# PhishDestroy domain threat record: stronger-together.us

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/stronger-together.us/
Machine-readable companion: https://phishdestroy.io/domain/stronger-together.us/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-09 11:46:16 UTC
- Last availability or vendor check: 2026-10-23 10:49:53 UTC
- Stored record updated: 2026-10-23 18:22:44 UTC
- VirusTotal detections in the stored snapshot: 6/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: shopify

## Stored infrastructure

- Observed IP address: 23.227.38.36
- Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-25 22:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1207b-6f61-76ee-a887-f70ac9efcdf2/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/stronger-together.us
- Certificate Transparency search: https://crt.sh/?q=%25.stronger-together.us
- Web Archive lookup: https://web.archive.org/web/*/https://stronger-together.us/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
stronger-together.us is an impersonation phishing page that presents itself under the name "Stronger supply.Co". It targets people who believe they are dealing with a legitimate brand or store and are willing to hand over personal or payment details. PhishDestroy first flagged the domain on 2026-10-09, and as of 2026-10-19 the site was still online and serving its content.

How the scam works
Impersonation pages borrow a familiar name, layout or tone so visitors drop their guard. Under the "Stronger supply.Co" banner, the page can push visitors toward orders, account sign-ups or checkout forms. Anything entered there, including names, addresses, card numbers or login credentials, goes to the operator instead of a real business, and the promised goods or services never arrive. The page title reads as an ordinary storefront name, while our classification is impersonation phishing.

Evidence
Six of 92 VirusTotal engines flagged the domain as of 2026-10-17: CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar, VIPRE and desenmascara.me. That is a modest count, but these six are independent vendors with different detection methods, so their agreement supports the verdict. The domain also appears in four AlienVault OTX threat pulses, which shows other researchers are tracking it. Among public blocklists, PhishDestroy currently lists it.

Infrastructure
The site resolves through Cloudflare's network (AS13335) to an address geolocated in Canada. Because the real origin server sits behind that network, the IP says little about who runs the operation. The page is served over a free Let's Encrypt certificate, so the padlock in the browser only means the connection is encrypted. It says nothing about whether the shop is genuine.

What to do
If you placed an order or entered card details on this site, contact your bank or card issuer right away to dispute the charge and request a replacement card. If you created an account or reused a password there, change that password on every service where you use it and turn on two-factor authentication. Watch for follow-up emails or texts that reference "Stronger supply.Co", because operators often reuse captured contact details for further phishing. Defenders should block the domain at DNS and web proxies and add it to mail filtering. Abuse reports can go to Cloudflare, which carries the site's traffic.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1207b-6f61-76ee-a887-f70ac9efcdf2/
VirusTotal report: https://www.virustotal.com/gui/domain/stronger-together.us
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=stronger-together.us
Archived copy: https://web.archive.org/web/20261009185959/https://stronger-together.us/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-19 09:28:27 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/67bpssGV/4655b3ed4fc0.png
  Captured: 2026-10-09 11:46:16 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1207b-6f61-76ee-a887-f70ac9efcdf2.png
  Captured: 2026-10-09 11:46:16 UTC
  Source report: https://urlscan.io/result/01a1207b-6f61-76ee-a887-f70ac9efcdf2/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/526191c7-1aff-476e-b8d1-e19d333f814b.png
  Captured: 2026-10-09 11:46:36 UTC
  Source report: https://radar.cloudflare.com/scan/526191c7-1aff-476e-b8d1-e19d333f814b
  SHA-256: 9502a69edf9e6ad8c334604c4de1d2da791de238879ba8c800f9ccd55b9deff8
- URLQuery: https://screenshots.phishdestroy.io/uq/7a7e69bf-0ad7-4e63-87cb-8a08da76f200.png
  Source report: https://urlquery.net/report/7a7e69bf-0ad7-4e63-87cb-8a08da76f200
  SHA-256: 2e65755434842d126059aaf5e68694278862ad06a564999138f74e751d553d78
- URLScan · 2026-10-09: https://screenshots.phishdestroy.io/us/01a1207d-8288-7079-b665-e9f1af870241.png
  Captured: 2026-10-09 11:47:56 UTC
  Source report: https://urlscan.io/result/01a1207d-8288-7079-b665-e9f1af870241/
  SHA-256: 90400a161baa42974bb5be6501acc5081ceb6759aeee39708d7de9c73a85b17f

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T18:36:51Z",
        "uuid": "01a1207b-6f61-76ee-a887-f70ac9efcdf2",
        "scanned_at": "2026-10-09T11:45:29Z",
        "final_url": "https://stronger-together.us/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://stronger-together.us/",
                "from": "http://stronger-together.us/",
                "status": 307
            }
        ],
        "ip": "2620:127:f00f:4::",
        "domains": [
            "otlp-http-production.shopifysvc.com",
            "shop.app",
            "cdn.shopify.com"
        ],
        "ips": [
            "34.160.147.240",
            "2600:1901:0:b257::",
            "2620:127:f00e:ff00::",
            "23.227.38.36",
            "2620:127:f00f:4::"
        ],
        "asns": [
            "396982",
            "13335"
        ],
        "countries": [
            "US",
            "CA"
        ],
        "link_domains": [
            "www.shopify.com"
        ],
        "doc_hash": "241de2701a0177a4f7baf168a59952fc2aa1e7d61df52045c8be57bdeec22bbe",
        "script_hashes": [
            "7cdbe90bde65b015d4f7b0bad8e93815db2f0e46d8092285715f5c677aab6b5f",
            "fb7c66517fce01fc0148fec1f8673f5e66aee4723f882eee5346355026285ee9",
            "80be309918e124149a30c2ed71678fd65dc08b0069fdaf8ed9c10b1fa0696004",
            "f96a8ddb4db205c03ad38ff9230742c7a94d9b4d1dac4088b6b8a002e2c036f9",
            "f4716da7438d7d2c30a5b37494ddab740a33c66e41dad50d05dc1e67bffc448b",
            "1b670868a100f346b44f013b5ab18821d9e5efc2242f2b6b1514b6ef8f479c78",
            "38f96275f06a82173e1c752e73a2092c153f95bd875c540c2ba2d18eae7c3d45",
            "fadce2585dd585e8ea4a8e0fad5f110d6c6d637b3f9b0e009e05979b1b6f7c60",
            "a2210dd77999d23c5526c1e2fc8b902db8e954a00853a5716217ccf7f6a20c5b",
            "8032ccaff3835ce452c43a540a7674ca4f728d55b7355509222ae873f048265d"
        ],
        "globals": [
            "esmsInitOptions",
            "Shopify",
            "ShopifyPay",
            "__st",
            "ShopifyPaypalV4VisibilityTracking",
            "ShopifyAnalytics",
            "portableWalletsHideBuyerConsent",
            "portableWalletsShowBuyerConsent",
            "__TREKKIE_SHIM_QUEUE",
            "meta",
            "attr",
            "trekkie",
            "measureHeaderHeights",
            "__core-js_shared__",
            "core",
            "_visit",
            "__shopifyOriginTrialsDone",
            "supportsNativePopover",
            "Theme",
            "section"
        ],
        "cookies": [
            "localization",
            "cart_currency",
            "_shopify_essential",
            "_shopify_analytics",
            "_shopify_marketing",
            "_shop_app_essential"
        ],
        "storage_keys": [
            "consentHeader",
            "_shs_state",
            "wpm-ri-421d5a3b-e059-42aa-ad5a-c52197982a8d-1791546322-z",
            "__shopify_agent_context_events",
            "ri-Qh1aO-BZQqqtWsUhl5gqjReRVGMi-z"
        ],
        "tls": {
            "san": [
                "stronger-together.us"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "stronger-together.us",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-25T00:33:32Z",
            "valid_from": "2026-09-26T00:33:33Z"
        },
        "domain_age_days": 814,
        "apex_age_days": 814,
        "tls_age_days": 13,
        "tls_valid_days": 89,
        "requests": 210,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 82,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=7889238",
            "content-security-policy": "block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;",
            "x-frame-options": "DENY",
            "x-content-type-options": "nosniff"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T18:46:50Z",
        "uuid": "526191c7-1aff-476e-b8d1-e19d333f814b",
        "scanned_at": "2026-10-09T11:46:36Z",
        "final_url": "https://stronger-together.us/",
        "status": 200,
        "history": [
            {
                "url": "https://stronger-together.us/",
                "status": 200
            }
        ],
        "dom_hash": "3ea2682edcc1a716e5eba9446a6f3fe4061df205fd80ec3ae3371f8d1d6b8060",
        "doc_hash": "c0a39f156a7c92712b3a61fbfaade1dd6cfc9d7dbc8c1f48d5c1ca1f93271de9",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "stronger-together.us",
                "type": "A",
                "value": "23.227.38.36"
            },
            {
                "name": "stronger-together.us",
                "type": "AAAA",
                "value": "2620:127:f00f:4::"
            }
        ],
        "dnssec_valid": false,
        "ip": "23.227.38.36",
        "whois": {
            "registrar": "Tucows Domains Inc.",
            "created": "2026-09-26T01:15:38Z",
            "updated": "2026-10-01T01:15:42Z",
            "expires": "2027-09-26T01:15:38Z",
            "nameservers": [
                "ns-cloud-e3.googledomains.com",
                "ns-cloud-e1.googledomains.com",
                "ns-cloud-e2.googledomains.com",
                "ns-cloud-e4.googledomains.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T04:40:17Z",
        "analysis_at": "2026-10-17T22:00:36Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 2,
            "suspicious": 0,
            "undetected": 38
        },
        "detections": {
            "CRDF": "malicious",
            "desenmascara.me": "malicious"
        },
        "reputation": 0,
        "created": "2026-09-26T00:00:00Z",
        "first_seen": "2024-07-16T16:02:41Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "A",
                "value": "23.227.38.36"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns-cloud-e1.googledomains.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns-cloud-e3.googledomains.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns-cloud-e2.googledomains.com"
            },
            {
                "ttl": 21600,
                "type": "AAAA",
                "value": "2620:127:f00f:4::"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "cloud-dns-hostmaster.google.com",
                "value": "ns-cloud-e1.googledomains.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns-cloud-e4.googledomains.com"
            }
        ],
        "dns_at": "2026-10-17T22:00:54Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "stronger-together.us"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "5b9c37f90053c195add618ce9b583429d07",
            "sha256": "81faaa27a35e9b1f162dec66646b88dfc20a1430cf2fcd8096d02a39af9acef4",
            "subject": "stronger-together.us",
            "valid_to": "2026-12-25T00:33:32Z",
            "valid_from": "2026-09-26T00:33:33Z"
        },
        "whois": []
    }
}
```