UTC Source report: https://urlscan.io/result/01a158b6-17e4-7758-b1b1-883e17155eff/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/6136c74b-0e16-440a-a9e8-e7a3fb191a5c.png Captured: 2026-10-20 10:20:47 UTC Source report: https://radar.cloudflare.com/scan/6136c74b-0e16-440a-a9e8-e7a3fb191a5c SHA-256: afe85ca5c607804ca4a8874906886787afd4a41fedc138b5a65b6792bbb7879c - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a158be-9762-7388-890e-104289912f65.png Captured: 2026-10-20 09:57:40 UTC Source report: https://urlscan.io/result/01a158be-9762-7388-890e-104289912f65/ SHA-256: 0ce7ac9d3db637b8cc28d74db3a55f07b6c576d8cd090f3b55fc950a2a08aa11 - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a158be-cc0c-76d9-b753-edc43790cc2a.png Captured: 2026-10-20 09:57:55 UTC Source report: https://urlscan.io/result/01a158be-cc0c-76d9-b753-edc43790cc2a/ SHA-256: 0ce7ac9d3db637b8cc28d74db3a55f07b6c576d8cd090f3b55fc950a2a08aa11 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T16:43:14Z", "uuid": "01a158b6-17e4-7758-b1b1-883e17155eff", "scanned_at": "2026-10-20T09:48:20Z", "final_url": "https://adapostul-de-caini-corabia.ro/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://adapostul-de-caini-corabia.ro/", "from": "http://adapostul-de-caini-corabia.ro/", "status": 307 } ], "ip": "185.248.198.0", "ptr": "web8.gazduire.net", "domains": [ "maps.googleapis.com", "fonts.gstatic.com", "fonts.googleapis.com", "api.livechatinc.com", "maps.gstatic.com", "cdn.livechatinc.com", "www.google.com", "maps.google.com", "wordpress.livechat.com" ], "ips": [ "23.215.13.89", "172.217.118.4", "142.251.14.120", "2.21.239.210", "142.251.151.119", "142.251.14.139", "142.251.13.94", "23.215.13.90", "142.251.20.95", "185.248.198.0" ], "asns": [ "20940", "15169", "51295" ], "countries": [ "CZ", "US", "DE", "RO" ], "link_domains": [ "www.facebook.com", "cookieadmin.net" ], "social": [ "https://www.facebook.com/ADCorabiaOlt" ], "doc_hash": "887259bc47364114717843bd49c3cf9cdbbe2fecf85139773ee2195e1878f577", "script_hashes": [ "16780269e362021d705b44bc75b8f5bb3e44619427c64a972a8ac7f1fe3bb1fc", "8c7e27068a17d48fdde4ced6f2c805085692be743281eba7f1072a07be074b0d", "1f1782ba5b047babe71701cffa9a2e1b77ee5d8867a2274742c5df6cdc52c6ca", "c70f756327be2acdfa385041e9b110df6093d41ef375379e5b9a2a10b2a8411a", "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1", "5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9", "29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca", "ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0" ], "globals": [ "cookieadmin_policy", "days", "cookieadmin_allcookies", "cookieadmin_is_obj", "originalCookieDescriptor", "allowed_cookies", "cookieadmin_is_cookie", "cookieadmin_check_consent", "cookieadmin_restore_cookies", "cookieadmin_set_cookie", "cookieadmin_populate_preference", "cookieadmin_toggle_overlay", "cookieadmin_categorize_cookies", "cookieadmin_set_consent", "cookieadmin_save_consent_cookie", "cookieadmin_is_consent", "textConnect", "__text_connect", "jQuery", "WebFontConfig", "_tpt", "SR7", "wp", "swv", "wpcf7", "cookieadmin_pro_vars", "cookieadmin_pro_set_consent", "webpackChunkelementorFrontend", "elementorModules", "elementorFrontendConfig", "elementorFrontend", "__lc", "LiveChatWidget", "uidEvent", "bootstrap", "EvEmitter", "imagesLoaded", "js_porto_vars", "scrolltotop", "porto_init" ], "storage_keys": [ "wpEmojiSettingsSupports", "__test_storage_support__" ], "tls": { "san": [ "adapostul-de-caini-corabia.ro", "ftp.adapostul-de-caini-corabia.ro", "mail.adapostul-de-caini-corabia.ro", "pop.adapostul-de-caini-corabia.ro", "smtp.adapostul-de-caini-corabia.ro", "www.adapostul-de-caini-corabia.ro" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "adapostul-de-caini-corabia.ro", "protocol": "TLS 1.3", "valid_to": "2026-12-02T02:27:27Z", "valid_from": "2026-09-03T02:27:28Z" }, "domain_age_days": 1742, "apex_age_days": 1742, "tls_age_days": 47, "tls_valid_days": 89, "requests": 166, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 73, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T17:55:11Z", "uuid": "6136c74b-0e16-440a-a9e8-e7a3fb191a5c", "scanned_at": "2026-10-20T10:20:47Z", "final_url": "https://adapostul-de-caini-corabia.ro/", "status": 200, "history": [ { "url": "https://adapostul-de-caini-corabia.ro/", "status": 200 } ], "dom_hash": "d3b0c18fe3cb93650a6b55841b27f9b650d6678c40d65ec8784e8b2525172331", "doc_hash": "f71bf61d5a2b01adcc5da57f8cd8f10a0a345ffb99eea36ee736d8d4be20f36f", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "adapostul-de-caini-corabia.ro", "type": "A", "value": "185.248.198.0" } ], "dnssec_valid": false, "ip": "185.248.198.0", "whois": { "registrar": "TES Euro Media SRL", "created": "2026-01-23T00:00:00Z", "nameservers": [ "ns1.gazduire.net", "ns2.gazduire.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-20T18:05:28Z", "analysis_at": "2026-10-16T23:42:12Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 12, "suspicious": 1, "undetected": 34 }, "detections": { "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "human interests" }, "registrar": "TES Euro Media SRL", "first_seen": "2024-03-08T12:30:26Z", "dns": [ { "ttl": 300, "type": "A", "value": "185.248.198.0" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.adapostul-de-caini-corabia.ro", "value": "ns1.gazduire.net" }, { "ttl": 300, "type": "MX", "value": "mail.adapostul-de-caini-corabia.ro", "priority": 10 }, { "ttl": 300, "type": "NS", "value": "ns1.gazduire.net" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 a mx ip4:185.248.198.0 ~all" }, { "ttl": 300, "type": "NS", "value": "ns2.gazduire.net" } ], "dns_at": "2026-10-16T23:42:29Z", "jarm": "27d27d27d00027d00042d43d00041dba951fb796b4b956c9799ba19149e94a", "cert": { "san": [ "adapostul-de-caini-corabia.ro", "ftp.adapostul-de-caini-corabia.ro", "mail.adapostul-de-caini-corabia.ro", "pop.adapostul-de-caini-corabia.ro", "smtp.adapostul-de-caini-corabia.ro", "www.adapostul-de-caini-corabia.ro" ], "issuer": "Let's Encrypt / YE1", "serial": "5be892f58e18bbe0dd5e041d5ad5fce8c87", "sha256": "5cacad45149e6b878f6d2f4acfc25862e583cef3e9f85c2884322409cf515cf6", "subject": "adapostul-de-caini-corabia.ro", "valid_to": "2026-12-02T02:27:27Z", "valid_from": "2026-09-03T02:27:28Z" }, "whois": { "registrar": "TES Euro Media SRL", "status": [ "OK" ], "dnssec": "Inactive" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T12:27:33Z", "mail_config": { "mx": [ "mail.adapostul-de-caini-corabia.ro" ], "spf": "v=spf1 a mx ip4:185.248.198.0 ~all", "dkim": [ "x" ], "dkim_bits": 2048, "spf_lookups": 2 }, "caa_records": { "domain": "adapostul-de-caini-corabia.ro" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-20T09:53:12Z", "first": "2023-03-11T22:20:02Z", "changes": 3, "days_archived": 6, "scans_per_day": 0, "avg_page_bytes": 1082 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 80, 110, 143, 443, 587, 993, 995 ] }, "dns_server": { "ns": [ { "ip": "178.62.207.207", "host": "ns2.gazduire.net" }, { "ip": "185.248.199.9", "host": "ns1.gazduire.net" } ], "zone": "adapostul-de-caini-corabia.ro" }, "location": { "ip": "185.248.198.0", "asn": "51295", "org": "Pagini Europene SRL", "city": "Satu Nou", "country": "RO" }, "dns": { "A": [ "185.248.198.0" ], "MX": [ "{\"exchange\": \"mail.adapostul-de-caini-corabia.ro\", \"priority\": 10}" ], "NS": [ "ns1.gazduire.net", "ns2.gazduire.net" ], "SOA": "{\"nsname\": \"ns1.gazduire.net\", \"hostmaster\": \"hostmaster.adapostul-de-caini-corabia.ro\", \"serial\": 2026012303, \"refresh\": 3600, \"retry\": 3600, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 a mx ip4:185.248.198.0 ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "185.248.198.0", "family": 4 }, "whois": { "registrar": "TES Euro Media SRL", "created": "2026-01-23T00:00:00Z", "status": [ "OK" ], "nameservers": [ "ns1.gazduire.net", "ns2.gazduire.net" ] } } } ```