# PhishDestroy domain threat record: parik.vip

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/parik.vip/
Machine-readable companion: https://phishdestroy.io/domain/parik.vip/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 07:58:44 UTC
- Last availability or vendor check: 2026-10-27 12:31:02 UTC
- Stored record updated: 2026-10-27 23:24:06 UTC
- VirusTotal detections in the stored snapshot: 3/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: mastercard

## Stored infrastructure

- Observed IP address: 199.36.158.100
- Registrar in stored WHOIS data: NAMECHEAP INC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-02 14:10:39 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17c66-7304-7705-b10b-058e1fa17dad/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/parik.vip
- Certificate Transparency search: https://crt.sh/?q=%25.parik.vip
- Web Archive lookup: https://web.archive.org/web/*/https://parik.vip/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed parik.vip as a suspicious domain based on three malicious detections from phishing‑related vendors on VirusTotal. The domain was first seen by PhishDestroy on 2026-10-27. The recorded page title advertises an online casino and sports‑betting service for Ukraine and an HTTP 200 response was recorded on that date.

How the scam works
The listing reflects a generic phishing risk where a site may try to lure visitors into revealing credentials or payment details. No specific credential‑harvesting form, wallet‑draining script, or other malicious payload was observed on the captured page.

Evidence
VirusTotal scanned the domain on 2026-10-27 and returned three malicious detections from alphaMountain.ai, CRDF and CyRadar. Google Safe Browsing checked the same day and reported no flag. URLScan captured the site twice: a 2026-10-15 capture received a clean verdict, while a 2026-10-27 capture was marked malicious with a 98 score by its ML engine. Cloudflare Radar flagged the domain as phishing and malicious on 2026-10-27. OTX listed three pulses referencing the domain, and PhishDestroy’s internal blocklist contains the entry; external blocklists showed no matches on the check date.

Infrastructure
The domain was registered with NameCheap on 2026-10-02 and points to the IP 199.36.158.100, which belongs to Fastly, Inc. in the United States. DNS uses Cloudflare nameservers jo.ns.cloudflare.com and keenan.ns.cloudflare.com. The TLS certificate, issued by Google Trust Services, lists unrelated SANs and is valid until 2027-01-05; no DNSSEC records were observed.

What to do
Visitors should avoid entering any credentials or payment information on the site; if they have already done so, they should change affected passwords and monitor accounts for unauthorized activity. Defenders can add parik.vip to phishing blocklists and review logs for connections to the recorded IP address. Continue monitoring VirusTotal, Cloudflare Radar and other threat feeds for any status changes.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17c66-7304-7705-b10b-058e1fa17dad/
Cloudflare Radar report: https://radar.cloudflare.com/scan/cae2d2a3-f91c-40b4-8ae7-8fae241d1262
URLQuery report: https://urlquery.net/report/43c861bb-7b74-4da0-863f-d79b9f520c98
Stored capture screenshot: https://i.ibb.co/xKdv7xVZ/30f00ab7d514.png
Cloudflare Radar screenshot (2026-10-27T08:02:15Z): https://screenshots.phishdestroy.io/cf/cae2d2a3-f91c-40b4-8ae7-8fae241d1262.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/43c861bb-7b74-4da0-863f-d79b9f520c98.png
URLScan screenshot (2026-10-06T18:29:31Z): https://screenshots.phishdestroy.io/us/01a1127a-47fb-7569-9ac9-7f6ca151595d.png
URLScan capture report: https://urlscan.io/result/01a1127a-47fb-7569-9ac9-7f6ca151595d/
URLScan screenshot (2026-10-15T07:02:46Z): https://screenshots.phishdestroy.io/us/01a13e5e-c398-727c-b3e7-4092fc17e743.png
URLScan capture report: https://urlscan.io/result/01a13e5e-c398-727c-b3e7-4092fc17e743/
URLScan screenshot (2026-10-27T07:59:19Z): https://screenshots.phishdestroy.io/us/01a17c5e-de35-710a-b8c9-55adc57afb8a.png
URLScan capture report: https://urlscan.io/result/01a17c5e-de35-710a-b8c9-55adc57afb8a/
URLScan screenshot (2026-10-27T08:02:39Z): https://screenshots.phishdestroy.io/us/01a17c61-e2f4-714e-9595-330f981f68f9.png
URLScan capture report: https://urlscan.io/result/01a17c61-e2f4-714e-9595-330f981f68f9/
VirusTotal report: https://www.virustotal.com/gui/domain/parik.vip
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=parik.vip
Archived copy: https://web.archive.org/web/20261027080005/https://parik.vip/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 08:34:03 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/xKdv7xVZ/30f00ab7d514.png
  Captured: 2026-10-27 08:08:25 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a17c66-7304-7705-b10b-058e1fa17dad.png
  Captured: 2026-10-27 08:08:25 UTC
  Source report: https://urlscan.io/result/01a17c66-7304-7705-b10b-058e1fa17dad/
- URLScan capture 2: https://screenshots.phishdestroy.io/01a13e5e-c398-727c-b3e7-4092fc17e743.png
  Captured: 2026-10-27 07:58:44 UTC
  Source report: https://urlscan.io/result/01a17c66-7304-7705-b10b-058e1fa17dad/
- URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a1127a-47fb-7569-9ac9-7f6ca151595d.png
  Captured: 2026-10-06 18:29:31 UTC
  Source report: https://urlscan.io/result/01a1127a-47fb-7569-9ac9-7f6ca151595d/
  SHA-256: f0b09ae7e16e1a461d2d266f07185228ba9be33589c7b052246865abbc0f0143
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17c5e-de35-710a-b8c9-55adc57afb8a.png
  Captured: 2026-10-27 07:59:19 UTC
  Source report: https://urlscan.io/result/01a17c5e-de35-710a-b8c9-55adc57afb8a/
  SHA-256: f0b09ae7e16e1a461d2d266f07185228ba9be33589c7b052246865abbc0f0143
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17c61-e2f4-714e-9595-330f981f68f9.png
  Captured: 2026-10-27 08:02:39 UTC
  Source report: https://urlscan.io/result/01a17c61-e2f4-714e-9595-330f981f68f9/
  SHA-256: f0b09ae7e16e1a461d2d266f07185228ba9be33589c7b052246865abbc0f0143
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/cae2d2a3-f91c-40b4-8ae7-8fae241d1262.png
  Captured: 2026-10-27 08:02:15 UTC
  Source report: https://radar.cloudflare.com/scan/cae2d2a3-f91c-40b4-8ae7-8fae241d1262
  SHA-256: 7675d5cdc0ea4c3421754fb9d2b7f212d10e98f19ed79fb883c8cc6455442f20
- URLQuery: https://screenshots.phishdestroy.io/uq/43c861bb-7b74-4da0-863f-d79b9f520c98.png
  Source report: https://urlquery.net/report/43c861bb-7b74-4da0-863f-d79b9f520c98
  SHA-256: b1c309066aa82ea459b5e6d52f5305ca4cfa9b9e334994f6eb873e2f4f6534bd
- URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a13e5e-c398-727c-b3e7-4092fc17e743.png
  Captured: 2026-10-15 07:02:46 UTC
  Source report: https://urlscan.io/result/01a13e5e-c398-727c-b3e7-4092fc17e743/
  SHA-256: f0b09ae7e16e1a461d2d266f07185228ba9be33589c7b052246865abbc0f0143

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T08:33:40Z",
        "uuid": "01a17c66-7304-7705-b10b-058e1fa17dad",
        "scanned_at": "2026-10-27T08:07:37Z",
        "final_url": "https://parik.vip/",
        "status": 200,
        "ip": "199.36.158.100",
        "ips": [
            "199.36.158.100"
        ],
        "asns": [
            "54113"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "prematch.win",
            "premik.live"
        ],
        "doc_hash": "52333d1c569f47cbda6e6a91667fe5404a60d5d9c0435980e21647ac18399392",
        "tls": {
            "san": [
                "margdarshakagency.in",
                "pensiunealidomoisei.ro",
                "tessavox.com",
                "padelboard.io",
                "www.padelboard.io",
                "ts-arch.com",
                "shittyhomeowners.com",
                "www.ts-arch.com",
                "stockinfo.doldari.com",
                "www.kiddoview.app"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WR3",
            "subject": "margdarshakagency.in",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-05T20:06:09Z",
            "valid_from": "2026-10-07T19:07:36Z"
        },
        "domain_age_days": 24,
        "apex_age_days": 24,
        "tls_age_days": 19,
        "tls_valid_days": 90,
        "requests": 6,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31556926",
            "x-frame-options": "DENY",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T08:03:11Z",
        "uuid": "cae2d2a3-f91c-40b4-8ae7-8fae241d1262",
        "scanned_at": "2026-10-27T08:02:15Z",
        "final_url": "https://parik.vip/",
        "status": 200,
        "history": [
            {
                "url": "https://parik.vip/",
                "status": 200
            }
        ],
        "dom_hash": "ab381ddd3bd37fd807016174500d428c6c4a75ebb85c6cc0397357be18c2a22a",
        "doc_hash": "52333d1c569f47cbda6e6a91667fe5404a60d5d9c0435980e21647ac18399392",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains",
            "Phishing",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "parik.vip",
                "type": "A",
                "value": "199.36.158.100"
            }
        ],
        "dnssec_valid": false,
        "ip": "199.36.158.100",
        "verdict": {
            "tags": [
                "phishing"
            ],
            "malicious": true,
            "categories": [
                "phishing"
            ]
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-10-02T16:10:39Z",
            "updated": "2026-10-07T16:10:43Z",
            "expires": "2027-10-02T16:10:39Z",
            "nameservers": [
                "jo.ns.cloudflare.com",
                "keenan.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T08:32:48Z",
        "analysis_at": "2026-10-27T07:57:35Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 3,
            "suspicious": 0,
            "undetected": 36
        },
        "detections": {
            "CRDF": "malicious",
            "CyRadar": "phishing",
            "alphaMountain.ai": "phishing"
        },
        "reputation": 0,
        "registrar": "NAMECHEAP INC",
        "created": "2026-10-02T16:10:39Z",
        "expires": "2027-10-02T16:10:39Z",
        "updated": "2026-10-02T16:33:02Z",
        "first_seen": "2026-10-02T21:48:03Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=OhQCzEF_WAfAbTh-ls0X_m9VWkBprb1qn4vG9s-_8zk"
            },
            {
                "ttl": 3600,
                "type": "A",
                "value": "199.36.158.100"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jo.ns.cloudflare.com"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "hosting-site=parik-vip"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "keenan.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "jo.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-27T07:57:59Z",
        "jarm": "29d3fd00029d29d00041d41d00041d6b5eefa2404a56c2ced79a0d16afe36c",
        "cert": {
            "san": [
                "margdarshakagency.in",
                "pensiunealidomoisei.ro",
                "tessavox.com",
                "padelboard.io",
                "www.padelboard.io",
                "ts-arch.com",
                "shittyhomeowners.com",
                "www.ts-arch.com",
                "stockinfo.doldari.com",
                "www.kiddoview.app"
            ],
            "issuer": "Google Trust Services / WR3",
            "serial": "b4541e8b8ae9d0fd122cb4f223a51baa",
            "sha256": "73e24e4ca4d707d0b612ba37de4d5223a3729cee260b73122b9218ef1eb2e4a0",
            "subject": "margdarshakagency.in",
            "valid_to": "2027-01-05T20:06:09Z",
            "valid_from": "2026-10-07T19:07:36Z"
        },
        "whois": {
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068",
            "registrar_url": "http://www.namecheap.com",
            "created": "2026-10-02T16:10:39Z",
            "updated": "1-01-01T00:00:00Z",
            "expires": "2027-10-02T16:10:39Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited",
                "serverTransferProhibited"
            ],
            "nameservers": [
                "jo.ns.cloudflare.com",
                "keenan.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "server transfer prohibited"
            ],
            "events": {
                "registration": "2026-10-02T16:10:39Z",
                "registrar expiration": "2027-10-02T16:10:39Z",
                "last update of RDAP database": "2026-10-27T07:57:59Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T08:03:33Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "parik.vip"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T08:00:05Z",
            "first": "2026-10-27T08:00:05Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 12825
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://parik.vip/sitemap-index.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "ogUrl": "https://parik.vip/",
            "title": "Parik24 — офіційний сайт казино та ставок на спорт | Парік24",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1",
            "ogImage": "https://parik.vip/og.jpg",
            "ogTitle": "Parik24 — офіційний сайт казино та ставок на спорт | Парік24",
            "keywords": "parik24, parik 24, парік24, парик24, парік 24, казино parik24, parik24 офіційний сайт, онлайн казино Україна, ставки на спорт, букмекерська контора, слоти, бонуси, фріспіни",
            "ogSiteName": "Parik24",
            "themeColor": "#f2f740",
            "description": "Parik24 (Парік24, Парик24): офіційний сайт онлайн-казино та букмекера в Україні. Тисячі слотів, live-казино, ставки на спорт, фрібети, фріспіни та виплати в гривні.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://parik.vip/",
            "ogDescription": "Parik24 (Парік24, Парик24): офіційний сайт онлайн-казино та букмекера в Україні. Тисячі слотів, live-казино, ставки на спорт, фрібети, фріспіни та виплати в гривні."
        },
        "trackers": {
            "requests": 6
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 219,
                "tls": 53,
                "wait": 23,
                "connect": 64,
                "download": 22
            },
            "response_ms": 381
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 51418,
            "co2_grams": 0.0019,
            "cleaner_than": 36
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.32.172",
                    "host": "jo.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.44.11",
                    "host": "keenan.ns.cloudflare.com"
                }
            ],
            "zone": "parik.vip"
        },
        "location": {
            "ip": "199.36.158.100",
            "asn": "54113",
            "org": "Fastly, Inc.",
            "city": "Mountain View",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WR3",
            "subject": "margdarshakagency.in"
        },
        "dns": {
            "A": [
                "199.36.158.100"
            ],
            "NS": [
                "keenan.ns.cloudflare.com",
                "jo.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"jo.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416777287, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "hosting-site=parik-vip",
                "google-site-verification=OhQCzEF_WAfAbTh-ls0X_m9VWkBprb1qn4vG9s-_8zk"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31556926",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": "DENY",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31556926",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "199.36.158.100",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://parik.vip"
            ]
        },
        "linked_pages": {
            "external": [
                "https://prematch.win/",
                "https://prematch.win/",
                "https://premik.live/"
            ],
            "external_count": 3,
            "internal_count": 5
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-10-02T16:10:39Z",
            "updated": "2026-10-07T16:10:43Z",
            "expires": "2027-10-02T16:10:39Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp",
                "serverTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "jo.ns.cloudflare.com",
                "keenan.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31556926",
                "x-frame-options": "DENY",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()"
            }
        }
    }
}
```