URLScan verdict
malicious
Report“Discounted Bariatric Vitamins, Foods & Nutritional Supplements | BariatricPal Shop”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@rashost.com.
The latest stored availability evidence still shows the domain reachable; 34 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bariatricpalshop.shop was observed with a PhishDestroy internal listing on 2026-10-11, documenting its presence in a publisher-managed catalogue. The domain was also recorded with an SSL certificate issued by Let's Encrypt / YE1.
On 2026-10-11, PhishDestroy listed bariatricpalshop.shop as an internal entry. The SSL certificate for the domain was scanned and issued by Let's Encrypt / YE1 on the same date. The domain was first observed in records on 2026-10-11, with network infrastructure attributed to AS199242 Malakmadze Web LLC in the US.
The PhishDestroy source contains a dated listing for bariatricpalshop.shop, which serves as a publisher-managed record of the domain's presence. The SSL certificate observation documents the use of encryption at a specific point in time. These records provide a technical snapshot but do not address the domain's content or broader context.
Preserve the PhishDestroy internal listing for bariatricpalshop.shop as a reference for future comparisons. Retain the SSL certificate record to monitor changes in encryption or technical setup. Use these dated records to inform ongoing reviews of the domain's recorded status and infrastructure.
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
Scanner note: alive_content: raw=ok; http=200; via=https_proxy
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
mckinley.ns.cloudflare.comnoah.ns.cloudflare.comLocation describes the IP network.
71b84d66d4b5c54a0101f47fc3f0218cc71ba42bf470c6b81ddf697e708252daSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
23.252.79.179. 9 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20261010-9DAFE2 Recipient: abuse@rashost.com AUP & Terms of Service Violations: Acceptable Use Policy: Active phishing operations targeting internet users directly violate standard AUP provisions prohibiting fraud and deceptive practices. Terms of Service: Material breach of service terms regarding malicious use, providing contractual justification for immediate suspension. Applicable Legal Framework (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Investigation Notice: We fully respect your internal investigation processes and discretion. Prompt remediation protects innocent users while mitigating regulatory compliance scrutiny, legal liability, and brand reputation risks associated with ongoing malicious infrastructure.
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Select your country to get official cybercrime contacts, or create a complaint draft →.
Template-based draft · optional AI wording assistance requires separate consent
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowSubmit suspicious domains to our threat database — protect the community
ReportRecent phishing reports and observed availability changes
MonitorMonitor live threats or contest this listing if you believe it's a false positive