# intersasdasro.shop recorded fashion storefront page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/intersasdasro.shop/ Machine-readable companion: https://phishdestroy.io/domain/intersasdasro.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-10-29 06:05:29 UTC - Selected availability observation: 2026-11-10T11:23:53Z - Stored record updated: 2026-11-10 15:23:17 UTC - VirusTotal detections in the stored snapshot: 20/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: flagged ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): stripe ## Stored infrastructure - Observed IP address: 104.18.71.116 - Registrar in stored WHOIS data: ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED - Last stored HTTP status: 200 (observed: 2026-11-10T11:23:53Z) - Registration date in stored WHOIS data: 2026-08-17 10:08:10 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1864c-51d5-766a-9acf-2c803f429df8/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/intersasdasro.shop - Certificate Transparency search: https://crt.sh/?q=%25.intersasdasro.shop - Web Archive lookup: https://web.archive.org/web/*/https://intersasdasro.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records intersasdasro.shop as a captured fashion storefront page offering product browsing, search, cart and account access. The stored capture shows intersasdasro.shop presenting a fashion storefront branded "dollargenearsale," with a "New Product Release" hero section, category navigation for dresses and autumn fashion, a search field, cart and account links, and discounted product listings. Visitors could browse categories, search products, and open cart or account pages. The stored VirusTotal result reports 20 of 92 engines flagged the domain: 16 malicious and 4 suspicious. Representative labels include Sophos and Kaspersky as "phishing," ESET as "suspicious," and Netcraft as "malicious." These scanner results do not establish impersonation or current behavior. Package revision: 48d2adb503bb9820669fac432f3ca944da483d75bd47dfb58eeceab7fb10fa3f Text generated (not scan time): 2026-10-29 07:09:40 Reviewed evidence snapshot: {"domain":"intersasdasro.shop","screenshot_available":true,"virustotal":{"detections":20,"engines":92,"malicious":16,"suspicious":4,"retrieved_date":"2026-10-29","analysis_date":"2026-10-18","flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","Netcraft","SOCRadar","Kaspersky","LevelBlue","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Google Safe Browsing","Forcepoint ThreatSeeker"],"vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","Netcraft":"malicious","SOCRadar":"phishing","Kaspersky":"phishing","LevelBlue":"suspicious","Seclookup":"malicious","Gridinsoft":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T06:06:48Z","final_host":"intersasdasro.shop","captured_on":"2026-10-29"}} Source facts (timestamps as stored): {"record_id":1703644,"first_recorded_at":"2026-10-29 07:05:29","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":20,"denominator":92,"malicious":16,"suspicious":4,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","Netcraft":"malicious","SOCRadar":"phishing","Kaspersky":"phishing","LevelBlue":"suspicious","Seclookup":"malicious","Gridinsoft":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-18T15:40:20Z","checked_at":null,"fetched_at":"2026-10-29T06:06:07Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":20,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Google Safe Browsing","Gridinsoft","Kaspersky","LevelBlue","Lionic","Netcraft","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-18 15:40:20","checked_at":"2026-10-29 07:06:09","fetched_at":"2026-10-29 06:06:10","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","Netcraft":"malicious","SOCRadar":"phishing","Kaspersky":"phishing","LevelBlue":"suspicious","Seclookup":"malicious","Gridinsoft":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","Netcraft","SOCRadar","Kaspersky","LevelBlue","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Google Safe Browsing","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":41,"malicious":16,"suspicious":4,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"flagged","verdict":1,"checked_at":"2026-11-09 18:01:01"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-10-29 08:30:25"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1703644,"scope":"checked_url","observed_at":"2026-11-10T11:23:53Z","http_status":200,"http_observed_at":"2026-11-10T11:23:53Z","stored_http_code":200,"stored_http_observed_at":"2026-11-10T11:23:53Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-09T23:32:20Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-10-29: https://screenshots.phishdestroy.io/01a1864c-51d5-766a-9acf-2c803f429df8.png Captured: 2026-10-29 06:15:19 UTC Source report: https://urlscan.io/result/01a1864c-51d5-766a-9acf-2c803f429df8/ - URLScan · 2026-08-19: https://screenshots.phishdestroy.io/us/01a01896-cab9-742d-af27-079d53196955.png Captured: 2026-08-19 05:55:40 UTC Source report: https://urlscan.io/result/01a01896-cab9-742d-af27-079d53196955/ SHA-256: 0d6c54f52b35d1b227b755680a4d85a9ece069555f014d9511717edb7240247a - URLScan · 2026-08-18: https://screenshots.phishdestroy.io/us/01a01736-fd73-74e8-af91-86949365b6a0.png Captured: 2026-08-18 23:31:23 UTC Source report: https://urlscan.io/result/01a01736-fd73-74e8-af91-86949365b6a0/ SHA-256: 0d6c54f52b35d1b227b755680a4d85a9ece069555f014d9511717edb7240247a - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/57a5fc00-8955-48ef-80ab-4aacfa91e520.png Captured: 2026-10-29 06:06:48 UTC Source report: https://radar.cloudflare.com/scan/57a5fc00-8955-48ef-80ab-4aacfa91e520 SHA-256: c4016b0b0ecf8c3c04cceb52132997bc57f8fb439a29da45690214d27a6cb73a ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-29T06:22:47Z", "uuid": "01a1864c-51d5-766a-9acf-2c803f429df8", "scanned_at": "2026-10-29T06:15:19Z", "final_url": "https://intersasdasro.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://intersasdasro.shop/", "from": "http://intersasdasro.shop/", "status": 307 } ], "ip": "104.18.71.116", "domains": [ "fonts.gstatic.com" ], "ips": [ "142.251.110.94", "104.18.71.116" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "doc_hash": "09b6a63fb780ebbd6e9b26442b45b01af21be3c37ac21caa788516ab9cc3417e", "script_hashes": [ "261b4452025faecd4ff36156620d9bdb49790e545206bf4527a217a96962921e", "116d7eeeacf08918407986499b576a062c4e87e66cf943c9cca02b781d583b25", "4eaa145bcdf6d0e78f5df591fda28cbd2e336356ec2702ea43b13e7d5ef967d2", "98b0fbb2ee603053b00a5827ec16454d5633a7473438f2af3f8e84d936283425" ], "globals": [ "_intersasdasroshop_", "_BBZAFIC_", "themeConfig", "shop_theme", "storeConfig", "shop_config", "lang", "shop_lang", "C_SETTINGS", "_GET_C_SETTING_", "oemcart_client_browser", "oemcart_current_template", "oemcart_store_id", "oemcart_user_id", "oemcart_time_zone", "oemcart_page_ca", "oemcart_user_email", "oemcart_pv_id", "oemcart_data_from", "oemcart_user", "oemcart_currency", "oemcart_currency_code", "oemcart_currency_rate", "oemcart_currency_lcoin", "oemcart_currency_rcoin", "oemcart_currency_decimal", "oemcart_base_currency", "oemcart_base_currency_code", "oemcart_base_currency_rate", "oemcart_base_currency_lcoin", "oemcart_base_currency_rcoin", "oemcart_base_currency_decimal", "oemcart_website_domain", "oemcart_real_domain", "oemcart_site_type", "oemcart_client_country", "oemcart_protocal_type", "oemcart_website_language", "oemcart_utm_source", "oemcart_utm_medium" ], "cookies": [ "_auth_debug", "_adegcz_vid", "_adegcz_cvid", "_adegcz_vs", "utm_source", "utm_medium", "order_utm_history", "landing_page", "_adegcz_ka", "first_http_referer", "first_visit_time", "PHPSESSID", "__cf_bm", "_BBZAFIC_ua", "_BBZAFIC_pu", "_BBZAFIC_tz", "_BBZAFIC_ss", "_BBZAFIC_lang", "_BBZAFIC_vs", "_BBZAFIC_dt" ], "tls": { "san": [ "intersasdasro.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "intersasdasro.shop", "protocol": "TLS 1.3", "valid_to": "2027-01-13T15:12:17Z", "valid_from": "2026-10-15T14:12:20Z" }, "domain_age_days": 72, "apex_age_days": 72, "tls_age_days": 13, "tls_valid_days": 90, "requests": 30, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "fakeshop" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Fake Shop" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-29T06:08:48Z", "uuid": "57a5fc00-8955-48ef-80ab-4aacfa91e520", "scanned_at": "2026-10-29T06:06:48Z", "final_url": "https://intersasdasro.shop/", "status": 200, "history": [ { "url": "https://intersasdasro.shop/", "status": 200 } ], "dom_hash": "789a5d4e237a245bf505626e948a35e4b010e3cf703ad312039fc726f9f324fb", "doc_hash": "d020a29ef72b3105bc9adc041650ae6087c5e0b4cfafce1a73330e2f6dde76be", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "intersasdasro.shop", "type": "A", "value": "104.18.71.116" } ], "dnssec_valid": false, "ip": "127.0.1.8", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-29T06:06:07Z", "analysis_at": "2026-10-18T15:40:20Z", "stats": { "timeout": 0, "harmless": 41, "malicious": 16, "suspicious": 4, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "spam", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "suspicious", "Seclookup": "malicious", "Gridinsoft": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Google Safe Browsing": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-08-17T13:06:35Z", "dns": [ { "ttl": 600, "type": "A", "value": "104.18.71.116" }, { "ttl": 21600, "type": "NS", "value": "ns2.ec-dns.com" }, { "ttl": 21600, "type": "NS", "value": "ns1.ec-dns.com" }, { "ttl": 600, "type": "SOA", "rname": "admin.ec-dns.com", "value": "ns1.ec-dns.com" } ], "dns_at": "2026-10-18T15:45:49Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "intersasdasro.shop" ], "issuer": "Google Trust Services / WE1", "serial": "a1171e580eff910b134b5bfa9b8f59bf", "sha256": "cecc27afb116aa4c2df2f458517a5dc69e2cc8c496b1623453091d771d353d98", "subject": "intersasdasro.shop", "valid_to": "2027-01-13T15:12:17Z", "valid_from": "2026-10-15T14:12:20Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-29T06:09:11Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "intersasdasro.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-29T06:06:09Z", "first": "2026-10-29T06:06:09Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 5284 }, "social_tags": { "title": "500 Internal Server Error", "robots": "noindex, nofollow" }, "trackers": { "requests": 26, "trackers": [ { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 1610, "tls": 25, "wait": 198, "connect": 6, "download": 0 }, "response_ms": 1839 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 219, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "61.158.128.7", "host": "ns2.ec-dns.com" }, { "ip": "183.253.57.192", "host": "ns1.ec-dns.com" } ], "zone": "intersasdasro.shop" }, "cookies": { "cookies": [ { "name": "_auth_debug" }, { "name": "_adegcz_vid" }, { "name": "_adegcz_cvid" }, { "name": "_adegcz_vs" }, { "name": "utm_source" }, { "name": "utm_medium" }, { "name": "order_utm_history" }, { "name": "landing_page" }, { "name": "_adegcz_ka" }, { "name": "first_http_referer" }, { "name": "first_visit_time" }, { "name": "PHPSESSID", "session": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" }, { "name": "_BBZAFIC_ua", "secure": true, "same_site": "None" }, { "name": "_BBZAFIC_pu", "secure": true, "same_site": "None" }, { "name": "_BBZAFIC_tz", "secure": true, "same_site": "None" }, { "name": "_BBZAFIC_ss", "secure": true, "same_site": "None" }, { "name": "_BBZAFIC_lang", "secure": true, "same_site": "None" }, { "name": "_BBZAFIC_vs", "secure": true, "same_site": "None" }, { "name": "_BBZAFIC_dt", "secure": true, "same_site": "None" } ] }, "location": { "ip": "104.18.71.116", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "intersasdasro.shop" }, "dns": { "A": [ "104.18.71.116" ], "NS": [ "ns2.ec-dns.com", "ns1.ec-dns.com" ], "SOA": "{\"nsname\": \"ns1.ec-dns.com\", \"hostmaster\": \"admin.ec-dns.com\", \"serial\": 1786968554, \"refresh\": 3600, \"retry\": 300, \"expire\": 1209600, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "104.18.71.116", "family": 4 }, "redirects": { "chain": [ "https://intersasdasro.shop" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/57a5fc00-8955-48ef-80ab-4aacfa91e520.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/57a5fc00-8955-48ef-80ab-4aacfa91e520","captured_at":"2026-10-29T06:06:48Z","sha256":"c4016b0b0ecf8c3c04cceb52132997bc57f8fb439a29da45690214d27a6cb73a","model_image_sha256":"9df6a7d83833c3f34174742540c26a7b86355bf3572862c3504a13f3d9432620","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/intersasdasro.shop/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1703644, "scope": "checked_url", "observed_at": "2026-11-10T11:23:53Z", "http_status": 200, "http_observed_at": "2026-11-10T11:23:53Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-10T11:23:53Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-09T23:32:20Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```