# PhishDestroy domain threat record: bikeplanet24.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/bikeplanet24.shop/ Machine-readable companion: https://phishdestroy.io/domain/bikeplanet24.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 05:41:08 UTC - Last availability or vendor check: 2026-10-23 11:24:14 UTC - Stored record updated: 2026-10-23 17:19:36 UTC - VirusTotal detections in the stored snapshot: 19/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 94.154.172.92 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a16745-86db-725d-bc5d-8cb2038fb465/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bikeplanet24.shop - Certificate Transparency search: https://crt.sh/?q=%25.bikeplanet24.shop - Web Archive lookup: https://web.archive.org/web/*/https://bikeplanet24.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added bikeplanet24.shop to its internal blocklist on 2026-10-23. The recorded page returned HTTP 200 with the title “Sorry, the website has been stopped.” No external blocklists listed the domain at the time of checking. How the scam works The high number of malicious and suspicious detections suggests typical phishing or malware patterns, but the page itself displayed only a stop message and no payload or credential‑collection form was observed. Therefore the listing reflects a general suspicion rather than a confirmed scam mechanism. Evidence VirusTotal (analysis on 2026-10-17, retrieved 2026-10-23) reported 19 detections from 92 engines, labeling the domain malicious by 15 vendors and suspicious by 4. Google Safe Browsing checked on 2026-10-23 and did not flag the URL. urlscan captured the site on 2026-10-23, its engine score was 95 malicious while the overall verdict was non‑malicious. Cloudflare Radar scanned on 2026-10-23 and marked the domain as malicious with a malware category. OTX listed five pulses referencing the domain as of 2026-10-23. PhishDestroy’s internal blocklist also contains the domain. Infrastructure The domain is 183 days old and resolves to IP 94.154.172.92 owned by IP Vendetta Inc. (ASN 209101) in SC. DNS is served by dns1.registrar-servers.com and dns2.registrar-servers.com with standard MX and NS records. The site uses a Let’s Encrypt certificate valid from 2026-09-23 to 2026-09-30 and open ports 21, 22, 80, 443 were observed. What to do Avoid submitting any credentials, private keys or personal data to the site. If you have entered information, change affected passwords and monitor accounts for unauthorized activity. Defenders should block bikeplanet24.shop at the firewall and keep the domain on watch lists. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16745-86db-725d-bc5d-8cb2038fb465/ Cloudflare Radar report: https://radar.cloudflare.com/scan/1ac441c7-8567-41fd-adeb-431e8ca07455 URLQuery report: https://urlquery.net/report/106cc642-39bc-4e93-9416-185d36b1cf10 Stored capture screenshot: https://i.ibb.co/Ld160cmq/f55bb5c7b3a6.png Cloudflare Radar screenshot (2026-10-23T06:13:38Z): https://screenshots.phishdestroy.io/cf/1ac441c7-8567-41fd-adeb-431e8ca07455.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/106cc642-39bc-4e93-9416-185d36b1cf10.png VirusTotal report: https://www.virustotal.com/gui/domain/bikeplanet24.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bikeplanet24.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 06:17:15 UTC ## Stored page captures - Primary capture: https://i.ibb.co/Ld160cmq/f55bb5c7b3a6.png Captured: 2026-10-23 05:41:08 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16745-86db-725d-bc5d-8cb2038fb465.png Captured: 2026-10-23 05:41:08 UTC Source report: https://urlscan.io/result/01a16745-86db-725d-bc5d-8cb2038fb465/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1ac441c7-8567-41fd-adeb-431e8ca07455.png Captured: 2026-10-23 06:13:38 UTC Source report: https://radar.cloudflare.com/scan/1ac441c7-8567-41fd-adeb-431e8ca07455 SHA-256: 36d07495bcca5f3e48f8eca8aedf572633b1c8597772c12bfb5fcf7563770e66 - URLQuery: https://screenshots.phishdestroy.io/uq/106cc642-39bc-4e93-9416-185d36b1cf10.png Source report: https://urlquery.net/report/106cc642-39bc-4e93-9416-185d36b1cf10 SHA-256: 700b79ed1f685bf601be09bd31336253a5b3a482484fbb4258e2a9c830fa1255 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T06:13:03Z", "uuid": "01a16745-86db-725d-bc5d-8cb2038fb465", "scanned_at": "2026-10-23T05:39:37Z", "final_url": "http://bikeplanet24.shop/", "status": 200, "redirects": [ { "to": "https://bikeplanet24.shop/", "from": "http://bikeplanet24.shop/", "status": 307 }, { "to": "http://bikeplanet24.shop/", "from": "https://bikeplanet24.shop/", "status": 307 } ], "ip": "94.154.172.92", "ips": [ "94.154.172.92" ], "asns": [ "209101" ], "countries": [ "BG" ], "doc_hash": "484ee30249a893f2c835f0fd812695a44d401f9ac3949f5e1cf5989233f414e9", "domain_age_days": 183, "apex_age_days": 183, "requests": 3, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 95, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T06:16:05Z", "uuid": "1ac441c7-8567-41fd-adeb-431e8ca07455", "scanned_at": "2026-10-23T06:13:38Z", "final_url": "https://bikeplanet24.shop/", "history": [ { "url": "https://bikeplanet24.shop/", "status": 0 } ], "dom_hash": "7521dd1697cd0f17a987eb978720f077c48a3ce93b06de3b6289d1cfa9a50dcd", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bikeplanet24.shop", "type": "A", "value": "94.154.172.92" } ], "dnssec_valid": false, "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T06:12:50Z", "analysis_at": "2026-10-17T11:47:13Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 15, "suspicious": 4, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "suspicious", "Seclookup": "malicious", "Gridinsoft": "suspicious", "SafeToOpen": "phishing", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-04-26T12:32:59Z", "dns": [ { "ttl": 3601, "type": "SOA", "rname": "hostmaster.registrar-servers.com", "value": "dns1.registrar-servers.com" }, { "ttl": 1800, "type": "MX", "value": "eforward3.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "eforward2.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "eforward4.registrar-servers.com", "priority": 15 }, { "ttl": 1800, "type": "MX", "value": "eforward1.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "NS", "value": "dns1.registrar-servers.com" }, { "ttl": 1800, "type": "TXT", "value": "v=spf1 include:spf.efwd.registrar-servers.com ~all" }, { "ttl": 1800, "type": "A", "value": "94.154.172.92" }, { "ttl": 1800, "type": "NS", "value": "dns2.registrar-servers.com" }, { "ttl": 1800, "type": "MX", "value": "eforward5.registrar-servers.com", "priority": 20 } ], "dns_at": "2026-10-17T11:52:29Z", "jarm": "3fd3fd0003fd3fd00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "94.154.172.92" ], "issuer": "Let's Encrypt / YR2", "serial": "50a6988107e6dd2cd9d41d61bbf67350bd8", "sha256": "cf50b5651f2296293e87039f0a88b7e957b99b513fb8625daefa3b58ecf8328c", "valid_to": "2026-09-30T01:17:03Z", "valid_from": "2026-09-23T09:17:04Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T06:16:24Z", "mail_config": { "mx": [ "eforward4.registrar-servers.com", "eforward5.registrar-servers.com", "eforward1.registrar-servers.com", "eforward2.registrar-servers.com", "eforward3.registrar-servers.com" ], "spf": "v=spf1 include:spf.efwd.registrar-servers.com ~all", "spf_lookups": 1 }, "caa_records": { "domain": "bikeplanet24.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": false, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 80, 443 ] }, "dns_server": { "ns": [ { "ip": "156.154.133.200", "host": "dns2.registrar-servers.com" }, { "ip": "156.154.132.200", "host": "dns1.registrar-servers.com" } ], "zone": "bikeplanet24.shop" }, "location": { "ip": "94.154.172.92", "asn": "209101", "org": "IP Vendetta Inc.", "city": "Victoria", "country": "SC" }, "ssl": { "issuer": "Let's Encrypt / YR2" }, "dns": { "A": [ "94.154.172.92" ], "MX": [ "{\"exchange\": \"eforward1.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward3.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward4.registrar-servers.com\", \"priority\": 15}", "{\"exchange\": \"eforward5.registrar-servers.com\", \"priority\": 20}", "{\"exchange\": \"eforward2.registrar-servers.com\", \"priority\": 10}" ], "NS": [ "dns2.registrar-servers.com", "dns1.registrar-servers.com" ], "SOA": "{\"nsname\": \"dns1.registrar-servers.com\", \"hostmaster\": \"hostmaster.registrar-servers.com\", \"serial\": 1777216036, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3601}", "TXT": [ "v=spf1 include:spf.efwd.registrar-servers.com ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "94.154.172.92", "family": 4 }, "subdomains": { "count": 1, "subdomains": [ "www.bikeplanet24.shop" ] } } } ```