# PhishDestroy domain threat record: apartsbook.pl

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/apartsbook.pl/
Machine-readable companion: https://phishdestroy.io/domain/apartsbook.pl/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 20:43:15 UTC
- Last availability or vendor check: 2026-10-23 22:56:10 UTC
- Stored record updated: 2026-10-23 23:55:23 UTC
- VirusTotal detections in the stored snapshot: 8/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 69.10.56.216
- Registrar in stored WHOIS data: Realtime Register B.V.
- Registrar country in stored WHOIS data: NL
- Last stored HTTP status: 200
- Registration date (registry RDAP, apartsbook.pl): 2026-10-10 12:33:34 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1603b-5042-7461-9d9c-24b911ef9446/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/apartsbook.pl
- Certificate Transparency search: https://crt.sh/?q=%25.apartsbook.pl
- Web Archive lookup: https://web.archive.org/web/*/https://apartsbook.pl/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed apartsbook.pl as a suspicious domain. The domain was first seen by PhishDestroy on 2026-10-21. The recorded page title is “ApartsBook — Apartamenty i domki na wynajem”. An HTTP 200 response was observed on 2026-10-22.

How the scam works
The vendor detections that flagged the domain as phishing indicate it could be used to lure users into revealing credentials or personal data, but the captured page shows only a rental‑listing interface and no phishing form was observed.

Evidence
VirusTotal reported 6 malicious and 2 suspicious detections out of 92 engines on 2026-10-22 (8 total detections). Google Safe Browsing showed no flag on 2026-10-22. urlscan captured the site on 2026-10-21; its overall verdict was clean but its engine score marked it malicious with a score of 99. Spamhaus DBL listed the domain as spam on 2026-10-22, and OTX recorded five pulses referencing it on the same day. PhishDestroy’s internal blocklist also contains the domain, while external blocklists checked showed no entries.

Infrastructure
The domain was registered on 2026-10-10 through Realtime Register B.V. and resolves to IP 69.10.56.216, hosted by Interserver, Inc. in the United States (AS 19318). TLS is provided by Let’s Encrypt, valid from 2026-10-10 to 2027-01-08, and the authoritative nameservers are elle.ns.cloudflare.com and tadeo.ns.cloudflare.com.

What to do
Visitors should avoid entering any credentials or personal information on the site; if they have already done so, they should change affected passwords and monitor accounts for unusual activity. Organizations can add apartsbook.pl to web‑filtering and DNS blocklists and review logs for connections to the recorded IP address. Continue monitoring security feeds for any new indicators related to this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1603b-5042-7461-9d9c-24b911ef9446/
Cloudflare Radar report: https://radar.cloudflare.com/scan/dbe790e1-ec00-401d-9ffc-a60f22be2fe0
Stored capture screenshot: https://i.ibb.co/YBYFZJ3R/3fe23b866244.png
Cloudflare Radar screenshot (2026-10-21T20:43:44Z): https://screenshots.phishdestroy.io/cf/dbe790e1-ec00-401d-9ffc-a60f22be2fe0.png
URLScan screenshot (2026-10-12T15:30:46Z): https://screenshots.phishdestroy.io/us/01a130bc-c05f-74fd-8158-640d132c8aa5.png
URLScan capture report: https://urlscan.io/result/01a130bc-c05f-74fd-8158-640d132c8aa5/
URLScan screenshot (2026-10-21T20:43:50Z): https://screenshots.phishdestroy.io/us/01a16034-9338-736a-9a66-9aa5da9287d2.png
URLScan capture report: https://urlscan.io/result/01a16034-9338-736a-9a66-9aa5da9287d2/
URLScan screenshot (2026-10-21T20:47:12Z): https://screenshots.phishdestroy.io/us/01a16037-b3a1-724a-895a-64a7c4d78e73.png
URLScan capture report: https://urlscan.io/result/01a16037-b3a1-724a-895a-64a7c4d78e73/
VirusTotal report: https://www.virustotal.com/gui/domain/apartsbook.pl
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=apartsbook.pl
Archived copy: https://web.archive.org/web/20261021204409/https://apartsbook.pl/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 16:08:37 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/YBYFZJ3R/3fe23b866244.png
  Captured: 2026-10-21 20:51:59 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a1603b-5042-7461-9d9c-24b911ef9446.png
  Captured: 2026-10-21 20:51:59 UTC
  Source report: https://urlscan.io/result/01a1603b-5042-7461-9d9c-24b911ef9446/
- URLScan capture 2: https://urlscan.io/screenshots/01a1354d-6da7-711d-9749-841acc7e672c.png
  Captured: 2026-10-21 20:43:15 UTC
  Source report: https://urlscan.io/result/01a1603b-5042-7461-9d9c-24b911ef9446/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/dbe790e1-ec00-401d-9ffc-a60f22be2fe0.png
  Captured: 2026-10-21 20:43:44 UTC
  Source report: https://radar.cloudflare.com/scan/dbe790e1-ec00-401d-9ffc-a60f22be2fe0
  SHA-256: c934a2390d9c24ae88660974e0eda1d7fa20869ffe411faf277e57b1bbf4cfef
- URLScan · 2026-10-12: https://screenshots.phishdestroy.io/us/01a130bc-c05f-74fd-8158-640d132c8aa5.png
  Captured: 2026-10-12 15:30:46 UTC
  Source report: https://urlscan.io/result/01a130bc-c05f-74fd-8158-640d132c8aa5/
  SHA-256: a7a44fe1bc4dddd769a6d91a1139af04c6d34e9cf20ae50cafc25fad473ddb1d
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a16034-9338-736a-9a66-9aa5da9287d2.png
  Captured: 2026-10-21 20:43:50 UTC
  Source report: https://urlscan.io/result/01a16034-9338-736a-9a66-9aa5da9287d2/
  SHA-256: e8aca6c52e5c5389facc3c6d323a839aaea9a37d2f056fa4f008820e6056e6c8
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a16037-b3a1-724a-895a-64a7c4d78e73.png
  Captured: 2026-10-21 20:47:12 UTC
  Source report: https://urlscan.io/result/01a16037-b3a1-724a-895a-64a7c4d78e73/
  SHA-256: 85364651055c1f833726733830bf48035ee3bd4bd7af4f6b64b5dfb31d8456ba

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T21:13:54Z",
        "uuid": "01a1603b-5042-7461-9d9c-24b911ef9446",
        "scanned_at": "2026-10-21T20:51:09Z",
        "final_url": "https://apartsbook.pl/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://apartsbook.pl/",
                "from": "http://apartsbook.pl/",
                "status": 307
            }
        ],
        "ip": "69.10.56.216",
        "ptr": "vps3644239.trouble-free.net",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.13.94",
            "2a00:1450:4001:c1f::5f",
            "69.10.56.216"
        ],
        "asns": [
            "15169",
            "19318"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "66816509d417dec8c92011b6d7a1e43c690db4be65269cd402af2f6fbb22c711",
        "script_hashes": [
            "041bc91508d2144211cf81b845686375ada0a285174d32c91922c46dfded493a",
            "9b344de1b3878c43c43c906b4fe7fdd4e223b4224a00361d29ae76b40d2aadec"
        ],
        "tls": {
            "san": [
                "apartsbook.pl"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "apartsbook.pl",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-08T11:48:43Z",
            "valid_from": "2026-10-10T11:48:44Z"
        },
        "domain_age_days": 9,
        "apex_age_days": 9,
        "tls_age_days": 11,
        "tls_valid_days": 89,
        "requests": 15,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T20:44:05Z",
        "uuid": "dbe790e1-ec00-401d-9ffc-a60f22be2fe0",
        "scanned_at": "2026-10-21T20:43:44Z",
        "final_url": "https://apartsbook.pl/",
        "status": 200,
        "history": [
            {
                "url": "https://apartsbook.pl/",
                "status": 200
            }
        ],
        "dom_hash": "0c06f7a0d1fc5a12a6ba1d4729d344145678b373a968ba270bd4cf82e283c2d7",
        "doc_hash": "66816509d417dec8c92011b6d7a1e43c690db4be65269cd402af2f6fbb22c711",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "apartsbook.pl",
                "type": "A",
                "value": "69.10.56.216"
            }
        ],
        "dnssec_valid": false,
        "ip": "69.10.56.216",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Realtime Register B.V.",
            "created": "2026-10-10T14:33:34Z",
            "updated": "2026-10-10T14:39:52Z",
            "expires": "2027-10-10T14:33:34Z",
            "nameservers": [
                "elle.ns.cloudflare.com",
                "tadeo.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T16:06:43Z",
        "analysis_at": "2026-10-15T20:36:58Z",
        "stats": {
            "timeout": 0,
            "harmless": 49,
            "malicious": 6,
            "suspicious": 2,
            "undetected": 35
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "G-Data": "phishing",
            "Sophos": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "first_seen": "2026-10-10T14:13:35Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "elle.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "tadeo.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "69.10.56.216"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "elle.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-15T21:20:59Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "apartsbook.pl"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "5c7b9f838348533801859b9e720c1e709de",
            "sha256": "fb90a63f35414206281a19818828643d29923a085a10a870295eabd09afe3266",
            "subject": "apartsbook.pl",
            "valid_to": "2027-01-08T11:48:43Z",
            "valid_from": "2026-10-10T11:48:44Z"
        },
        "whois": {
            "dnssec": "Unsigned"
        },
        "rdap": {
            "events": {
                "expiration": "2027-10-10T12:33:34Z",
                "last changed": "2026-10-10T12:39:52Z",
                "registration": "2026-10-10T12:33:34Z",
                "last update of RDAP database": "2026-10-10T14:13:35Z"
            },
            "registrar": "Realtime Register B.V."
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T20:44:19Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "apartsbook.pl"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-11T00:04:04Z",
            "first": "2026-10-10T19:16:45Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 5.01,
            "avg_page_bytes": 2854
        },
        "social_tags": {
            "title": "ApartsBook — Apartamenty i domki na wynajem",
            "ogImage": "/images/og.jpg",
            "ogTitle": "ApartsBook — Apartamenty i domki na wynajem",
            "description": "Apartamenty i domki z pełnym wyposażeniem — wybierasz termin, rezerwujesz i masz potwierdzenie.",
            "ogDescription": "Apartamenty i domki z pełnym wyposażeniem — wybierasz termin, rezerwujesz i masz potwierdzenie."
        },
        "trackers": {
            "requests": 13,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 5
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 25,
                "tls": 96,
                "wait": 92,
                "connect": 93,
                "download": 96
            },
            "response_ms": 402
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443,
                3000
            ]
        },
        "carbon": {
            "bytes": 17730,
            "co2_grams": 0.0006,
            "cleaner_than": 59
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.58.110",
                    "host": "elle.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.44.197",
                    "host": "tadeo.ns.cloudflare.com"
                }
            ],
            "zone": "apartsbook.pl"
        },
        "location": {
            "ip": "69.10.56.216",
            "asn": "19318",
            "org": "Interserver",
            "city": "Paterson",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "apartsbook.pl"
        },
        "dns": {
            "A": [
                "69.10.56.216"
            ],
            "NS": [
                "tadeo.ns.cloudflare.com",
                "elle.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"elle.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417127754, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "69.10.56.216",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://apartsbook.pl"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.apartsbook.pl"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Google Font API",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 10
        },
        "whois": {
            "created": "2026-10-10T12:33:34Z",
            "updated": "2026-10-10T12:39:52Z",
            "expires": "2027-10-10T12:33:34Z",
            "nameservers": [
                "elle.ns.cloudflare.com."
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```