# poletherapy.live — Pole Therapy App loading screen | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/poletherapy.live/
Machine-readable companion: https://phishdestroy.io/domain/poletherapy.live/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-11-02 01:57:47 UTC
- Last availability or vendor check: 2026-11-02 01:57:47 UTC
- Stored record updated: 2026-11-02 03:30:18 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-06 14:11:18 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a199f8-41c2-705d-bcb5-4647a452f5fa/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/poletherapy.live
- Certificate Transparency search: https://crt.sh/?q=%25.poletherapy.live
- Web Archive lookup: https://web.archive.org/web/*/https://poletherapy.live/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records the poletherapy.live capture showing the Pole Therapy App loading screen with its studio branding.

The captured poletherapy.live page presents itself as the Pole Therapy App, showing a loading screen rather than a finished site. A centered circular logo reads "POLE THERAPY by Weronika Kozanecka" above the Polish loading indicator "ŁADOWANIE...", set against a faded background photograph of two people in a studio setting. The page's main interaction is the loading state itself, with a cookie notice along the bottom of the screen, indicating the site was still initializing when captured.

The stored VirusTotal domain result reports 16 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "suspicious".
Package revision: 70e993e8296b2c82476b2c870e39b55871e813e7fd0ae8af437c779f658330f6
Text generated (not scan time): 2026-11-02 03:30:37
Reviewed evidence snapshot: {"domain":"poletherapy.live","screenshot_available":true,"page_title":"Pole Therapy App","original_meta_description":"Szkoła tańca w sercu poznańskiego Piątkowa! Miejsce stworzone z ogromnej pasji i miłości do tańca!","metadata_observed_on":"2026-11-02","virustotal":{"detections":16,"engines":92,"malicious":13,"suspicious":3,"retrieved_date":"2026-11-02","analysis_date":"2026-10-30","flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-02T02:29:19Z","final_host":"poletherapy.live","captured_on":"2026-11-02"},"plain_text_contract":1,"page_paragraph_target_words":94,"virustotal_public_summary":"The stored VirusTotal domain result reports 16 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"suspicious\".","page_paragraph_target_characters":517}
Source facts (timestamps as stored): {"record_id":1737601,"first_recorded_at":"2026-11-02 02:57:47","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":16,"denominator":92,"malicious":13,"suspicious":3,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-30T09:59:56Z","checked_at":"2026-11-02 03:29:11","fetched_at":"2026-11-02T02:29:10Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":16,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-10-30 09:59:56","checked_at":"2026-11-02 03:29:11","fetched_at":"2026-11-02 02:29:11","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 03:29:14"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-02 04:30:18"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-02 02:57:47"}}

## Stored page captures

- URLScan · 2026-11-02: https://screenshots.phishdestroy.io/01a199f8-41c2-705d-bcb5-4647a452f5fa.png
  Captured: 2026-11-02 01:56:05 UTC
  Source report: https://urlscan.io/result/01a199f8-41c2-705d-bcb5-4647a452f5fa/
- URLScan · 2026-08-19: https://screenshots.phishdestroy.io/us/01a0189d-81d5-754b-9a34-92b48dba8f07.png
  Captured: 2026-08-19 06:03:01 UTC
  Source report: https://urlscan.io/result/01a0189d-81d5-754b-9a34-92b48dba8f07/
  SHA-256: a1be4db45a2df8dc2586d1c894b0f992097d048977fb641a5ff5e9aa1cea0350
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f3f2ba8e-2398-4671-b31a-2cf10d82b353.png
  Captured: 2026-11-02 02:29:19 UTC
  Source report: https://radar.cloudflare.com/scan/f3f2ba8e-2398-4671-b31a-2cf10d82b353
  SHA-256: 7aee148eca105ea2cdf6f595270fd333e7736e09447b8da48b94d532e7eedb35

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-02T02:01:14Z",
        "uuid": "01a199f8-41c2-705d-bcb5-4647a452f5fa",
        "scanned_at": "2026-11-02T01:56:05Z",
        "final_url": "https://poletherapy.live/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://poletherapy.live/",
                "from": "http://poletherapy.live/",
                "status": 307
            }
        ],
        "ip": "172.67.177.244",
        "domains": [
            "api.poletherapy.pl",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "57.128.197.231",
            "142.251.40.234",
            "104.16.79.73",
            "172.67.177.244"
        ],
        "asns": [
            "16276",
            "15169",
            "13335"
        ],
        "countries": [
            "PL",
            "US"
        ],
        "link_domains": [
            "maps.app.goo.gl",
            "instagram.com",
            "www.instagram.com",
            "www.facebook.com"
        ],
        "social": [
            "https://instagram.com/weronika.kozanecka",
            "https://www.instagram.com/aleksi_xo",
            "https://www.instagram.com/elizawieck",
            "https://www.instagram.com/jakubowska_klaudiaa",
            "https://www.instagram.com/strengthmade_athletics",
            "https://www.instagram.com/sabisajgon",
            "https://www.instagram.com/wesolowska_jagoda",
            "https://www.instagram.com/zuza.kliks",
            "https://www.facebook.com/poletherapybyweronikakozanecka",
            "https://www.instagram.com/poletherapy_poznan"
        ],
        "doc_hash": "c8ea8d7ac2705b968bd4bbc9fde33b265ee2a5781879305cf078ce50eafe7595",
        "script_hashes": [
            "8fe110d6bbdfc8a5f4f0cabd7937572a29b41bdd0319f18b5820411f38a09f1e"
        ],
        "globals": [
            "isIE",
            "__reactRouterVersion",
            "FontAwesomeConfig",
            "___FONT_AWESOME___",
            "__localeData__",
            "__cfBeacon"
        ],
        "storage_keys": [
            "theme"
        ],
        "tls": {
            "san": [
                "poletherapy.live",
                "*.poletherapy.live"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "poletherapy.live",
            "protocol": "QUIC",
            "valid_to": "2027-01-02T16:30:04Z",
            "valid_from": "2026-10-04T15:31:22Z"
        },
        "domain_age_days": 87,
        "apex_age_days": 87,
        "tls_age_days": 28,
        "tls_valid_days": 90,
        "requests": 41,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 90,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "x-frame-options": "DENY",
            "x-content-type-options": "nosniff",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-02T02:29:57Z",
        "uuid": "f3f2ba8e-2398-4671-b31a-2cf10d82b353",
        "scanned_at": "2026-11-02T02:29:19Z",
        "final_url": "https://poletherapy.live/",
        "status": 200,
        "history": [
            {
                "url": "https://poletherapy.live/",
                "status": 200
            }
        ],
        "dom_hash": "b57f5100e8386b50e881238b67cf23c2118045908e9e9c2aacfeeda1c6604d8b",
        "doc_hash": "6a27dd68a3641f6f281f2279d3561e0baac1e22f489ff1af9727eea7d56a52be",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "poletherapy.live",
                "type": "A",
                "value": "172.67.177.244"
            },
            {
                "name": "poletherapy.live",
                "type": "A",
                "value": "104.21.67.159"
            },
            {
                "name": "poletherapy.live",
                "type": "AAAA",
                "value": "2606:4700:3032::6815:439f"
            },
            {
                "name": "poletherapy.live",
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:b1f4"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.19",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-06T16:11:18Z",
            "updated": "2026-08-11T16:11:51Z",
            "expires": "2027-08-06T16:11:18Z",
            "nameservers": [
                "damien.ns.cloudflare.com",
                "galilea.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-02T02:29:10Z",
        "analysis_at": "2026-10-30T09:59:56Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
        },
        "first_seen": "2026-08-06T16:45:12Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "damien.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:b1f4"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:439f"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.67.159"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "damien.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.177.244"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "galilea.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-30T10:28:59Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "poletherapy.live",
                "*.poletherapy.live"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "58f3592e67c9a9f713bb1c07981bc56e",
            "sha256": "4985e4de5d29e67ee5183858b64dac4b4e49139cc8a80b6cc6afb6261785a075",
            "subject": "poletherapy.live",
            "valid_to": "2027-01-02T16:30:04Z",
            "valid_from": "2026-10-04T15:31:22Z"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-06T16:11:18Z",
                "last changed": "2026-08-06T16:11:38Z",
                "registration": "2026-08-06T16:11:18Z",
                "registrar expiration": "2027-08-06T16:11:18Z",
                "last update of RDAP database": "2026-10-29T18:24:18Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-02T02:30:17Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "poletherapy.live"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-11-02T01:58:16Z",
            "first": "2026-11-02T01:58:16Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 2264
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true
        },
        "social_tags": {
            "title": "Pole Therapy App",
            "themeColor": "#414141",
            "description": "Szkoła tańca w sercu poznańskiego Piątkowa! Miejsce stworzone z ogromnej pasji i miłości do tańca!"
        },
        "trackers": {
            "requests": 32,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 25,
                "wait": 152,
                "connect": 12,
                "download": 0
            },
            "response_ms": 191
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 1526,
            "co2_grams": 0.0001,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.168",
                    "host": "damien.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.34.233",
                    "host": "galilea.ns.cloudflare.com"
                }
            ],
            "zone": "poletherapy.live"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "poletherapy.live"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "galilea.ns.cloudflare.com",
                "damien.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"damien.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417696314, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "DENY",
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": "1; mode=block",
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://poletherapy.live"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "x-frame-options": "DENY",
                "x-content-type-options": "nosniff",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```