# PhishDestroy domain threat record: bizuurabat.top Content language: English Canonical HTML report: https://phishdestroy.io/domain/bizuurabat.top/ Machine-readable companion: https://phishdestroy.io/domain/bizuurabat.top/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 08:31:03 UTC - Last availability or vendor check: 2026-10-23 11:24:22 UTC - Stored record updated: 2026-10-23 11:24:22 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 34.120.77.6 - Registrar in stored WHOIS data: BF Internet Limited - Registrar country in stored WHOIS data: CN - Last stored HTTP status: 200 - Registration date (registry RDAP, bizuurabat.top): 2026-09-18 10:03:13 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a167e9-fa21-7584-90ee-406320fc9735/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bizuurabat.top - Certificate Transparency search: https://crt.sh/?q=%25.bizuurabat.top - Web Archive lookup: https://web.archive.org/web/*/https://bizuurabat.top/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed bizuurabat.top as a suspicious domain based on automated analysis. The recorded page title was "Błąd - Bizuu" and the site returned HTTP 200 on 2026-10-23. The domain first appeared in PhishDestroy's feed on 2026-10-23, 35 days after its registration on 2026-09-18. Intake was triggered by VirusTotal reporting sixteen malicious vendor detections. How the scam works The detections point to a phishing risk, meaning the site could be used to trick visitors into revealing credentials or personal data. No credential‑harvesting form or wallet request was observed in the captured page; the title only displayed an error message. In general, phishing pages mimic legitimate services to lure users into entering sensitive information. Evidence VirusTotal recorded sixteen malicious and two suspicious detections out of ninety‑two engines on 2026-10-23 (analysis date 2026-10-19). Google Safe Browsing reported the domain as not flagged on 2026-10-23. urlscan’s automated analysis on 2026-10-23 gave a malicious score of 100 and categorized the site as phishing and a fake shop. Cloudflare Radar also marked the domain malicious for malware and phishing on 2026-10-23. OTX listed five pulses referencing the domain, and PhishDestroy’s internal blocklist includes it as of 2026-10-23 while external blocklists showed no matches. Infrastructure The domain was registered with BF Internet Limited on 2026-09-18 and used the nameservers ns1.nikodns.com and ns2.nikodns.com. The recorded IP was 34.120.77.6, belonging to Google LLC in the United States, and the TLS certificate issued by Google Trust Services was valid from 2026-09-18 to 2026-12-17. DNSSEC was not enabled for the zone. What to do Do not submit any credentials or personal data to the site; if you have already done so, change the affected passwords and monitor accounts for suspicious activity. Network defenders should block traffic to bizuurabat.top and log any connections to its recorded IP address. Remember that a clean Google Safe Browsing result or lack of external blocklist hits does not guarantee safety. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a167e9-fa21-7584-90ee-406320fc9735/ Cloudflare Radar report: https://radar.cloudflare.com/scan/70184cdf-3590-4a02-9d4c-9704469c9c43 URLQuery report: https://urlquery.net/report/58224b45-7b93-4ada-944a-e6202e37ca24 Stored capture screenshot: https://urlscan.io/screenshots/01a167e9-fa21-7584-90ee-406320fc9735.png Cloudflare Radar screenshot (2026-10-23T08:32:00Z): https://screenshots.phishdestroy.io/cf/70184cdf-3590-4a02-9d4c-9704469c9c43.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/58224b45-7b93-4ada-944a-e6202e37ca24.png URLScan screenshot (2026-09-18T15:45:20Z): https://screenshots.phishdestroy.io/us/01a0b531-79da-7036-9345-f27ab82a4201.png URLScan capture report: https://urlscan.io/result/01a0b531-79da-7036-9345-f27ab82a4201/ URLScan screenshot (2026-09-19T09:36:09Z): https://screenshots.phishdestroy.io/us/01a0b905-d55d-772a-81b2-ae2eafe0fa89.png URLScan capture report: https://urlscan.io/result/01a0b905-d55d-772a-81b2-ae2eafe0fa89/ VirusTotal report: https://www.virustotal.com/gui/domain/bizuurabat.top Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bizuurabat.top Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 09:34:20 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a167e9-fa21-7584-90ee-406320fc9735.png Captured: 2026-10-23 08:41:10 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a0b905-d55d-772a-81b2-ae2eafe0fa89.png Captured: 2026-10-23 08:31:03 UTC Source report: https://urlscan.io/result/01a167e9-fa21-7584-90ee-406320fc9735/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/70184cdf-3590-4a02-9d4c-9704469c9c43.png Captured: 2026-10-23 08:32:00 UTC Source report: https://radar.cloudflare.com/scan/70184cdf-3590-4a02-9d4c-9704469c9c43 SHA-256: c9902c83d694e0b09e40006fc73cb290a031ac3a79befb223dc68f0612724ff0 - URLQuery: https://screenshots.phishdestroy.io/uq/58224b45-7b93-4ada-944a-e6202e37ca24.png Source report: https://urlquery.net/report/58224b45-7b93-4ada-944a-e6202e37ca24 SHA-256: 8c34176e97c09a49cc4fe93a8853bf698ee258d657c2a8ed97428ee6d7d3a06a - URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b531-79da-7036-9345-f27ab82a4201.png Captured: 2026-09-18 15:45:20 UTC Source report: https://urlscan.io/result/01a0b531-79da-7036-9345-f27ab82a4201/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0b905-d55d-772a-81b2-ae2eafe0fa89.png Captured: 2026-09-19 09:36:09 UTC Source report: https://urlscan.io/result/01a0b905-d55d-772a-81b2-ae2eafe0fa89/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T09:04:30Z", "uuid": "01a167e9-fa21-7584-90ee-406320fc9735", "scanned_at": "2026-10-23T08:39:16Z", "final_url": "https://bizuurabat.top/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bizuurabat.top/", "from": "http://bizuurabat.top/", "status": 307 } ], "ip": "34.120.77.6", "ptr": "6.77.120.34.bc.googleusercontent.com", "domains": [ "connect.facebook.net", "analytics.tiktok.com", "fonts.gstatic.com", "analytics-ipv6.tiktokw.us" ], "ips": [ "23.50.131.10", "142.251.14.94", "2.21.239.34", "57.144.248.128", "34.120.77.6" ], "asns": [ "20940", "15169", "32934", "396982" ], "countries": [ "DE", "US" ], "doc_hash": "f38e705bf54378d088f6e824c24c76560439453766115f40ea298e05415d3e16", "script_hashes": [ "65f10e97636e7abb2437cb28611f6ea292879a7b381d543b2af82a1c8e270e51", "8654d9e81591c7933631790e29552d31f248dd610c2a4b34406ce9b3d51df506" ], "globals": [ "_bizuurabattop_", "_BBDBZBC_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source", "oemcart_utm_medium" ], "cookies": [ "_bagiec_vid", "_bagiec_cvid", "_bagiec_vs", "PHPSESSID", "_BBDBZBC_ua", "_BBDBZBC_pu", "_BBDBZBC_tz", "_BBDBZBC_ss", "_BBDBZBC_lang", "_BBDBZBC_vs", "_BBDBZBC_dt", "_ttp", "_tt_enable_cookie", "ttcsid", "ttcsid_DAJUHO3C77UC8FLK6230", "_fbp" ], "storage_keys": [ "lastExternalReferrer", "lastExternalReferrerTime", "tt_sessionId", "tt_pixel_session_index", "tt_appInfo" ], "tls": { "san": [ "bizuurabat.top" ], "cipher": "AES_128_GCM", "issuer": "WR3", "subject": "bizuurabat.top", "protocol": "TLS 1.3", "valid_to": "2026-12-17T10:42:22Z", "valid_from": "2026-09-18T09:47:49Z" }, "domain_age_days": 34, "apex_age_days": 34, "tls_age_days": 34, "tls_valid_days": 90, "requests": 31, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "nginx", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T08:32:47Z", "uuid": "70184cdf-3590-4a02-9d4c-9704469c9c43", "scanned_at": "2026-10-23T08:32:00Z", "final_url": "https://bizuurabat.top/", "status": 200, "history": [ { "url": "https://bizuurabat.top/", "status": 200 } ], "dom_hash": "a3b4f18b337997e0c0bc3a46a118a2e9ceebd294297e3e5a90484d214ecf5194", "doc_hash": "0d057b1ec10f61149949713c1896f0290151bbda02d7c73344f51be015750a5c", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bizuurabat.top", "type": "A", "value": "34.120.77.6" } ], "dnssec_valid": false, "ip": "34.120.77.6", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "KENPAI", "created": "2026-09-18T10:03:13Z", "updated": "2026-09-18T10:03:18Z", "expires": "2027-09-18T10:03:13Z", "nameservers": [ "ns1.nikodns.com.", "ns2.nikodns.com." ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T09:33:03Z", "analysis_at": "2026-10-18T23:46:20Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 16, "suspicious": 2, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "PREBYTES": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "phishing", "Seclookup": "malicious", "Gridinsoft": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "registrar": "BF Internet Limited", "created": "2026-09-18T10:03:13Z", "expires": "2027-09-18T10:03:13Z", "updated": "2026-09-18T10:03:18Z", "first_seen": "2026-09-18T11:46:11Z", "dns": [ { "ttl": 600, "type": "SOA", "rname": "admin.nikodns.com", "value": "ns1.nikodns.com" }, { "ttl": 888, "type": "A", "value": "34.120.77.6" }, { "ttl": 21600, "type": "NS", "value": "ns2.nikodns.com" }, { "ttl": 21600, "type": "NS", "value": "ns1.nikodns.com" } ], "dns_at": "2026-10-18T23:51:50Z", "jarm": "29d3fd00029d29d00042d43d00041d6f940079659edb62e1c38c38bd26ee84", "cert": { "san": [ "bizuurabat.top" ], "issuer": "Google Trust Services / WR3", "serial": "227726ac3bb430360964f899176d430b", "sha256": "286520ab29032e545957915476c96e161054e9be5bae62553a9755d931f629fa", "subject": "bizuurabat.top", "valid_to": "2026-12-17T10:42:22Z", "valid_from": "2026-09-18T09:47:49Z" }, "whois": { "registrar": "BF Internet Limited", "registrar_iana_id": "4543", "registrar_url": "http://kenpai.net", "created": "2026-09-18T10:03:13Z", "updated": "2026-09-18T10:03:18Z", "expires": "2027-09-18T10:03:13Z", "status": [ "ok" ], "nameservers": [ "ns1.nikodns.com", "ns2.nikodns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "expiration": "2027-09-18T10:03:13Z", "last changed": "2026-09-18T10:03:18Z", "registration": "2026-09-18T10:03:13Z", "registrar expiration": "2027-09-18T10:03:13Z", "last update of RDAP database": "2026-10-18T23:51:50Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T08:33:09Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bizuurabat.top" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-09-19T00:55:35Z", "first": "2026-09-18T19:35:11Z", "changes": 0, "days_archived": 2, "scans_per_day": 4.49, "avg_page_bytes": 848 }, "social_tags": { "title": "Błąd - Bizuu" }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 604, "tls": 23, "wait": 190, "connect": 18, "download": 86 }, "response_ms": 921 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 432742, "co2_grams": 0.0158, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "154.86.21.130", "host": "ns1.nikodns.com" }, { "ip": "154.86.21.131", "host": "ns2.nikodns.com" } ], "zone": "bizuurabat.top" }, "location": { "ip": "34.120.77.6", "asn": "396982", "org": "Google LLC", "city": "Kansas City", "country": "US" }, "ssl": { "issuer": "Google Trust Services / WR3", "subject": "bizuurabat.top" }, "dns": { "A": [ "34.120.77.6" ], "NS": [ "ns1.nikodns.com", "ns2.nikodns.com" ], "SOA": "{\"nsname\": \"ns1.nikodns.com\", \"hostmaster\": \"admin.nikodns.com\", \"serial\": 1789725925, \"refresh\": 3600, \"retry\": 300, \"expire\": 1209600, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "34.120.77.6", "family": 4 }, "redirects": { "chain": [ "https://bizuurabat.top" ] }, "subdomains": { "count": 1, "subdomains": [ "www.bizuurabat.top" ] }, "whois": { "registrar": "BF Internet Limited", "created": "2026-09-18T10:03:13Z", "updated": "2026-09-18T10:03:18Z", "expires": "2027-09-18T10:03:13Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "ns1.nikodns.com", "ns2.nikodns.com" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html; charset=utf-8" } } } } ```