# PhishDestroy domain threat record: sportspartner.pt Content language: English Canonical HTML report: https://phishdestroy.io/domain/sportspartner.pt/ Machine-readable companion: https://phishdestroy.io/domain/sportspartner.pt/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-09-20 04:27:08 UTC - Last availability or vendor check: 2026-10-22 10:33:55 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 6/91 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 45.60.26.68 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 301 - Registration date in stored WHOIS data: 2003-08-04 22:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0bd13-6d39-727f-b1a6-570d207b8dee/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/sportspartner.pt - Certificate Transparency search: https://crt.sh/?q=%25.sportspartner.pt - Web Archive lookup: https://web.archive.org/web/*/https://sportspartner.pt/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview sportspartner.pt presents itself under the title "Sports Partner | Portugal" and is classified by PhishDestroy as an impersonation phishing page. It targets people in Portugal who expect a legitimate sports business and trust a familiar-looking local brand. PhishDestroy first flagged it on 2026-09-20. As of 2026-10-19 the site was still online, and visitors were being redirected onward. How the scam works Impersonation pages borrow a real business's name and look, here a Portuguese sports brand, to make visitors comfortable entering information they would normally guard. Typical requests are account logins, contact details and card or payment data, often framed as an order, a membership or a checkout step. The redirect means the first page a victim sees may hand them off to another destination where the actual collection happens. Whatever is typed there goes to the operators, who can use it for account takeover, card fraud or follow-up scams. Evidence Detection is still limited. On 2026-10-02, 6 of 91 VirusTotal engines flagged the domain: alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar and VIPRE. Those six are independent vendors, so the verdict does not rest on one source, but most engines had not caught up. The domain also appears in 6 AlienVault OTX threat pulses, which shows other researchers have tracked it. Among blocklists, it is currently listed by PhishDestroy. Infrastructure The domain was registered on 2003-08-05, more than two decades before it was flagged. That does not fit the pattern of a freshly bought throwaway domain, and it gives the site an aged reputation that can help it slip past filters. Traffic is served through Incapsula Inc, a proxy and security network, at an address located in GB. The real origin server sits behind that proxy. The GlobalSign certificate is domain-validated, so the padlock only proves control of the domain, not the identity of the business behind it. What to do If you entered a password on this site, change it there and on any other account that reuses it, then turn on two-factor authentication. If you gave card or bank details, contact your bank now to block the card and dispute any charges you do not recognise. Watch for follow-up emails, SMS or calls that quote your order or personal details, since stolen contact data is often reused. Defenders should block the domain and the redirect it serves at the DNS and proxy level. Because the domain is old, do not let its age count as a trust signal, and report it to the Incapsula network abuse team and to brand-protection contacts for the impersonated business. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0bd13-6d39-727f-b1a6-570d207b8dee/ VirusTotal report: https://www.virustotal.com/gui/domain/sportspartner.pt Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=sportspartner.pt Archived copy: https://web.archive.org/web/20250810090242/https://www.sportspartner.pt/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-19 09:38:37 UTC ## Stored page captures - Primary capture: https://i.ibb.co/PzP7mXBk/6feaa0b4c324.png Captured: 2026-09-20 04:30:42 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0bd13-6d39-727f-b1a6-570d207b8dee.png Captured: 2026-09-20 04:30:42 UTC Source report: https://urlscan.io/result/01a0bd13-6d39-727f-b1a6-570d207b8dee/ - URLScan capture 2: https://urlscan.io/screenshots/01a06c4d-82e4-743b-902b-01fe05a4a0f7.png Captured: 2026-09-20 04:27:08 UTC Source report: https://urlscan.io/result/01a0bd13-6d39-727f-b1a6-570d207b8dee/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f8be4b26-1f33-475c-93b3-3bd126c852e2.png Captured: 2026-09-20 04:31:08 UTC Source report: https://radar.cloudflare.com/scan/f8be4b26-1f33-475c-93b3-3bd126c852e2 SHA-256: b3b633116c3111cff097b24d40ad4aa23db6dd9b7ff06e7dd98ba4abe35dad59 - URLScan · 2026-07-26: https://screenshots.phishdestroy.io/us/019fa04d-fb6d-710e-a714-ff3e7cce6767.png Captured: 2026-07-26 21:21:40 UTC Source report: https://urlscan.io/result/019fa04d-fb6d-710e-a714-ff3e7cce6767/ SHA-256: f07fbbfad7def910bcb04ad80df4ceeec2aa0ed2b4dc061afc8c0c747d21df6a - URLScan · 2026-08-26: https://screenshots.phishdestroy.io/us/01a03cc3-6d32-7143-8aab-4c2af9ff3daf.png Captured: 2026-08-26 06:30:46 UTC Source report: https://urlscan.io/result/01a03cc3-6d32-7143-8aab-4c2af9ff3daf/ SHA-256: b6f830650eeab67e6800d6abee3af585695864734446086693ac915f089bd842 - URLScan · 2026-09-04: https://screenshots.phishdestroy.io/us/01a06c4d-82e4-743b-902b-01fe05a4a0f7.png Captured: 2026-09-04 12:03:58 UTC Source report: https://urlscan.io/result/01a06c4d-82e4-743b-902b-01fe05a4a0f7/ SHA-256: 7c51d9f908168e22e8c99aecbfbe127a6a6c816150975428c2ec4dd36a7f6573 - URLScan · 2026-09-20: https://screenshots.phishdestroy.io/us/01a0bd14-dde8-7237-a563-5257e4f619d2.png Captured: 2026-09-20 04:31:13 UTC Source report: https://urlscan.io/result/01a0bd14-dde8-7237-a563-5257e4f619d2/ SHA-256: 1afe4b1d8915f0bcde4760cb21cccee58c52a19a698364c5abcb5a18e6425f35 - URLScan · 2026-09-25: https://screenshots.phishdestroy.io/us/01a0d77b-c3f9-7223-a11d-bcd8e4df22f1.png Captured: 2026-09-25 07:36:58 UTC Source report: https://urlscan.io/result/01a0d77b-c3f9-7223-a11d-bcd8e4df22f1/ SHA-256: 1dbf84b99c48e02d06583bccd167a3c7ed9d9159303f377171ded652af2e6f1d - URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a13d9a-cbca-771b-8e30-8c103642104c.png Captured: 2026-10-15 03:28:46 UTC Source report: https://urlscan.io/result/01a13d9a-cbca-771b-8e30-8c103642104c/ SHA-256: e34deee167d9d1bb82cd10c831e3068486afd52996df49bc0f579fdfa77a1e71 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T22:23:58Z", "uuid": "01a0bd13-6d39-727f-b1a6-570d207b8dee", "scanned_at": "2026-09-20T04:29:45Z", "final_url": "https://www.sportspartner.pt/en/", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://www.sportspartner.pt/", "from": "http://www.sportspartner.pt/", "status": 307 }, { "to": "http://www.sportspartner.pt/", "from": "https://www.sportspartner.pt/", "status": 307 }, { "to": "https://www.sportspartner.pt/", "from": "http://www.sportspartner.pt/", "status": 301 }, { "to": "https://www.sportspartner.pt/en/", "from": "https://www.sportspartner.pt/", "status": 302 } ], "ip": "45.60.22.68", "domains": [ "fonts.googleapis.com", "conversations-widget.brevo.com", "fonts.gstatic.com", "www.google.com", "www.googletagmanager.com", "fe-conversations-widget.brevo.com", "www.google-analytics.com", "ucarecdn.com", "in-automate.brevo.com", "conversations-widget.sendinblue.com", "www.merchant-center-analytics.goog", "sibautomation.com", "cdn.brevo.com", "www.google.ca", "googleads.g.doubleclick.net", "ad.doubleclick.net", "cdn.by.wonderpush.com" ], "ips": [ "151.101.193.55", "172.64.150.216", "104.18.37.40", "104.18.250.233", "192.178.155.101", "141.101.90.104", "142.251.155.119", "142.250.217.14", "142.251.211.67", "141.101.90.106", "172.253.62.95", "142.250.190.232", "45.60.22.68" ], "asns": [ "54113", "13335", "15169", "19551" ], "countries": [ "US" ], "link_domains": [ "sportspartner.pt", "www.facebook.com", "instagram.com", "pt.linkedin.com", "www.youtube.com", "www.instagram.com", "api.whatsapp.com", "www.google.com", "loja.sportspartner.pt", "www.livroreclamacoes.pt", "www.brevo.com" ], "social": [ "https://www.facebook.com/sportspartneroficial", "http://instagram.com/sportspartner_oficial", "https://www.youtube.com/@sportspartner", "https://www.instagram.com/sportspartner_oficial", "https://api.whatsapp.com/send" ], "doc_hash": "37e214ce203dea86e9eaf7e0399e51f2f15899667f40534308a5c59f69c12ec6", "script_hashes": [ "d81d5177c6efb31b2ac264f5e3bac337a142a786f08b5a06921e98c9da158137", "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "16780269e362021d705b44bc75b8f5bb3e44619427c64a972a8ac7f1fe3bb1fc", "8c7e27068a17d48fdde4ced6f2c805085692be743281eba7f1072a07be074b0d", "d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620", "8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1", "a41ecabfaa5a628b26a98234caa818e4d68e3edf6c48cee40b2a6f4c4fcafaba", "ec7b51cb991ae1a3f9b1ee562dcc0ff7296b13039f47fabf4e7fae8c4f4b0559", "592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b" ], "globals": [ "gtag", "dataLayer", "_ckyConfig", "_ckyStyles", "cookieyes", "_revisitCkyConsent", "revisitCkyConsent", "getCkyConsent", "jQuery", "Cookies", "woocommerce_params", "wc_cart_fragments_params", "sibErrMsg", "ajax_sib_front_object", "captchaRes", "sibVerifyCallback", "errorCallbackForTurnstileErrors", "Brevo", "WonderPush", "_tpt", "SR7", "navDotsContainer", "tabela", "img", "Text1", "text2", "interval", "ret", "navDots", "currentIndex", "test", "trocarPosicao", "up", "createNavDots", "updateNavDots", "links", "j", "p", "k", "fluentformElementor" ], "cookies": [ "visid_incap_3228543", "incap_ses_160_3228543", "wp_woocommerce_session_6ac7154d3179ff14ccd002495a850c7d", "pll_language", "sbjs_migrations", "sbjs_current_add", "sbjs_first_add", "sbjs_current", "sbjs_first", "sbjs_udata", "sbjs_session", "cookieyes-consent", "woosw_key", "_wpfuuid", "_gcl_au", "_ga_3J42091KFP", "_ga_FB1TEEGJ35", "_ga_WF1CWWX21Q", "_ga", "_gid" ], "storage_keys": [ "woosw", "elementor", "wc", "_gcl_ls", "BrevoConversations.clientId", "BrevoConversations.referrer", "BrevoConversations.lastPageViewAt", "woosw_data_YBO12X", "wc_fragments_cfc2ebe7c0cafd65a068a44d35366b00", "wc_cart_hash_cfc2ebe7c0cafd65a068a44d35366b00", "BrevoConversations.hostedItems" ], "tls": { "san": [ "www.valanddeals.com", "1stcms.com", "www.jobstaffproworkforce.com", "taiwanbaby.com", "tripleasports.info", "www.onemag.org", "www.tripleasports.info", "www.sportspartner.pt", "sportspartner.pt", "jobstaffproworkforce.com" ], "cipher": "AES_128_GCM", "issuer": "GlobalSign Atlas R46 DV TLS CA 2026 Q3", "subject": "imperva.com", "protocol": "TLS 1.3", "valid_to": "2026-11-05T06:21:12Z", "valid_from": "2026-08-07T06:21:12Z" }, "domain_age_days": 3654, "apex_age_days": 3654, "tls_age_days": 43, "tls_valid_days": 90, "requests": 242, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -97, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; script-src 'self' https://*.helpscout.net https://*.wistia.com https://*.cloudflare.com https://*.jsdelivr.net https://*.wp.com https://*.youtube.com https://*.sendinblue.", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "geolocation=(), microphone=(), camera=(), fullscreen=(self), payment=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T22:31:50Z", "uuid": "f8be4b26-1f33-475c-93b3-3bd126c852e2", "scanned_at": "2026-09-20T04:31:08Z", "final_url": "https://www.sportspartner.pt/en/", "status": 200, "redirected": "subdomain", "history": [ { "url": "https://sportspartner.pt/", "status": 301 }, { "url": "https://www.sportspartner.pt/", "status": 302 }, { "url": "https://www.sportspartner.pt/en/", "status": 200 } ], "dom_hash": "9d8b6cc3b66188cef8affd3b555e64959a4f9de9b33f002a9a41f5e100c6f713", "domain_risks": [ "Sports", "Ecommerce", "Shopping & Auctions" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "sportspartner.pt", "type": "A", "value": "45.60.23.68" }, { "name": "sportspartner.pt", "type": "A", "value": "45.60.26.68" }, { "name": "www.sportspartner.pt", "type": "CNAME", "value": "q8hdsls.sitelockcdn.net" }, { "name": "www.sportspartner.pt", "type": "CNAME", "value": "q8hdsls.sitelockcdn.net" } ], "dnssec_valid": false, "ip": "45.60.22.68", "whois": { "created": "2003-08-05T00:00:00Z", "expires": "2027-07-02T23:59:00Z", "nameservers": [ "ns71.compulab.pt", "ns72.compulab.pt" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T01:56:21Z", "analysis_at": "2026-10-21T18:32:57Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 7, "suspicious": 0, "undetected": 32 }, "detections": { "VIPRE": "phishing", "Lionic": "phishing", "SOCRadar": "phishing", "Gridinsoft": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "popularity": { "Alexa": 461078, "Statvoo": 461078, "Cisco Umbrella": 764892, "Cloudflare Radar": 1000000 }, "created": "2003-08-05T00:00:00Z", "first_seen": "2023-11-17T10:04:41Z", "dns": [ { "ttl": 21600, "type": "SOA", "rname": "dns.compulab.pt", "value": "ns71.compulab.pt" }, { "ttl": 21600, "type": "NS", "value": "ns71.compulab.pt" }, { "ttl": 60, "type": "A", "value": "45.60.23.68" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 ip4:94.46.23.159 +a +mx +include:_spf.cleanmx.pt +include:spf.compulab.pt +include:spf.surveymonkey.com ~all" }, { "ttl": 300, "type": "TXT", "value": "brevo-code:e841c62297f805f947cefd9efa859eb2" }, { "ttl": 300, "type": "MX", "value": "mail.sportspartner.pt", "priority": 0 }, { "ttl": 60, "type": "A", "value": "45.60.26.68" }, { "ttl": 300, "type": "TXT", "value": "globalsign-domain-verification=0CD4D4F1C91A719EFDFB63CBB166D40A" }, { "ttl": 21600, "type": "NS", "value": "ns72.compulab.pt" } ], "dns_at": "2026-10-21T18:33:41Z", "jarm": "29d29d00029d29d00041d41d0000005d86ccb1a0567e012264097a0315d7a7", "cert": { "san": [ "www.valanddeals.com", "1stcms.com", "www.jobstaffproworkforce.com", "taiwanbaby.com", "tripleasports.info", "www.onemag.org", "www.tripleasports.info", "www.sportspartner.pt", "sportspartner.pt", "jobstaffproworkforce.com" ], "issuer": "GlobalSign nv-sa / GlobalSign Atlas R46 DV TLS CA 2026 Q3", "serial": "16bcfb6a8c6613f93780858bca34ee5", "sha256": "0c72e0a089c629cf026f8926f882ab9bf1e6437881df5cac044bd4a3db62776f", "subject": "imperva.com", "valid_to": "2026-12-24T04:59:13Z", "valid_from": "2026-09-25T04:59:13Z" }, "whois": { "created": "05/08/2003 00:00:00", "status": [ "Registered" ], "nameservers": [ "ns11.compulab.pt | ipv4: and ipv6:", "ns12.compulab.pt | ipv4: and ipv6:", "ns13.compulab.pt | ipv4: and ipv6:", "ns14.compulab.pt | ipv4: and ipv6:" ] } } } ```