# PhishDestroy domain threat record: bike-pl.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bike-pl.shop/
Machine-readable companion: https://phishdestroy.io/domain/bike-pl.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 05:17:19 UTC
- Last availability or vendor check: 2026-10-25 12:05:09 UTC
- Stored record updated: 2026-10-25 15:21:14 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 172.67.167.219
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date (registry RDAP, bike-pl.shop): 2026-07-09 08:10:51 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1672f-91ce-70cb-937a-23623e311feb/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bike-pl.shop
- Certificate Transparency search: https://crt.sh/?q=%25.bike-pl.shop
- Web Archive lookup: https://web.archive.org/web/*/https://bike-pl.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bike-pl.shop to its internal blocklist on 2026-10-23 after the intake system flagged the domain for ten malicious VirusTotal detections. The recorded page title at that time was “500 Internal Server Error”. The site returned an HTTP 200 response when fetched on the same day, but the title indicates the page did not load normally.

How the scam works
The current evidence does not show a specific scam page or credential‑stealing form; instead, the domain is flagged because automated scanners and blocklists associate it with phishing activity. In general, phishing domains mimic legitimate services to trick users into entering sensitive information, but no concrete mechanism was observed on this page.

Evidence
VirusTotal reported 14 detections from 92 engines on 2026-10-24, with ten vendors marking the domain malicious and four marking it suspicious. Google Safe Browsing checked on 2026-10-24 did not flag the site. urlscan captured the domain on 2026-10-23, returned an overall non‑malicious verdict but its machine‑learning engine scored it 88 and labeled it malicious. Spamhaus DBL listed the domain as phishing on 2026-10-23. OTX recorded five pulses mentioning the domain as of 2026-10-24. Cloudflare Radar’s scan on 2026-10-23 marked the domain malicious under the malware category. PhishDestroy’s internal list also contains the domain.

Infrastructure
The domain was registered on 2026-07-09 through Spaceship, Inc., 106 days before first detection. The recorded DNS A records listed Cloudflare IPs 104.21.34.36 and 172.67.167.219, and the AAAA records listed IPv6 addresses. The TLS certificate issued by Google Trust Services was valid from 2026-09-06 to 2026-12-05. No DNSSEC records were observed. The site used Cloudflare’s web application firewall and included common web technologies such as PHP, jQuery, and tracking pixels.

What to do
Avoid entering any credentials, personal data, or payment information on bike-pl.shop. If you have already submitted such data, change the associated passwords and monitor accounts for unauthorized activity. Network defenders should block the domain at the firewall or DNS level and review logs for any connections to the recorded IP addresses. Continue to monitor security feeds for any new indicators related to this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1672f-91ce-70cb-937a-23623e311feb/
Cloudflare Radar report: https://radar.cloudflare.com/scan/30291e09-2aab-43d1-9910-3d027a7dfdbf
Stored capture screenshot: https://i.ibb.co/4gtSx8R3/b322af6a4bcd.png
Cloudflare Radar screenshot (2026-10-23T05:50:10Z): https://screenshots.phishdestroy.io/cf/30291e09-2aab-43d1-9910-3d027a7dfdbf.png
VirusTotal report: https://www.virustotal.com/gui/domain/bike-pl.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bike-pl.shop
Archived copy: https://web.archive.org/web/20261023052337/https://bike-pl.shop/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 07:34:20 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/4gtSx8R3/b322af6a4bcd.png
  Captured: 2026-10-23 05:17:19 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1672f-91ce-70cb-937a-23623e311feb.png
  Captured: 2026-10-23 05:17:19 UTC
  Source report: https://urlscan.io/result/01a1672f-91ce-70cb-937a-23623e311feb/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/30291e09-2aab-43d1-9910-3d027a7dfdbf.png
  Captured: 2026-10-23 05:50:10 UTC
  Source report: https://radar.cloudflare.com/scan/30291e09-2aab-43d1-9910-3d027a7dfdbf
  SHA-256: a8fdda689f5001e33790a1122c827b673cd77b547fda182dedd2cc2a7f4f14df

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T05:51:34Z",
        "uuid": "01a1672f-91ce-70cb-937a-23623e311feb",
        "scanned_at": "2026-10-23T05:15:39Z",
        "final_url": "https://bike-pl.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bike-pl.shop/",
                "from": "http://bike-pl.shop/",
                "status": 307
            }
        ],
        "ip": "104.21.34.36",
        "ips": [
            "104.21.34.36"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "6c5d74593398868b7285edba64f53c5db909a6fd2cf4052b5a617609d3b62b5d",
        "cookies": [
            "__cf_bm"
        ],
        "tls": {
            "san": [
                "bike-pl.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "bike-pl.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-05T09:14:33Z",
            "valid_from": "2026-09-06T08:14:35Z"
        },
        "domain_age_days": 105,
        "apex_age_days": 105,
        "tls_age_days": 46,
        "tls_valid_days": 90,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 88,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T05:51:36Z",
        "uuid": "30291e09-2aab-43d1-9910-3d027a7dfdbf",
        "scanned_at": "2026-10-23T05:50:10Z",
        "final_url": "https://bike-pl.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://bike-pl.shop/",
                "status": 200
            }
        ],
        "dom_hash": "8b28b48180c8ea5a9c51ebfcd1420c0e170625a6db0511a0af4417607adc4399",
        "doc_hash": "8e278f1b29f258037b019683d39d6a8b05d450a689310c48cdd843ad888b7029",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bike-pl.shop",
                "type": "A",
                "value": "172.67.167.219"
            },
            {
                "name": "bike-pl.shop",
                "type": "A",
                "value": "104.21.34.36"
            },
            {
                "name": "bike-pl.shop",
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:a7db"
            },
            {
                "name": "bike-pl.shop",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:2224"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.167.219",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T07:32:05Z",
        "analysis_at": "2026-10-18T23:47:09Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 10,
            "suspicious": 4,
            "undetected": 32
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Fortinet": "spam",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Sophos": "phishing and fraud",
            "Webroot": "Phishing and Other Frauds",
            "BitDefender": "computersandsoftware",
            "alphaMountain.ai": "Phishing (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "phishing and other frauds"
        },
        "first_seen": "2026-07-09T08:57:21Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:a7db"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.167.219"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "nero.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nero.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "perla.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:2224"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.34.36"
            }
        ],
        "dns_at": "2026-10-18T23:47:27Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "bike-pl.shop"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "a1810ce882ecb848132caaf8161e6e13",
            "sha256": "4ad0c2840c3c2fb9265cb33a4958049b61dce2f8fb0564c620edd245abf499bc",
            "subject": "bike-pl.shop",
            "valid_to": "2026-12-05T09:14:33Z",
            "valid_from": "2026-09-06T08:14:35Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T05:51:47Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bike-pl.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T05:23:37Z",
            "first": "2026-10-23T05:23:37Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 1067
        },
        "social_tags": {
            "title": "ostrzeżenie - c***l"
        },
        "trackers": {
            "requests": 20,
            "trackers": [
                {
                    "name": "Facebook",
                    "company": "Meta",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 5
                },
                {
                    "name": "Facebook Custom Audience",
                    "company": "Meta",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Facebook Connect",
                    "company": "Meta",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 3
                },
                {
                    "name": "TikTok Analytics",
                    "company": "ByteDance Inc",
                    "country": "KY",
                    "category": "Site Analytics",
                    "requests": 6
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 11,
                "wait": 213,
                "connect": 6,
                "download": 304
            },
            "response_ms": 536
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 416766,
            "co2_grams": 0.0152,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.28",
                    "host": "nero.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.203",
                    "host": "perla.ns.cloudflare.com"
                }
            ],
            "zone": "bike-pl.shop"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "_aiihgf_vid"
                },
                {
                    "name": "_aiihgf_cvid"
                },
                {
                    "name": "_aiihgf_vs"
                },
                {
                    "name": "PHPSESSID",
                    "session": true
                },
                {
                    "name": "__cf_bm",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAGI_ua",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAGI_pu",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAGI_tz",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAGI_ss",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAGI_lang",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAGI_vs",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAGI_dt",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_ttp",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_tt_enable_cookie"
                },
                {
                    "name": "_ttp"
                },
                {
                    "name": "ttcsid"
                },
                {
                    "name": "ttcsid_D39M5HRC77U0JLJ5JEMG"
                },
                {
                    "name": "_fbp",
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3037::6815:2224",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "bike-pl.shop"
        },
        "dns": {
            "A": [
                "104.21.34.36",
                "172.67.167.219"
            ],
            "NS": [
                "nero.ns.cloudflare.com",
                "perla.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"nero.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416278218, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3035::ac43:a7db",
                "2606:4700:3037::6815:2224"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3037::6815:2224",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://bike-pl.shop"
            ]
        },
        "tech_stack": {
            "technologies": [
                "PHP",
                "anime.js",
                "Cloudflare Bot Management",
                "TikTok Pixel",
                "Swiper",
                "Moment.js",
                "jQuery",
                "Facebook Pixel",
                "core-js",
                "Cloudflare"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```