# PhishDestroy domain threat record: eurojackpot.net.pl

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/eurojackpot.net.pl/
Machine-readable companion: https://phishdestroy.io/domain/eurojackpot.net.pl/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 22:54:04 UTC
- Last availability or vendor check: 2026-10-25 23:04:36 UTC
- Stored record updated: 2026-10-26 00:02:33 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: visa

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Dynadot LLC
- Registrar country in stored WHOIS data: PL
- Last stored HTTP status: 200
- Registration date (registry RDAP, net.pl): 2003-03-25 11:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1754d-500a-73a7-a3f2-12db5bc2941d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/eurojackpot.net.pl
- Certificate Transparency search: https://crt.sh/?q=%25.eurojackpot.net.pl
- Web Archive lookup: https://web.archive.org/web/*/https://eurojackpot.net.pl/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated assessment classifies eurojackpot.net.pl as an impersonation phishing page. The recorded page title is “Oficjalne Powiadomienie”. The domain was first seen by PhishDestroy on 2026-10-25 and returned an HTTP 200 response at that time.

How the scam works
Impersonation phishing sites copy the look and language of a trusted brand—in this case a lottery service—to trick visitors into submitting login credentials, personal data, or payment information. Collected data can be used for account takeover, identity theft, or financial fraud.

Evidence
VirusTotal scanned the domain on 2026-10-23 and reported 16 detections from 92 engines, including 13 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Fortinet. Google Safe Browsing checked on 2026-10-26 did not flag the site, while urlscan.io’s 2026-10-26 analysis marked the URL as malicious by its engine score (71) despite an overall benign verdict. Cloudflare Radar on 2026-10-25 labeled the domain as phishing and malware, and OTX listed five pulses referencing the domain. PhishDestroy’s internal blocklist contains the domain, whereas external blocklists and Spamhaus showed no entry as of 2026-10-26.

Infrastructure
The domain is 3005 days old and is served through Cloudflare’s network, resolving to IPv4 addresses 188.114.96.3 and 188.114.97.3 located in Great Britain and to IPv6 addresses in the same network. TLS is provided by Google Trust Services, valid from 2026-10-04 to 2027-01-02, and the site uses Cloudflare’s WAF and HSTS. DNS records include A, AAAA, MX, NS and a SPF TXT record, all hosted by Cloudflare.

What to do
Visitors should avoid entering any credentials or personal data on the site and verify official EuroJackpot communications through known channels. Defenders can block eurojackpot.net.pl at the network perimeter, monitor for outbound connections, and educate users about impersonation phishing targeting lottery brands.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1754d-500a-73a7-a3f2-12db5bc2941d/
Cloudflare Radar report: https://radar.cloudflare.com/scan/b6876e3b-fea5-42ad-a7d7-e2e7d10d4129
Stored capture screenshot: https://i.ibb.co/rKX2P3z1/6f61c0a37e8f.png
Cloudflare Radar screenshot (2026-10-25T22:57:05Z): https://screenshots.phishdestroy.io/cf/b6876e3b-fea5-42ad-a7d7-e2e7d10d4129.png
VirusTotal report: https://www.virustotal.com/gui/domain/eurojackpot.net.pl
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=eurojackpot.net.pl
Archived copy: https://web.archive.org/web/20261025225459/https://eurojackpot.net.pl/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 00:02:11 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/rKX2P3z1/6f61c0a37e8f.png
  Captured: 2026-10-25 23:04:36 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a1754d-500a-73a7-a3f2-12db5bc2941d.png
  Captured: 2026-10-25 23:04:36 UTC
  Source report: https://urlscan.io/result/01a1754d-500a-73a7-a3f2-12db5bc2941d/
- URLScan capture 2: https://screenshots.phishdestroy.io/019fb799-d40d-7478-b9d7-2eba99d6afc8.png
  Captured: 2026-10-25 22:54:04 UTC
  Source report: https://urlscan.io/result/01a1754d-500a-73a7-a3f2-12db5bc2941d/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b6876e3b-fea5-42ad-a7d7-e2e7d10d4129.png
  Captured: 2026-10-25 22:57:05 UTC
  Source report: https://radar.cloudflare.com/scan/b6876e3b-fea5-42ad-a7d7-e2e7d10d4129
  SHA-256: 797af7571dd996b8c8226f4ae33b286bf8f7ff75e11b6ee037724851e3f6355c

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T23:29:43Z",
        "uuid": "01a1754d-500a-73a7-a3f2-12db5bc2941d",
        "scanned_at": "2026-10-25T23:02:52Z",
        "final_url": "https://eurojackpot.net.pl/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://eurojackpot.net.pl/",
                "from": "http://eurojackpot.net.pl/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.14.94",
            "142.251.20.95",
            "188.114.97.3"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "www.lotto.pl"
        ],
        "doc_hash": "843b5d3758824d54ed17f75e5c528262cbdc4290cd72027ba78c9d317df71301",
        "script_hashes": [
            "90a26fb1528d0cb8f09605a737a3cddd67557d54c3fc2da266e6659fd8381be6"
        ],
        "tls": {
            "san": [
                "eurojackpot.net.pl",
                "*.eurojackpot.net.pl"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "eurojackpot.net.pl",
            "protocol": "QUIC",
            "valid_to": "2027-01-02T20:51:42Z",
            "valid_from": "2026-10-04T19:53:01Z"
        },
        "domain_age_days": 3005,
        "apex_age_days": 3005,
        "tls_age_days": 21,
        "tls_valid_days": 90,
        "requests": 23,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 71,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T22:58:35Z",
        "uuid": "b6876e3b-fea5-42ad-a7d7-e2e7d10d4129",
        "scanned_at": "2026-10-25T22:57:05Z",
        "final_url": "https://eurojackpot.net.pl/",
        "status": 200,
        "history": [
            {
                "url": "https://eurojackpot.net.pl/",
                "status": 200
            }
        ],
        "dom_hash": "09d2f2971ec2d0fdaee6ec7770c025df14f91071ce078d7ca90dac1ba46bbfe4",
        "doc_hash": "bbd67c835169b27e2827ac371e92abb356a576b74a70b63bc17b67eff4020516",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "eurojackpot.net.pl",
                "type": "A",
                "value": "188.114.96.3"
            },
            {
                "name": "eurojackpot.net.pl",
                "type": "A",
                "value": "188.114.97.3"
            },
            {
                "name": "eurojackpot.net.pl",
                "type": "AAAA",
                "value": "2a06:98c1:3120::3"
            },
            {
                "name": "eurojackpot.net.pl",
                "type": "AAAA",
                "value": "2a06:98c1:3121::3"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.96.3",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot LLC",
            "created": "2026-03-04T09:35:51Z",
            "updated": "2026-06-08T17:47:10Z",
            "expires": "2027-03-04T09:35:51Z",
            "nameservers": [
                "elma.ns.cloudflare.com",
                "jack.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T23:58:24Z",
        "analysis_at": "2026-10-23T14:37:57Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "popularity": {
            "Majestic": 325469
        },
        "created": "2026-03-04T00:00:00Z",
        "updated": "2026-03-04T00:00:00Z",
        "first_seen": "2026-03-06T16:11:03Z",
        "dns": [
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 include:_spf.mx.cloudflare.net ~all"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "elma.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.182.4"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.59.175"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route2.mx.cloudflare.net",
                "priority": 28
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jack.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route1.mx.cloudflare.net",
                "priority": 87
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "elma.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route3.mx.cloudflare.net",
                "priority": 69
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:b604"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::6815:3baf"
            }
        ],
        "dns_at": "2026-10-23T14:39:13Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "eurojackpot.net.pl",
                "*.eurojackpot.net.pl"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "c2ca3b6687d1dd510e2b85f021307b7e",
            "sha256": "7f50a7e98cc125111f991d17b38bc5d16dc7e52f909934020c56ea41feb8b7a3",
            "subject": "eurojackpot.net.pl",
            "valid_to": "2027-01-02T20:51:42Z",
            "valid_from": "2026-10-04T19:53:01Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T22:58:52Z",
        "mail_config": {
            "mx": [
                "route3.mx.cloudflare.net",
                "route1.mx.cloudflare.net",
                "route2.mx.cloudflare.net"
            ],
            "spf": "v=spf1 include:_spf.mx.cloudflare.net ~all",
            "dane": true,
            "spf_lookups": 1
        },
        "caa_records": {
            "domain": "eurojackpot.net.pl"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T22:54:59Z",
            "first": "2026-03-28T03:28:22Z",
            "changes": 3,
            "days_archived": 4,
            "scans_per_day": 0.01,
            "avg_page_bytes": 6528
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://eurojackpot.net.pl/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "title": "Oficjalne Powiadomienie"
        },
        "trackers": {
            "requests": 1
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 27,
                "tls": 36,
                "wait": 200,
                "connect": 8,
                "download": 0
            },
            "response_ms": 271
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 2319,
            "co2_grams": 0.0001,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.59.121",
                    "host": "jack.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.154",
                    "host": "elma.ns.cloudflare.com"
                }
            ],
            "zone": "eurojackpot.net.pl"
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "eurojackpot.net.pl"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "MX": [
                "{\"exchange\": \"route2.mx.cloudflare.net\", \"priority\": 28}",
                "{\"exchange\": \"route3.mx.cloudflare.net\", \"priority\": 69}",
                "{\"exchange\": \"route1.mx.cloudflare.net\", \"priority\": 87}"
            ],
            "NS": [
                "jack.ns.cloudflare.com",
                "elma.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"elma.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416634653, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "v=spf1 include:_spf.mx.cloudflare.net ~all"
            ],
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains",
            "message": "HSTS header does not contain the preload directive."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": false,
            "xXSSProtection": "1; mode=block",
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000; includeSubDomains",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://eurojackpot.net.pl"
            ]
        },
        "rank": {
            "domain": "eurojackpot.net.pl"
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.eurojackpot.net.pl"
            ]
        },
        "whois": {
            "created": "2026-03-04T08:35:51Z",
            "updated": "2026-06-08T15:47:10Z",
            "expires": "2027-03-04T08:35:51Z",
            "nameservers": [
                "elma.ns.cloudflare.com."
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff"
            }
        }
    }
}
```