# PhishDestroy domain threat record: dealq.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/dealq.shop/ Machine-readable companion: https://phishdestroy.io/domain/dealq.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 17:40:09 UTC - Last availability or vendor check: 2026-10-25 17:55:17 UTC - Stored record updated: 2026-10-25 19:47:27 UTC - VirusTotal detections in the stored snapshot: 2/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: paypal ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-09-28 12:47:45 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17432-6c08-75a8-ac36-6a6acddd8c98/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/dealq.shop - Certificate Transparency search: https://crt.sh/?q=%25.dealq.shop - Web Archive lookup: https://web.archive.org/web/*/https://dealq.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/bMbPk7t4/de069b2ed6e5.png Captured: 2026-10-25 17:55:17 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a17432-6c08-75a8-ac36-6a6acddd8c98.png Captured: 2026-10-25 17:55:17 UTC Source report: https://urlscan.io/result/01a17432-6c08-75a8-ac36-6a6acddd8c98/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a153c9-8cb2-70dd-a1d2-172597260c59.png Captured: 2026-10-25 17:40:09 UTC Source report: https://urlscan.io/result/01a17432-6c08-75a8-ac36-6a6acddd8c98/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7b838215-e37c-4101-ace3-927e753c6660.png Captured: 2026-10-25 17:43:01 UTC Source report: https://radar.cloudflare.com/scan/7b838215-e37c-4101-ace3-927e753c6660 SHA-256: 2ac1797b4f5d0504fe99be238100b269a718407ca47e91f8398b9793c5609416 - URLScan · 2026-10-18: https://screenshots.phishdestroy.io/us/01a14f87-4389-7316-ad98-f09ecaae1d6c.png Captured: 2026-10-18 15:00:36 UTC Source report: https://urlscan.io/result/01a14f87-4389-7316-ad98-f09ecaae1d6c/ SHA-256: 78fd87307360fe9224edaf4120036846b0a8cabe47639f9a35de08c39d3ab1bb - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17429-67a5-71ac-8f17-ec82be999ace.png Captured: 2026-10-25 17:43:58 UTC Source report: https://urlscan.io/result/01a17429-67a5-71ac-8f17-ec82be999ace/ SHA-256: f98f6407bcc29292846b94a5988659e60e3b2d5d5339772d4c82f8faa5909132 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T18:14:15Z", "uuid": "01a17432-6c08-75a8-ac36-6a6acddd8c98", "scanned_at": "2026-10-25T17:53:51Z", "final_url": "https://dealq.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://dealq.shop/", "from": "http://dealq.shop/", "status": 307 } ], "ip": "188.114.97.3", "domains": [ "cdn.tuebucketcdn.com", "fonts.gstatic.com" ], "ips": [ "142.251.20.94", "43.174.196.27", "188.114.97.3" ], "asns": [ "15169", "139341", "13335" ], "countries": [ "US", "SG" ], "doc_hash": "d8a636cde6f877a490c63acdfeda0e9a5a5b9b78b9dbd5c8df23ddddedcdc6e0", "script_hashes": [ "749fc96cb07b13141550e29be8f92aa34aac2d030310d8ffd53650c840f917a7", "a62af29258561126c7c2449bdd589c0957fa816724f6698eac471bf24b5f5034", "0c66e42a1c1c4771847157afd621bd6a12f1905e3a933e51c5e7fcf997b06e80" ], "globals": [ "_dealqshop_", "_BBGEFEE_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source", "oemcart_utm_medium" ], "cookies": [ "_bbchdi_vid", "_bbchdi_cvid", "_bbchdi_vs", "utm_source", "utm_medium", "order_utm_history", "landing_page", "_bbchdi_ka", "first_http_referer", "first_visit_time", "PHPSESSID", "__cf_bm", "_BBGEFEE_ua", "_BBGEFEE_pu", "_BBGEFEE_tz", "_BBGEFEE_ss", "_BBGEFEE_lang", "_BBGEFEE_vs", "_BBGEFEE_dt" ], "tls": { "san": [ "dealq.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "dealq.shop", "protocol": "QUIC", "valid_to": "2027-01-14T14:45:59Z", "valid_from": "2026-10-16T13:46:05Z" }, "domain_age_days": 1385, "apex_age_days": 1385, "tls_age_days": 9, "tls_valid_days": 90, "requests": 31, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T17:44:21Z", "uuid": "7b838215-e37c-4101-ace3-927e753c6660", "scanned_at": "2026-10-25T17:43:01Z", "final_url": "https://dealq.shop/", "status": 200, "history": [ { "url": "https://dealq.shop/", "status": 200 } ], "dom_hash": "7128289c88cf77721b42df94c3d3282c41a21207c3381f94c36be639b4dc078e", "doc_hash": "abce3641754b60c4663c5702947e17c5949e1303dcd57fab4fc51e25cb598b3b", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "dealq.shop", "type": "A", "value": "188.114.96.0" }, { "name": "dealq.shop", "type": "A", "value": "188.114.97.0" }, { "name": "dealq.shop", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "dealq.shop", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "188.114.96.0", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T19:47:11Z", "analysis_at": "2026-10-21T11:58:15Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 2, "suspicious": 0, "undetected": 35 }, "detections": { "SOCRadar": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "created": "2022-11-09T00:00:00Z", "updated": "2022-11-09T00:00:00Z", "first_seen": "2023-11-13T16:32:27Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "carlane.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::ac43:a3ac" }, { "ttl": 21600, "type": "NS", "value": "etienne.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:3193" }, { "ttl": 300, "type": "A", "value": "172.67.163.172" }, { "ttl": 300, "type": "A", "value": "104.21.49.147" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "carlane.ns.cloudflare.com" } ], "dns_at": "2026-10-21T12:04:03Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "dealq.shop" ], "issuer": "Google Trust Services / WE1", "serial": "e7ebd1b4056565e30e05cb1d69d4b5f7", "sha256": "c1b454345e81ab1a7414b91cb7949297e3f21911c3c5ce58243d8bb8894d3dec", "subject": "dealq.shop", "valid_to": "2027-01-14T14:45:59Z", "valid_from": "2026-10-16T13:46:05Z" }, "whois": [] }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T17:44:43Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "dealq.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-25T17:40:35Z", "first": "2023-12-17T17:41:28Z", "changes": 2, "days_archived": 3, "scans_per_day": 0, "avg_page_bytes": 34675 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "ogUrl": "https://dealq.shop", "title": "Garmin Official Site", "ogType": "website", "ogTitle": "Garmin Official Site", "keywords": "GARMIN", "ogSiteName": "GARMIN", "description": "Garmin Official Site", "twitterCard": "summary_large_image", "twitterSite": "https://dealq.shop", "canonicalUrl": "https://dealq.shop", "ogDescription": "Garmin Official Site" }, "trackers": { "requests": 22, "trackers": [ { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 9, "tls": 28, "wait": 251, "connect": 9, "download": 278 }, "response_ms": 575 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 635711, "co2_grams": 0.0233, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "108.162.195.61", "host": "etienne.ns.cloudflare.com" }, { "ip": "108.162.194.25", "host": "carlane.ns.cloudflare.com" } ], "zone": "dealq.shop" }, "cookies": { "cookies": [ { "name": "_bbchdi_vid" }, { "name": "_bbchdi_cvid" }, { "name": "_bbchdi_vs" }, { "name": "utm_source" }, { "name": "utm_medium" }, { "name": "order_utm_history" }, { "name": "landing_page" }, { "name": "_bbchdi_ka" }, { "name": "first_http_referer" }, { "name": "first_visit_time" }, { "name": "currency_code", "session": true }, { "name": "PHPSESSID", "session": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" }, { "name": "_BBGEFEE_ua", "secure": true, "same_site": "None" }, { "name": "_BBGEFEE_pu", "secure": true, "same_site": "None" }, { "name": "_BBGEFEE_tz", "secure": true, "same_site": "None" }, { "name": "_BBGEFEE_ss", "secure": true, "same_site": "None" }, { "name": "_BBGEFEE_lang", "secure": true, "same_site": "None" }, { "name": "_BBGEFEE_vs", "secure": true, "same_site": "None" }, { "name": "_BBGEFEE_dt", "secure": true, "same_site": "None" } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "dealq.shop" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "etienne.ns.cloudflare.com", "carlane.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"carlane.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418212887, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::3", "2a06:98c1:3120::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::3", "family": 6 }, "redirects": { "chain": [ "https://dealq.shop" ] }, "linked_pages": { "internal_count": 85 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```