# lockerscanner.shop Align Fragment drag challenge | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/lockerscanner.shop/
Machine-readable companion: https://phishdestroy.io/domain/lockerscanner.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-31 21:19:26 UTC
- Last availability or vendor check: 2026-10-31 23:00:30 UTC
- Stored record updated: 2026-10-31 23:20:36 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 193.187.110.10
- Last stored HTTP status: 200

## Evidence links

- URLScan report: https://urlscan.io/result/01a1805b-d8cc-751d-be07-bbe646c3b3cb/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/lockerscanner.shop
- Certificate Transparency search: https://crt.sh/?q=%25.lockerscanner.shop
- Web Archive lookup: https://web.archive.org/web/*/https://lockerscanner.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy describes lockerscanner.shop, a captured page presenting an Align Fragment drag-to-fit puzzle challenge.

The captured page at lockerscanner.shop presents an "Align Fragment" challenge rather than a store or login form. Its main interaction asks the visitor to drag a floating puzzle piece onto a notch visible in a noisy image, with a caption repeating "Drag the piece to the correct position." The HTML title reads "Loading," which conflicts with the rendered challenge content, and a session-like identifier appears in the page footer.

The stored VirusTotal domain result reports 0 detections out of 92 engines.
Package revision: 17e9dbc3c28af715e8a06f9af281265dcbffcc48a85c062df8ea188a426f581c
Text generated (not scan time): 2026-10-31 23:28:33
Reviewed evidence snapshot: {"domain":"lockerscanner.shop","screenshot_available":true,"page_title":"Loading","initial_ai_description":"The page content 'Loading ORDER · TAP IN SEQUENCE tap the targets Tap the targets. Click the shapes in the order shown in the thumbnail strip. 0 / 0 Click the shapes in the order shown above. Privacy · Terms euwest1::1793481554-nnLinol33CMi57YVjPSR0GlXaXnN5sI5' does not clearly indicate phishing, crypto-drainer, fake-login, or scam activity. It appears to be an interactive element or a challenge, but without further context or interaction, its malicious intent cannot be determined.","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":0,"engines":92,"malicious":0,"suspicious":0,"retrieved_date":"2026-10-31","analysis_date":"2026-10-19","scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-31T21:22:15Z"},"virustotal_public_summary":"The stored VirusTotal domain result reports 0 detections out of 92 engines.","page_paragraph_target_characters":573}
Source facts (timestamps as stored): {"record_id":1723760,"first_recorded_at":"2026-10-31 22:19:26","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-19T11:10:40Z","checked_at":"2026-10-31 23:22:22","fetched_at":"2026-10-31T22:22:13Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-10-19 11:10:40","checked_at":"2026-10-31 23:22:22","fetched_at":"2026-10-31 22:22:23","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-31 23:22:26"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 00:00:30"}}

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1805b-d8cc-751d-be07-bbe646c3b3cb.png
  Captured: 2026-10-31 21:19:26 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a1805b-d8cc-751d-be07-bbe646c3b3cb.png
  Source report: https://urlscan.io/result/01a1805b-d8cc-751d-be07-bbe646c3b3cb/
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a1799d-ee3b-744e-8606-db8e11af37e3.png
  Captured: 2026-10-26 19:09:23 UTC
  Source report: https://urlscan.io/result/01a1799d-ee3b-744e-8606-db8e11af37e3/
  SHA-256: 5a43a7d0d56aa3e81f4d8d1ad20a24c149901a64a61f3d67dbcf87a73a8fad64
- URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a193d5-27b0-770f-bdf6-20325746d9d0.png
  Captured: 2026-10-31 21:19:49 UTC
  Source report: https://urlscan.io/result/01a193d5-27b0-770f-bdf6-20325746d9d0/
  SHA-256: 0f26236f1661165ac37b69b405fd3cdec37164d95875108e8b5b058e4183042f
- URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a193d7-38f1-702f-bf6d-5c561fcc1624.png
  Captured: 2026-10-31 21:22:04 UTC
  Source report: https://urlscan.io/result/01a193d7-38f1-702f-bf6d-5c561fcc1624/
  SHA-256: e79227a9a9cddb94460cb35c6486a574bf357ca858a69ca22d6d46a51e691e83
- URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a193d7-5661-7368-8323-abae9778eac6.png
  Captured: 2026-10-31 21:22:15 UTC
  Source report: https://urlscan.io/result/01a193d7-5661-7368-8323-abae9778eac6/
  SHA-256: 380ccb5597be6d01b96cf851c151d2f8d8170255fc0362c594ddeb05f3457eb0
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5be2bf1d-972c-46ac-a004-1280792321a7.png
  Captured: 2026-10-31 21:19:47 UTC
  Source report: https://radar.cloudflare.com/scan/5be2bf1d-972c-46ac-a004-1280792321a7
  SHA-256: 249090263ed7ee8d2519e02595d5894dbd687bd50718dbebb9d64a1027e945bd

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-31T21:20:05Z",
        "uuid": "01a1805b-d8cc-751d-be07-bbe646c3b3cb",
        "scanned_at": "2026-10-28T02:34:32Z",
        "final_url": "https://lockerscanner.shop/",
        "status": 200,
        "ip": "193.187.110.10",
        "ips": [
            "193.187.110.10"
        ],
        "asns": [
            "153947"
        ],
        "countries": [
            "TR"
        ],
        "doc_hash": "2b32f007b9b1464b20e853b28bd7b70142573cf4072586d5a1ae43814f5a85b7",
        "globals": [
            "_da0f",
            "_a6b0",
            "_fd88",
            "_s60e",
            "_x866",
            "_xd12",
            "_xa5b",
            "_xdf1",
            "_x226",
            "_xf9d",
            "_x492",
            "_xae5",
            "_xd5d",
            "_x3b7",
            "_x8e1",
            "_xd34",
            "_x854",
            "_x939",
            "_x3e6",
            "_x052",
            "_x8e2",
            "_xd00",
            "_x92d",
            "_xc41",
            "_xa77",
            "_xbec",
            "_xb70",
            "_x91e",
            "_x0fa",
            "_x1dd",
            "_xf0b",
            "_x2ab",
            "_xb1a",
            "_x83a",
            "_x7ac",
            "_x1c1",
            "_x65f",
            "_xaca",
            "_x4c8",
            "_xc50"
        ],
        "cookies": [
            "sil_ses",
            "__Host-sil_ses",
            "sil_gate",
            "__Host-sil_gate"
        ],
        "tls": {
            "san": [
                "lockerscanner.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "lockerscanner.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-17T08:31:36Z",
            "valid_from": "2026-10-19T08:31:37Z"
        },
        "domain_age_days": 7,
        "apex_age_days": 7,
        "tls_age_days": 8,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-31T21:20:08Z",
        "uuid": "5be2bf1d-972c-46ac-a004-1280792321a7",
        "scanned_at": "2026-10-31T21:19:47Z",
        "final_url": "https://lockerscanner.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://lockerscanner.shop/",
                "status": 200
            }
        ],
        "dom_hash": "bc948235e9efeda3c8d176de53504109efd904a0c8a0ba260d9c0d5db04d3bb4",
        "doc_hash": "b4189356cb71d56b1314f665d8d6a11d3063dd8112bc6ee759ead27f1afd1b70",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "lockerscanner.shop",
                "type": "A",
                "value": "193.187.110.10"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.28"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-31T22:22:13Z",
        "analysis_at": "2026-10-19T11:10:40Z",
        "stats": {
            "timeout": 0,
            "harmless": 0,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 92
        },
        "reputation": 0,
        "first_seen": "2026-10-19T11:10:45Z",
        "dns": [
            {
                "ttl": 600,
                "type": "A",
                "value": "193.187.110.10"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "a.dnspod.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "b.dnspod.com"
            },
            {
                "ttl": 180,
                "type": "SOA",
                "rname": "domainadmin.dnspod.com",
                "value": "a.dnspod.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "c.dnspod.com"
            }
        ],
        "dns_at": "2026-10-19T11:10:45Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "lockerscanner.shop"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "58f41a2492c0c47fe7c3c9fe989d31a1be8",
            "sha256": "8639d4acd494eddb325f780d140e1b3147fca5efb01b99255c73007bcd344479",
            "subject": "lockerscanner.shop",
            "valid_to": "2027-01-17T08:31:36Z",
            "valid_from": "2026-10-19T08:31:37Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-31T21:20:25Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "lockerscanner.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-31T21:19:35Z",
            "first": "2026-10-19T11:46:08Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.08,
            "avg_page_bytes": 13507
        },
        "social_tags": {
            "title": "Loading",
            "robots": "noindex,nofollow"
        },
        "trackers": {
            "requests": 1
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 170,
                "tls": 78,
                "wait": 325,
                "connect": 40,
                "download": 277
            },
            "response_ms": 890
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 2188302,
            "co2_grams": 0.08,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "43.134.249.75",
                    "host": "c.dnspod.com"
                },
                {
                    "ip": "101.227.168.75",
                    "host": "a.dnspod.com"
                },
                {
                    "ip": "220.196.136.75",
                    "host": "b.dnspod.com"
                }
            ],
            "zone": "lockerscanner.shop"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "sil_ses",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "__Host-sil_ses",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "sil_gate",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "__Host-sil_gate",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                }
            ]
        },
        "location": {
            "ip": "193.187.110.10",
            "asn": "153947",
            "org": "Fast Zone IT",
            "city": "Istanbul",
            "country": "TR"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "lockerscanner.shop"
        },
        "dns": {
            "A": [
                "193.187.110.10"
            ],
            "NS": [
                "b.dnspod.com",
                "c.dnspod.com",
                "a.dnspod.com"
            ],
            "SOA": "{\"nsname\": \"a.dnspod.com\", \"hostmaster\": \"domainadmin.dnspod.com\", \"serial\": 1792851163, \"refresh\": 3600, \"retry\": 180, \"expire\": 1209600, \"minttl\": 180}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "193.187.110.10",
            "family": 4
        },
        "headers": {
            "headers": []
        }
    }
}
```