# PhishDestroy domain threat record: fdrzwkc.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/fdrzwkc.shop/
Machine-readable companion: https://phishdestroy.io/domain/fdrzwkc.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-26 20:41:25 UTC
- Stored record updated: 2026-10-26 21:31:43 UTC
- VirusTotal detections in the stored snapshot: 13/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 45.151.91.66
- Registrar in stored WHOIS data: Spaceship, Inc.
- Registration date in stored WHOIS data: 2026-10-11 15:53:23 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1354f-9c0e-7155-a3da-64ddda9f1602/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/fdrzwkc.shop
- Certificate Transparency search: https://crt.sh/?q=%25.fdrzwkc.shop
- Web Archive lookup: https://web.archive.org/web/*/https://fdrzwkc.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed fdrzwkc.shop on its internal blocklist because automated scans returned multiple malicious indicators. No page title or content was captured during the intake, so the assessment relies on external detections. The domain was first seen by PhishDestroy on 2026-10-26, fifteen days after its registration on 2026-10-11.

How the scam works
The available detections suggest the site could be used for typical phishing or malicious redirection, but no specific credential‑stealing form, wallet request, or fake‑exchange page was observed. In general, domains flagged as suspicious may attempt to lure users into entering personal data or downloading malicious payloads, though this particular page provided no concrete evidence of such behavior.

Evidence
VirusTotal scanned the domain on 2026-10-22 and reported 9 malicious and 4 suspicious detections out of 92 engines, totaling 13 detections. Google Safe Browsing checked the domain on 2026-10-26 and did not flag it. urlscan.io captured the site on 2026-10-13; its engine verdict marked the URL as malicious with a score of 97, while the overall verdict was clean with a score of 0. OTX listed one pulse referencing the domain on 2026-10-26. PhishDestroy’s internal blocklist marked the domain as malicious on 2026-10-26, and external blocklists showed a single Cloudflare Family block on the same date.

Infrastructure
The domain was registered on 2026-10-11 through Spaceship, Inc. The recorded DNS entry pointed to IP address 45.151.91.66, associated with ASN 209101, recorded in Bulgaria. TLS was provided by Let’s Encrypt, valid from 2026-10-12 to 2027-01-10, and the certificate listed fdrzwkc.shop and www.fdrzwkc.shop as SANs. Authoritative name servers were launch1.spaceship.net and launch2.spaceship.net.

What to do
If you visited the site, avoid entering any credentials, personal information, or cryptocurrency keys. Change passwords for any accounts where credentials may have been entered and monitor those accounts for unauthorized activity. Network defenders should block fdrzwkc.shop at the firewall or DNS resolver and log any attempts to resolve or contact the domain for further investigation.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1354f-9c0e-7155-a3da-64ddda9f1602/
Cloudflare Radar report: https://radar.cloudflare.com/scan/7f151e70-b159-40fa-a47c-9577481cb25b
Stored capture screenshot: https://urlscan.io/screenshots/01a1354f-9c0e-7155-a3da-64ddda9f1602.png
VirusTotal report: https://www.virustotal.com/gui/domain/fdrzwkc.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=fdrzwkc.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:50:14 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1354f-9c0e-7155-a3da-64ddda9f1602.png
  Captured: 2026-10-26 20:41:25 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1354f-9c0e-7155-a3da-64ddda9f1602.png
  Source report: https://urlscan.io/result/01a1354f-9c0e-7155-a3da-64ddda9f1602/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7f151e70-b159-40fa-a47c-9577481cb25b.png
  Captured: 2026-10-26 20:44:56 UTC
  Source report: https://radar.cloudflare.com/scan/7f151e70-b159-40fa-a47c-9577481cb25b
  SHA-256: 86754cf415cddfea7018e2586aea8d85eb4cbbcba8f23cdff757b8cb2c6e48e2

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:49:04Z",
        "uuid": "01a1354f-9c0e-7155-a3da-64ddda9f1602",
        "scanned_at": "2026-10-13T12:49:41Z",
        "final_url": "https://fdrzwkc.shop/",
        "status": 200,
        "redirected": "https-only",
        "ip": "45.151.91.66",
        "ips": [
            "45.151.91.66"
        ],
        "asns": [
            "209101"
        ],
        "countries": [
            "BG"
        ],
        "doc_hash": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "tls": {
            "san": [
                "fdrzwkc.shop",
                "www.fdrzwkc.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "fdrzwkc.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-10T14:09:15Z",
            "valid_from": "2026-10-12T14:09:16Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "LiteSpeed",
            "content-type": "text/html; charset=UTF-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T21:23:44Z",
        "uuid": "7f151e70-b159-40fa-a47c-9577481cb25b",
        "scanned_at": "2026-10-26T20:44:56Z",
        "final_url": "https://fdrzwkc.shop/",
        "history": [
            {
                "url": "https://fdrzwkc.shop/",
                "status": 0
            }
        ],
        "dom_hash": "222edc6576ce4f900a55dd02c5523f77c5fa64ee8b4e540f3ff8452026c169a8",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains",
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "fdrzwkc.shop",
                "type": "A",
                "value": "45.151.91.66"
            }
        ],
        "dnssec_valid": true,
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T20:50:28Z",
        "analysis_at": "2026-10-22T18:09:00Z",
        "stats": {
            "timeout": 0,
            "harmless": 48,
            "malicious": 9,
            "suspicious": 4,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Sophos": "phishing",
            "Fortinet": "spam",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "first_seen": "2026-10-12T16:08:36Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch1.spaceship.net"
            },
            {
                "ttl": 3600,
                "type": "A",
                "value": "45.151.91.66"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "support.spaceship.com",
                "value": "launch1.spaceship.net"
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch2.spaceship.net"
            }
        ],
        "dns_at": "2026-10-22T18:14:19Z",
        "jarm": "1dd40d40d00040d00042d43d000000ffd4768d0539f26c1eea462bed21f172",
        "cert": {
            "san": [
                "fdrzwkc.shop",
                "www.fdrzwkc.shop"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "601568b4948f0d55caac331813e327515b7",
            "sha256": "c32dd847d4af3b570815abde300981fbdc89b2c511342ea1ba2ac381cd66245d",
            "subject": "fdrzwkc.shop",
            "valid_to": "2027-01-10T14:09:15Z",
            "valid_from": "2026-10-12T14:09:16Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:49:56Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "fdrzwkc.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.27.32",
                    "host": "launch2.spaceship.net"
                },
                {
                    "ip": "162.159.26.38",
                    "host": "launch1.spaceship.net"
                }
            ],
            "zone": "fdrzwkc.shop"
        },
        "dns": {
            "A": [
                "45.151.91.66"
            ],
            "NS": [
                "launch1.spaceship.net",
                "launch2.spaceship.net"
            ],
            "SOA": "{\"nsname\": \"launch1.spaceship.net\", \"hostmaster\": \"support.spaceship.com\", \"serial\": 1791817559, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3600}"
        }
    }
}
```