# PhishDestroy domain threat record: centrumrowerowe-sale.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/centrumrowerowe-sale.shop/
Machine-readable companion: https://phishdestroy.io/domain/centrumrowerowe-sale.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 05:17:22 UTC
- Last availability or vendor check: 2026-10-25 11:00:36 UTC
- Stored record updated: 2026-10-25 15:21:29 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.76.127
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-09 00:52:48 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16c6b-fe89-757e-aadf-8c8cf9005b23/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/centrumrowerowe-sale.shop
- Certificate Transparency search: https://crt.sh/?q=%25.centrumrowerowe-sale.shop
- Web Archive lookup: https://web.archive.org/web/*/https://centrumrowerowe-sale.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed centrumrowerowe-sale.shop as a suspicious domain based on a high number of malicious detections from VirusTotal. The recorded page title reads "ostrzeżenie - c*l" but no further page content was captured. The domain was first seen by PhishDestroy on 2026-10-24 and returned an HTTP 200 response on that date. Google Safe Browsing did not flag the site at the time of checking.

How the scam works
The classification relies on multiple security vendors that have identified the domain as associated with phishing, malware, or spam. Such domains are commonly used to host deceptive pages that harvest credentials, deliver malicious payloads, or redirect users to harmful content. No specific malicious behavior was observed on the captured page, so the risk is inferred from the aggregated vendor assessments.

Evidence
VirusTotal reported 12 malicious and 5 suspicious detections out of 92 engines on 2026-10-21, with vendors such as alphaMountain.ai, BitDefender, G-Data and others marking it malicious. URLScan captured the site twice: on 2026-10-14 the engine verdict was malicious, and on 2026-10-24 the machine‑learning score was 90 indicating malicious, though the overall verdict was neutral. OTX listed four pulses referencing the domain as of 2026-10-24. PhishDestroy’s internal blocklist flagged the domain, while external blocklists showed no entries on the same date.

Infrastructure
The recorded IPs were 104.21.76.127 and 172.67.195.120, both associated with Cloudflare and listed under Canada in the observed network data. TLS was provided by Google Trust Services with a certificate valid from 2026-09-06 to 2026-12-05. The domain is 107 days old, uses Cloudflare nameservers, and does not have DNSSEC enabled; ports 80, 443 and 8080 were observed as open.

What to do
Visitors should avoid entering any credentials or personal data on the site and should change passwords if they suspect they may have been submitted. Organizations can block the exact domain and its resolved IPs in web filters and monitor DNS logs for queries to the listed addresses. Security teams should treat the domain as potentially malicious and apply standard phishing and malware mitigation controls.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16c6b-fe89-757e-aadf-8c8cf9005b23/
Cloudflare Radar report: https://radar.cloudflare.com/scan/04fa39c7-6329-452b-bbe2-58bb7cd8c180
Stored capture screenshot: https://i.ibb.co/h12yrXf7/b930c8c45f88.png
Cloudflare Radar screenshot (2026-10-24T05:23:20Z): https://screenshots.phishdestroy.io/cf/04fa39c7-6329-452b-bbe2-58bb7cd8c180.png
URLScan screenshot (2026-09-23T13:37:58Z): https://screenshots.phishdestroy.io/us/01a0ce7c-90bb-76a7-b6e7-8f6517485d9e.png
URLScan capture report: https://urlscan.io/result/01a0ce7c-90bb-76a7-b6e7-8f6517485d9e/
URLScan screenshot (2026-10-24T05:29:21Z): https://screenshots.phishdestroy.io/us/01a16c62-7aa4-740d-a0a3-2bf8b88a8069.png
URLScan capture report: https://urlscan.io/result/01a16c62-7aa4-740d-a0a3-2bf8b88a8069/
VirusTotal report: https://www.virustotal.com/gui/domain/centrumrowerowe-sale.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=centrumrowerowe-sale.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 05:54:39 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/h12yrXf7/b930c8c45f88.png
  Captured: 2026-10-24 05:39:58 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a16c6b-fe89-757e-aadf-8c8cf9005b23.png
  Captured: 2026-10-24 05:39:58 UTC
  Source report: https://urlscan.io/result/01a16c6b-fe89-757e-aadf-8c8cf9005b23/
- URLScan capture 2: https://screenshots.phishdestroy.io/01a13b3a-e78a-76f9-95e1-517d4183a5fd.png
  Captured: 2026-10-24 05:17:22 UTC
  Source report: https://urlscan.io/result/01a16c6b-fe89-757e-aadf-8c8cf9005b23/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/04fa39c7-6329-452b-bbe2-58bb7cd8c180.png
  Captured: 2026-10-24 05:23:20 UTC
  Source report: https://radar.cloudflare.com/scan/04fa39c7-6329-452b-bbe2-58bb7cd8c180
  SHA-256: fd7343842149cc8207df7eb2f462e8847d1674cb40715f268bf0a2a5edb6aa7d
- URLScan · 2026-09-23: https://screenshots.phishdestroy.io/us/01a0ce7c-90bb-76a7-b6e7-8f6517485d9e.png
  Captured: 2026-09-23 13:37:58 UTC
  Source report: https://urlscan.io/result/01a0ce7c-90bb-76a7-b6e7-8f6517485d9e/
  SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16c62-7aa4-740d-a0a3-2bf8b88a8069.png
  Captured: 2026-10-24 05:29:21 UTC
  Source report: https://urlscan.io/result/01a16c62-7aa4-740d-a0a3-2bf8b88a8069/
  SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T05:53:58Z",
        "uuid": "01a16c6b-fe89-757e-aadf-8c8cf9005b23",
        "scanned_at": "2026-10-24T05:39:44Z",
        "final_url": "https://centrumrowerowe-sale.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://centrumrowerowe-sale.shop/",
                "from": "http://centrumrowerowe-sale.shop/",
                "status": 307
            }
        ],
        "ip": "104.21.76.127",
        "ips": [
            "104.21.76.127"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "6c5d74593398868b7285edba64f53c5db909a6fd2cf4052b5a617609d3b62b5d",
        "cookies": [
            "__cf_bm"
        ],
        "tls": {
            "san": [
                "centrumrowerowe-sale.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "centrumrowerowe-sale.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-05T06:25:04Z",
            "valid_from": "2026-09-06T05:25:08Z"
        },
        "domain_age_days": 107,
        "apex_age_days": 107,
        "tls_age_days": 48,
        "tls_valid_days": 90,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 90,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T05:27:12Z",
        "uuid": "04fa39c7-6329-452b-bbe2-58bb7cd8c180",
        "scanned_at": "2026-10-24T05:23:20Z",
        "final_url": "https://centrumrowerowe-sale.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://centrumrowerowe-sale.shop/",
                "status": 200
            }
        ],
        "dom_hash": "8b28b48180c8ea5a9c51ebfcd1420c0e170625a6db0511a0af4417607adc4399",
        "doc_hash": "0fd50a0aded88ff6605eabca82b9eeceb9a98c35f03a3719a3fe6c58f7003d93",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "centrumrowerowe-sale.shop",
                "type": "A",
                "value": "172.67.195.120"
            },
            {
                "name": "centrumrowerowe-sale.shop",
                "type": "A",
                "value": "104.21.76.127"
            },
            {
                "name": "centrumrowerowe-sale.shop",
                "type": "AAAA",
                "value": "2606:4700:3034::6815:4c7f"
            },
            {
                "name": "centrumrowerowe-sale.shop",
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:c378"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.195.120",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T05:52:53Z",
        "analysis_at": "2026-10-21T12:57:17Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 12,
            "suspicious": 5,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Fortinet": "spam",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "LevelBlue": "suspicious",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Google": "technology",
            "Sophos": "phishing and fraud",
            "Webroot": "Phishing and Other Frauds",
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "first_seen": "2026-07-09T03:45:44Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "nero.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.76.127"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.195.120"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:c378"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nero.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "perla.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:4c7f"
            }
        ],
        "dns_at": "2026-10-21T13:02:39Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "centrumrowerowe-sale.shop"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "c5d2e974a9a555100e35487f950752e6",
            "sha256": "c570c253fbfc02de167c9ade4a709770ba242f93feca6d2c91cefc56fccde34e",
            "subject": "centrumrowerowe-sale.shop",
            "valid_to": "2026-12-05T06:25:04Z",
            "valid_from": "2026-09-06T05:25:08Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T05:27:23Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "centrumrowerowe-sale.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-24T05:20:33Z",
            "first": "2026-10-12T07:34:24Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.08,
            "avg_page_bytes": 41691
        },
        "social_tags": {
            "title": "ostrzeżenie - c***l"
        },
        "trackers": {
            "requests": 12,
            "trackers": [
                {
                    "name": "Facebook",
                    "company": "Meta",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Facebook Connect",
                    "company": "Meta",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 2
                },
                {
                    "name": "TikTok Analytics",
                    "company": "ByteDance Inc",
                    "country": "KY",
                    "category": "Site Analytics",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 31,
                "wait": 363,
                "connect": 6,
                "download": 341
            },
            "response_ms": 743
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 416857,
            "co2_grams": 0.0152,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.34.203",
                    "host": "perla.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.28",
                    "host": "nero.ns.cloudflare.com"
                }
            ],
            "zone": "centrumrowerowe-sale.shop"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "_aiihgf_vid"
                },
                {
                    "name": "_aiihgf_cvid"
                },
                {
                    "name": "_aiihgf_vs"
                },
                {
                    "name": "PHPSESSID",
                    "session": true
                },
                {
                    "name": "__cf_bm",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAAC_ua",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAAC_pu",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAAC_tz",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAAC_ss",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAAC_lang",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAAC_vs",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_DFAAC_dt",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_ttp",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_tt_enable_cookie"
                },
                {
                    "name": "_ttp"
                },
                {
                    "name": "_fbp",
                    "same_site": "Lax"
                },
                {
                    "name": "ttcsid"
                },
                {
                    "name": "ttcsid_D39M5HRC77U0JLJ5JEMG"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3036::ac43:c378",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "centrumrowerowe-sale.shop"
        },
        "dns": {
            "A": [
                "104.21.76.127",
                "172.67.195.120"
            ],
            "NS": [
                "nero.ns.cloudflare.com",
                "perla.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"nero.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414341961, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3036::ac43:c378",
                "2606:4700:3034::6815:4c7f"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3036::ac43:c378",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://centrumrowerowe-sale.shop"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```