# flipraid.com Account Registration Page with Free Bonus Offer | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/flipraid.com/ Machine-readable companion: https://phishdestroy.io/domain/flipraid.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-29 15:07:44 UTC - Last availability or vendor check: 2026-10-30 12:10:23 UTC - Stored record updated: 2026-10-30 13:33:37 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 188.114.97.9 - Registrar in stored WHOIS data: DYNADOT LLC - Last stored HTTP status: 307 - Registration date in stored WHOIS data: 2026-08-17 07:06:32 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a18836-4c95-711d-90aa-8774bb2bf566/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/flipraid.com - Certificate Transparency search: https://crt.sh/?q=%25.flipraid.com - Web Archive lookup: https://web.archive.org/web/*/https://flipraid.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package The captured flipraid.com page presents an account creation form and free bonus instructions, reviewed by PhishDestroy for phishing indicators. The captured flipraid.com page is an account registration screen set against a fantasy illustration, with a panel headed "Create an Account" that collects an email, a password, and a promo code. A checkbox for agreeing to the Terms of Service and Privacy Policy sits above a blue Sign Up button, and a link below offers existing users a way to Sign In. Beneath the form, a heading reads "How to receive your free bonus," introducing a three-step offer section. PhishDestroy's VirusTotal analysis of the flipraid.com domain reports 1 flagged detection out of 92 engines, with 1 engine marking it malicious and 0 suspicious. Gridinsoft is the sole vendor issuing a verdict, labeling the domain "phishing". Package revision: fb3e7c8b83d0e0201134455d8e086de5cc37d9bd0852508baa43d64685f18e81 Text generated (not scan time): 2026-10-29 16:09:30 Reviewed evidence snapshot: {"domain":"flipraid.com","screenshot_available":true,"page_title":"Flipraid","initial_ai_description":"Insufficient page content for analysis","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-10-29","analysis_date":"2026-10-29","flagging_vendors":["Gridinsoft"],"vendor_labels":{"Gridinsoft":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T15:08:02Z","final_host":"flipraid.com","captured_on":"2026-10-29"}} Source facts (timestamps as stored): {"record_id":1706531,"first_recorded_at":"2026-10-29 16:07:44","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"Gridinsoft":"phishing"},"observed_at":"2026-10-29T03:32:28Z","checked_at":"2026-10-29 16:07:58","fetched_at":"2026-10-29T15:07:57Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["Gridinsoft"],"observed_at":"2026-10-29 03:32:28","checked_at":"2026-10-29 16:07:58","fetched_at":"2026-10-29 15:07:58","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-29 16:07:59"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-29 16:30:20"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-30 13:10:23"}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a18836-4c95-711d-90aa-8774bb2bf566.png Captured: 2026-10-29 15:12:35 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0af44-6c60-703b-94d8-f909c11f9473.png Captured: 2026-10-29 15:07:44 UTC Source report: https://urlscan.io/result/01a18836-4c95-711d-90aa-8774bb2bf566/ - URLScan · 2026-09-05: https://screenshots.phishdestroy.io/us/01a07269-a55a-723f-ae54-ff4cec7d149c.png Captured: 2026-09-05 16:32:11 UTC Source report: https://urlscan.io/result/01a07269-a55a-723f-ae54-ff4cec7d149c/ SHA-256: 27cf767cde8ceb1483f4034c7928861453d33ab3824cc078c9f948f88bf106cf - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a2abed60-1a10-4817-a6d3-ca63254ab148.png Captured: 2026-10-29 15:08:02 UTC Source report: https://radar.cloudflare.com/scan/a2abed60-1a10-4817-a6d3-ca63254ab148 SHA-256: 6b38708513f3480b8d69df1538003f3ec4217f45b251fc502763d2d7e81a90c6 - URLQuery: https://screenshots.phishdestroy.io/uq/c670ec20-ffe5-40d9-8b48-d7833d63167b.png Source report: https://urlquery.net/report/c670ec20-ffe5-40d9-8b48-d7833d63167b SHA-256: baca34b42584fa1bec4202c29dab61cf76336fbdff1aa09fd1b9bab2f7db4c01 - URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0af44-6c60-703b-94d8-f909c11f9473.png Captured: 2026-09-17 12:08:30 UTC Source report: https://urlscan.io/result/01a0af44-6c60-703b-94d8-f909c11f9473/ SHA-256: f7c1165146cfa4e9c1f2213def2df4c97ddee084fef5c9ee7e561ab7a0369f4c ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-29T15:14:29Z", "uuid": "01a18836-4c95-711d-90aa-8774bb2bf566", "scanned_at": "2026-10-29T15:10:34Z", "final_url": "https://flipraid.com/auth/second", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://flipraid.com/", "from": "http://flipraid.com/", "status": 307 }, { "to": "https://flipraid.com/auth", "from": "https://flipraid.com/", "status": 307 }, { "to": "https://flipraid.com/auth/second", "from": "https://flipraid.com/auth", "status": 307 } ], "ip": "104.21.42.196", "domains": [ "connect.facebook.net", "static.cloudflareinsights.com" ], "ips": [ "31.13.71.7", "104.16.79.73", "104.21.42.196" ], "asns": [ "32934", "13335" ], "countries": [ "US" ], "doc_hash": "8014350d2f887b5f2830490ed364581ff20e6b041b9b33080bc5d8d3f7c7cb28", "script_hashes": [ "4ccea564c13b57011edb5ca9e38f6d658e765b50f85fd0f948bf691f3a45e7e8", "debd3c4ed9ef60facb613486a740b15b415e5c4d0a83b0bb8149ee6a1fb31486", "dc5002855128e75204eaf72b14be546a9a8054f6a147609bad432abf40c35038", "0d9ea614dc437bb04fd1774a65987a82292fbaec02b08d65e25e8b85d872da88", "ced39053d4fb6ecf33d98551ec24f63641d7230f6f9171ad09e669440aad0916", "976c627c059148569256cde189242e3d48cbdced38f8f3304e4327e1a6ab1ef2", "0fef9fea9f846c83f110c3fb43ca999f0ec5af1ad9d300257fdd0cb8360e2f3b", "161af1d29d9d35c92c806eb72fdfb9b4aa75ed20bde882649a9ed20486eff4ad", "d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1", "b5485a734ca4ad4b548c66826c64f0e4056262dd5dfb2c4208d16d7e2008be7c" ], "globals": [ "$R", "fbq", "_fbq", "createFileRoute", "createLazyFileRoute", "__TSR_ROUTER__", "__SENTRY__", "__sentry_instrumentation_handlers__", "__TSS_START_OPTIONS__", "__TSR_ROUTER_CONTEXT__", "__cfBeacon" ], "cookies": [ "landing_visitor", "landing_choice" ], "tls": { "san": [ "flipraid.com", "*.flipraid.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "flipraid.com", "protocol": "QUIC", "valid_to": "2027-01-13T09:37:24Z", "valid_from": "2026-10-15T08:48:15Z" }, "domain_age_days": 73, "apex_age_days": 73, "tls_age_days": 14, "tls_valid_days": 90, "requests": 30, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-29T15:08:50Z", "uuid": "a2abed60-1a10-4817-a6d3-ca63254ab148", "scanned_at": "2026-10-29T15:08:02Z", "final_url": "https://flipraid.com/auth/second", "status": 200, "redirected": "same-domain", "history": [ { "url": "https://flipraid.com/", "status": 307 }, { "url": "https://flipraid.com/auth", "status": 307 }, { "url": "https://flipraid.com/auth/second", "status": 200 } ], "dom_hash": "8a466d2f5f0775aa3b6f6b843383a9a57a385d8eb9383f3bfa0bc3a6a2390ba2", "doc_hash": "9bab93dbc83df59b0d5c6d9b399498c5e76fc4c6ffd239fd8ae36354787038d3", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "flipraid.com", "type": "A", "value": "104.21.42.196" }, { "name": "flipraid.com", "type": "A", "value": "172.67.165.142" }, { "name": "flipraid.com", "type": "AAAA", "value": "2606:4700:3032::ac43:a58e" }, { "name": "flipraid.com", "type": "AAAA", "value": "2606:4700:3033::6815:2ac4" } ], "dnssec_valid": false, "ip": "127.0.1.11", "whois": { "registrar": "Dynadot Inc", "created": "2026-08-17T09:06:32Z", "updated": "2026-08-17T09:15:34Z", "expires": "2027-08-17T09:06:32Z", "nameservers": [ "nicole.ns.cloudflare.com", "vasilii.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-29T15:07:57Z", "analysis_at": "2026-10-29T03:32:28Z", "stats": { "timeout": 0, "harmless": 57, "malicious": 1, "suspicious": 0, "undetected": 34 }, "detections": { "Gridinsoft": "phishing" }, "reputation": 0, "registrar": "Dynadot Inc", "created": "2026-08-17T09:06:32Z", "expires": "2027-08-17T09:06:32Z", "updated": "2026-08-17T09:15:34Z", "first_seen": "2026-08-18T09:10:35Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:2ac4" }, { "ttl": 300, "type": "A", "value": "104.21.42.196" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "nicole.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "vasilii.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.165.142" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::ac43:a58e" }, { "ttl": 21600, "type": "NS", "value": "nicole.ns.cloudflare.com" } ], "dns_at": "2026-10-29T04:24:16Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "flipraid.com", "*.flipraid.com" ], "issuer": "Google Trust Services / WE1", "serial": "7e252a4b4f930bf513206b0f97fb6ded", "sha256": "f37ea1f98bf793941043e1d0200013ccdd038dce3ff0c71d3ecfa59247a29434", "subject": "flipraid.com", "valid_to": "2027-01-13T09:37:24Z", "valid_from": "2026-10-15T08:48:15Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-08-17T09:06:32Z", "updated": "2026-08-17T09:15:34Z", "expires": "2027-08-17T09:06:32Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "nicole.ns.cloudflare.com", "vasilii.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-08-17T09:06:32Z", "last changed": "2026-08-17T09:15:34Z", "registration": "2026-08-17T09:06:32Z", "registrar expiration": "2027-08-17T09:06:32Z", "last update of RDAP database": "2026-10-28T09:29:18Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-29T15:09:11Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "flipraid.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "Flipraid", "robots": "noindex,nofollow", "themeColor": "#0B1019" }, "trackers": { "requests": 18, "trackers": [ { "name": "Facebook", "company": "Meta", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Facebook Connect", "company": "Meta", "country": "US", "category": "Site Analytics", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 307, "timings": { "dns": 4, "tls": 81, "wait": 91, "connect": 7, "download": 0 }, "response_ms": 183 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 8693, "co2_grams": 0.0003, "cleaner_than": 75 }, "dns_server": { "ns": [ { "ip": "172.64.32.211", "host": "nicole.ns.cloudflare.com" }, { "ip": "172.64.35.26", "host": "vasilii.ns.cloudflare.com" } ], "zone": "flipraid.com" }, "cookies": { "cookies": [ { "name": "landing_visitor", "same_site": "Lax" }, { "name": "landing_choice", "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "flipraid.com" }, "dns": { "A": [ "188.114.97.9", "188.114.96.9" ], "NS": [ "nicole.ns.cloudflare.com", "vasilii.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"nicole.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418664628, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::9", "2a06:98c1:3120::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": true }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "redirects": { "chain": [ "https://flipraid.com", "/auth", "/auth/second" ], "count": 2 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-08-17T09:06:32Z", "updated": "2026-08-17T09:15:34Z", "expires": "2027-08-17T09:06:32Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "nicole.ns.cloudflare.com", "vasilii.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } } } } ```