# PhishDestroy domain threat record: blik-parksde.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/blik-parksde.shop/
Machine-readable companion: https://phishdestroy.io/domain/blik-parksde.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 08:31:41 UTC
- Last availability or vendor check: 2026-10-23 11:24:23 UTC
- Stored record updated: 2026-10-23 20:37:24 UTC
- VirusTotal detections in the stored snapshot: 9/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.17.177.238
- Registrar in stored WHOIS data: ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-06-13 10:21:45 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a167ed-ad4b-7264-82d2-be4d9fa32ffe/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/blik-parksde.shop
- Certificate Transparency search: https://crt.sh/?q=%25.blik-parksde.shop
- Web Archive lookup: https://web.archive.org/web/*/https://blik-parksde.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added blik-parksde.shop to its blocklist on 2026-10-23 after automated analysis flagged it as suspicious. The recorded page title is "500 Internal Server Error". An HTTP check performed on the same day reported a 200 response code despite an earlier fetch that returned 403. The domain was first seen by PhishDestroy on 2026-10-23, 132 days after its registration on 2026-06-13.

How the scam works
No specific fraudulent behavior was observed on the page, and the listing does not identify a concrete mechanism. The detections suggest the domain could be used for typical phishing or malware distribution patterns, such as credential harvesting or malicious redirects, but this cannot be confirmed for this site.

Evidence
VirusTotal scanned the domain on 2026-10-15 and recorded five malicious and four suspicious detections out of ninety‑two engines, totaling nine detections. Google Safe Browsing checked on 2026-10-23 and did not flag the domain. urlscan captured the site on 2026-10-14 and its engine verdict marked it malicious with a high confidence score, while the overall verdict was non‑malicious; a later capture on 2026-10-23 reported a malicious engine verdict but an overall non‑malicious result. OTX listed five pulses referencing the domain as of 2026-10-23. No external blocklists reported the domain, but PhishDestroy’s internal list marks it as blocked.

Infrastructure
The domain was registered on 2026-06-13 through ALIBABA.COM SINGAPORE E‑COMMERCE PRIVATE LIMITED. The recorded IP address is 104.17.177.238, which belongs to Cloudflare, Inc. and was observed in Canada. TLS was provided by Google Trust Services with a certificate valid from 2026-10-14 to 2027-01-12, and DNSSEC was not enabled.

What to do
Avoid entering any credentials, personal data, or downloading files from this domain. If you have visited the site, clear browser cookies and cache. Defenders should block the exact hostname, monitor outbound connections to the recorded IP, and review web server logs for any requests to blik-parksde.shop.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a167ed-ad4b-7264-82d2-be4d9fa32ffe/
Cloudflare Radar report: https://radar.cloudflare.com/scan/1bbdb6ae-dd4c-43ad-9e97-52a2078c001e
Stored capture screenshot: https://urlscan.io/screenshots/01a167ed-ad4b-7264-82d2-be4d9fa32ffe.png
Cloudflare Radar screenshot (2026-10-23T08:39:40Z): https://screenshots.phishdestroy.io/cf/1bbdb6ae-dd4c-43ad-9e97-52a2078c001e.png
URLScan screenshot (2026-09-21T17:59:43Z): https://screenshots.phishdestroy.io/us/01a0c51f-744a-741a-9565-1b02fc0f5217.png
URLScan capture report: https://urlscan.io/result/01a0c51f-744a-741a-9565-1b02fc0f5217/
URLScan screenshot (2026-09-22T09:37:30Z): https://screenshots.phishdestroy.io/us/01a0c87a-167d-7713-a510-0373440d14d3.png
URLScan capture report: https://urlscan.io/result/01a0c87a-167d-7713-a510-0373440d14d3/
VirusTotal report: https://www.virustotal.com/gui/domain/blik-parksde.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=blik-parksde.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 09:14:30 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a167ed-ad4b-7264-82d2-be4d9fa32ffe.png
  Captured: 2026-10-23 08:45:13 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a167ed-ad4b-7264-82d2-be4d9fa32ffe.png
  Captured: 2026-10-23 08:45:13 UTC
  Source report: https://urlscan.io/result/01a167ed-ad4b-7264-82d2-be4d9fa32ffe/
- URLScan capture 2: https://urlscan.io/screenshots/01a13aed-e037-7331-8ff5-ca2dcb6a0b42.png
  Captured: 2026-10-23 08:31:41 UTC
  Source report: https://urlscan.io/result/01a167ed-ad4b-7264-82d2-be4d9fa32ffe/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1bbdb6ae-dd4c-43ad-9e97-52a2078c001e.png
  Captured: 2026-10-23 08:39:40 UTC
  Source report: https://radar.cloudflare.com/scan/1bbdb6ae-dd4c-43ad-9e97-52a2078c001e
  SHA-256: 4df39e44a84614a3ae4181ec0066cd3850dde20f6e4ea7cd343b6a8a689f335f
- URLScan · 2026-09-21: https://screenshots.phishdestroy.io/us/01a0c51f-744a-741a-9565-1b02fc0f5217.png
  Captured: 2026-09-21 17:59:43 UTC
  Source report: https://urlscan.io/result/01a0c51f-744a-741a-9565-1b02fc0f5217/
  SHA-256: 803796ccfce668c79b47d65737a6b67033cf4e5b15ac7498bcf1f0231962cf36
- URLScan · 2026-09-22: https://screenshots.phishdestroy.io/us/01a0c87a-167d-7713-a510-0373440d14d3.png
  Captured: 2026-09-22 09:37:30 UTC
  Source report: https://urlscan.io/result/01a0c87a-167d-7713-a510-0373440d14d3/
  SHA-256: e07e2c7ba2dd98529e52d5313371c7c567eafd0a8cdeabb8403c58473b01d837

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T09:13:06Z",
        "uuid": "01a167ed-ad4b-7264-82d2-be4d9fa32ffe",
        "scanned_at": "2026-10-23T08:43:18Z",
        "final_url": "https://blik-parksde.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://blik-parksde.shop/",
                "from": "http://blik-parksde.shop/",
                "status": 307
            }
        ],
        "ip": "104.17.177.238",
        "ips": [
            "104.17.177.238"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "6c5d74593398868b7285edba64f53c5db909a6fd2cf4052b5a617609d3b62b5d",
        "cookies": [
            "__cf_bm"
        ],
        "tls": {
            "san": [
                "blik-parksde.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "blik-parksde.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-12T08:33:19Z",
            "valid_from": "2026-10-14T07:33:22Z"
        },
        "domain_age_days": 131,
        "apex_age_days": 131,
        "tls_age_days": 9,
        "tls_valid_days": 90,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 89,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T08:43:03Z",
        "uuid": "1bbdb6ae-dd4c-43ad-9e97-52a2078c001e",
        "scanned_at": "2026-10-23T08:39:40Z",
        "final_url": "https://blik-parksde.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://blik-parksde.shop/",
                "status": 200
            }
        ],
        "dom_hash": "33b14fe1c5cd553746abc25e5abaa8716c1d0f0dc178e66b66208def8a6cde21",
        "doc_hash": "c9b84d5fb0b4875626ddca6b57ec2668a34e39387e851317eed935b6551a0065",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "blik-parksde.shop",
                "type": "A",
                "value": "104.17.177.238"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.17.177.238",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T09:10:33Z",
        "analysis_at": "2026-10-15T21:24:21Z",
        "stats": {
            "timeout": 0,
            "harmless": 50,
            "malicious": 5,
            "suspicious": 4,
            "undetected": 33
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "G-Data": "phishing",
            "Fortinet": "spam",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "LevelBlue": "suspicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "first_seen": "2026-06-13T13:25:26Z",
        "dns": [
            {
                "ttl": 600,
                "type": "SOA",
                "rname": "admin.ec-dns.com",
                "value": "ns1.ec-dns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.ec-dns.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "104.17.177.238"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.ec-dns.com"
            }
        ],
        "dns_at": "2026-10-15T23:27:54Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "blik-parksde.shop"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "3f26f246c8f9da1a0e650aaf1fa7bf97",
            "sha256": "b474fea8980b7b85ac3ac731f560d9f73a90efec77c9510eba2eff10c809c957",
            "subject": "blik-parksde.shop",
            "valid_to": "2027-01-12T08:33:19Z",
            "valid_from": "2026-10-14T07:33:22Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T08:43:25Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "blik-parksde.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T08:34:28Z",
            "first": "2026-10-23T08:34:28Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 1085
        },
        "social_tags": {
            "title": "500 Internal Server Error",
            "robots": "noindex, nofollow"
        },
        "trackers": {
            "requests": 65,
            "trackers": [
                {
                    "name": "Facebook",
                    "company": "Meta",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 15
                },
                {
                    "name": "Facebook Custom Audience",
                    "company": "Meta",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 7
                },
                {
                    "name": "Google Translate",
                    "company": "Google",
                    "country": "US",
                    "category": "Customer Interaction",
                    "requests": 1
                },
                {
                    "name": "Google APIs",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                },
                {
                    "name": "Alibaba",
                    "company": "Alibaba",
                    "country": "CN",
                    "category": "Misc",
                    "requests": 2
                },
                {
                    "name": "Facebook Connect",
                    "company": "Meta",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 8
                },
                {
                    "name": "TikTok Analytics",
                    "company": "ByteDance Inc",
                    "country": "KY",
                    "category": "Site Analytics",
                    "requests": 5
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 228,
                "tls": 18,
                "wait": 361,
                "connect": 7,
                "download": 1
            },
            "response_ms": 615
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 219,
            "co2_grams": 0,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "1.193.216.193",
                    "host": "ns2.ec-dns.com"
                },
                {
                    "ip": "183.253.57.192",
                    "host": "ns1.ec-dns.com"
                }
            ],
            "zone": "blik-parksde.shop"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "_fbp",
                    "same_site": "Lax"
                },
                {
                    "name": "_auth_debug"
                },
                {
                    "name": "_baehgf_vid"
                },
                {
                    "name": "_baehgf_cvid"
                },
                {
                    "name": "_baehgf_vs"
                },
                {
                    "name": "utm_source"
                },
                {
                    "name": "utm_medium"
                },
                {
                    "name": "order_utm_history"
                },
                {
                    "name": "landing_page"
                },
                {
                    "name": "_baehgf_ka"
                },
                {
                    "name": "first_http_referer"
                },
                {
                    "name": "first_visit_time"
                },
                {
                    "name": "currency_code",
                    "session": true
                },
                {
                    "name": "PHPSESSID",
                    "session": true
                },
                {
                    "name": "__cf_bm",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "_BZIHDAE_ua",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_BZIHDAE_pu",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_BZIHDAE_tz",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_BZIHDAE_ss",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_BZIHDAE_lang",
                    "secure": true,
                    "same_site": "None"
                }
            ]
        },
        "location": {
            "ip": "104.17.177.238",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "blik-parksde.shop"
        },
        "dns": {
            "A": [
                "104.17.177.238"
            ],
            "NS": [
                "ns2.ec-dns.com",
                "ns1.ec-dns.com"
            ],
            "SOA": "{\"nsname\": \"ns1.ec-dns.com\", \"hostmaster\": \"admin.ec-dns.com\", \"serial\": 1781353403, \"refresh\": 3600, \"retry\": 300, \"expire\": 1209600, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "104.17.177.238",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://blik-parksde.shop"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```