# PhishDestroy domain threat record: azkudri.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/azkudri.shop/
Machine-readable companion: https://phishdestroy.io/domain/azkudri.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: not observed active
- First observed by PhishDestroy: 2026-10-22 20:45:37 UTC
- Last availability or vendor check: 2026-10-22 22:29:37 UTC
- Stored record updated: 2026-10-22 22:32:07 UTC
- VirusTotal detections in the stored snapshot: 5/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 45.151.91.66
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-15 07:36:46 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a14424-77e2-7398-ba5a-5b978664ed5d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/azkudri.shop
- Certificate Transparency search: https://crt.sh/?q=%25.azkudri.shop
- Web Archive lookup: https://web.archive.org/web/*/https://azkudri.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added azkudri.shop to its internal blocklist on 2026-10-22 after the domain was first observed on the same day. A request to the domain returned HTTP 200 after an initial HTTP 307 redirect to the domain’s root and a subsequent redirect to the cgi-sys/defaultwebpage.cgi path, which displayed a default cPanel placeholder page. No page title was recorded. The domain also performed a cross‑site redirect to mipzaro.shop, which contributed to the assessment.

How the scam works
The detections suggest the site could be used for generic phishing or malware distribution, a common risk for newly registered domains that host placeholder pages and then redirect visitors to other locations. Such setups may later serve credential‑harvesting forms or malicious payloads, but no specific malicious payload was observed on the captured page.

Evidence
VirusTotal scanned the domain on 2026-10-15 and reported five detections from 92 engines: three malicious (alphaMountain.ai, CRDF, SOCRadar) and two suspicious (DNS8, Gridinsoft). Google Safe Browsing checked on 2026-10-22 and did not flag the domain. Cloudflare Radar on the same day marked it malicious under phishing and malware categories. URLScan captured the site on 2026-10-16, gave an overall clean verdict but its engine scoring labeled it malicious with a score of 82. OTX listed one pulse referencing the domain as of 2026-10-22, and PhishDestroy’s internal blocklist contains the domain; no external blocklists reported it.

Infrastructure
The domain was registered on 2026-10-15 through Spaceship, Inc., with launch1.spaceship.net and launch2.spaceship.net as authoritative nameservers. The recorded IP was 45.151.91.66, announced by ASN 209101 and listed as owned by IP Vendetta Inc. in Seychelles. The recorded TLS certificate was issued by Let’s Encrypt and was valid from 2026-10-15 to 2027-01-13; DNSSEC was enabled. The recorded server header reported LiteSpeed and the site enforced HSTS with a max‑age of two years.

What to do
Visitors should not submit credentials or download files from azkudri.shop; if any information was entered, change the associated passwords immediately. Security teams should block the exact domain, keep the PhishDestroy blocklist entry active, and monitor DNS queries for future activity. No wallet‑related actions are required because wallet recommendations are disabled for this listing.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a14424-77e2-7398-ba5a-5b978664ed5d/
Cloudflare Radar report: https://radar.cloudflare.com/scan/877adbd3-ec75-4e3a-8a3e-d7ad19f5996e
Stored capture screenshot: https://urlscan.io/screenshots/01a14424-77e2-7398-ba5a-5b978664ed5d.png
Cloudflare Radar screenshot (2026-10-22T20:46:37Z): https://screenshots.phishdestroy.io/cf/877adbd3-ec75-4e3a-8a3e-d7ad19f5996e.png
URLScan screenshot (2026-10-15T17:00:30Z): https://screenshots.phishdestroy.io/us/01a14081-ee0c-75e8-bae0-5d22ae25bead.png
URLScan capture report: https://urlscan.io/result/01a14081-ee0c-75e8-bae0-5d22ae25bead/
VirusTotal report: https://www.virustotal.com/gui/domain/azkudri.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=azkudri.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 20:48:09 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a14424-77e2-7398-ba5a-5b978664ed5d.png
  Captured: 2026-10-22 20:45:37 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a14424-77e2-7398-ba5a-5b978664ed5d.png
  Source report: https://urlscan.io/result/01a14424-77e2-7398-ba5a-5b978664ed5d/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/877adbd3-ec75-4e3a-8a3e-d7ad19f5996e.png
  Captured: 2026-10-22 20:46:37 UTC
  Source report: https://radar.cloudflare.com/scan/877adbd3-ec75-4e3a-8a3e-d7ad19f5996e
  SHA-256: f2c6433e3d52cc04fff4460eed7bca5648d6c05361476ea44a524634b4bf0247
- URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a14081-ee0c-75e8-bae0-5d22ae25bead.png
  Captured: 2026-10-15 17:00:30 UTC
  Source report: https://urlscan.io/result/01a14081-ee0c-75e8-bae0-5d22ae25bead/
  SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T20:47:13Z",
        "uuid": "01a14424-77e2-7398-ba5a-5b978664ed5d",
        "scanned_at": "2026-10-16T09:56:53Z",
        "final_url": "https://azkudri.shop/cgi-sys/defaultwebpage.cgi",
        "status": 200,
        "redirected": "same-domain",
        "redirects": [
            {
                "to": "https://azkudri.shop/",
                "from": "http://azkudri.shop/",
                "status": 307
            },
            {
                "to": "https://azkudri.shop/cgi-sys/defaultwebpage.cgi",
                "from": "https://azkudri.shop/"
            }
        ],
        "ip": "45.151.91.66",
        "ips": [
            "45.151.91.66"
        ],
        "asns": [
            "209101"
        ],
        "countries": [
            "BG"
        ],
        "link_domains": [
            "go.cpanel.net",
            "cpanel.net"
        ],
        "doc_hash": "9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24",
        "tls": {
            "san": [
                "azkudri.shop",
                "www.azkudri.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "azkudri.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-13T15:12:15Z",
            "valid_from": "2026-10-15T15:12:16Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 82,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "LiteSpeed",
            "content-type": "text/html",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T20:47:15Z",
        "uuid": "877adbd3-ec75-4e3a-8a3e-d7ad19f5996e",
        "scanned_at": "2026-10-22T20:46:37Z",
        "final_url": "https://azkudri.shop/cgi-sys/defaultwebpage.cgi",
        "status": 200,
        "history": [
            {
                "url": "https://azkudri.shop/",
                "status": 200
            },
            {
                "url": "https://azkudri.shop/cgi-sys/defaultwebpage.cgi",
                "status": 200
            }
        ],
        "dom_hash": "b259d4c75057396bfb7d9d47400c526bfda21a9b43818ce537c1c3eea3ff021a",
        "doc_hash": "9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Newly Seen Domains",
            "Security Risks",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "azkudri.shop",
                "type": "A",
                "value": "45.151.91.66"
            }
        ],
        "dnssec_valid": true,
        "ip": "45.151.91.66",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T20:46:28Z",
        "analysis_at": "2026-10-15T17:28:40Z",
        "stats": {
            "timeout": 0,
            "harmless": 0,
            "malicious": 3,
            "suspicious": 2,
            "undetected": 87
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "SOCRadar": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "first_seen": "2026-10-15T16:27:02Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "A",
                "value": "45.151.91.66"
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch2.spaceship.net"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "support.spaceship.com",
                "value": "launch1.spaceship.net"
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch1.spaceship.net"
            }
        ],
        "dns_at": "2026-10-15T17:34:04Z",
        "jarm": "1dd40d40d00040d00042d43d000000ffd4768d0539f26c1eea462bed21f172",
        "cert": {
            "san": [
                "azkudri.shop",
                "www.azkudri.shop"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "674a56028e274100e25dcc897400511ecaa",
            "sha256": "481de000a38d3e3d12a067d7be5780c731cb1ccd21c837148aa46e5f9f6f2f3b",
            "subject": "azkudri.shop",
            "valid_to": "2027-01-13T15:12:15Z",
            "valid_from": "2026-10-15T15:12:16Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T20:47:28Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "azkudri.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-22T20:46:40Z",
            "first": "2026-10-15T23:54:38Z",
            "changes": 1,
            "days_archived": 3,
            "scans_per_day": 0.29,
            "avg_page_bytes": 787
        },
        "trackers": {
            "requests": 6
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 474,
                "tls": 20,
                "wait": 44,
                "connect": 62,
                "download": 0
            },
            "response_ms": 600
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 163,
            "co2_grams": 0,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.27.32",
                    "host": "launch2.spaceship.net"
                },
                {
                    "ip": "162.159.26.38",
                    "host": "launch1.spaceship.net"
                }
            ],
            "zone": "azkudri.shop"
        },
        "location": {
            "ip": "45.151.91.66",
            "asn": "209101",
            "org": "IP Vendetta Inc.",
            "city": "Victoria",
            "country": "SC"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "azkudri.shop"
        },
        "dns": {
            "A": [
                "45.151.91.66"
            ],
            "NS": [
                "launch2.spaceship.net",
                "launch1.spaceship.net"
            ],
            "SOA": "{\"nsname\": \"launch1.spaceship.net\", \"hostmaster\": \"support.spaceship.com\", \"serial\": 1792080539, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3600}"
        },
        "dnssec": {
            "ds": true,
            "rrsig": true,
            "dnskey": true
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "45.151.91.66",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://azkudri.shop"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.azkudri.shop"
            ]
        },
        "tech_stack": {
            "technologies": [
                "LiteSpeed",
                "lit-html",
                "lit-element",
                "HSTS"
            ]
        },
        "headers": {
            "headers": {
                "server": "LiteSpeed",
                "content-type": "text/html",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```