# PhishDestroy domain threat record: uklipsy.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/uklipsy.com/ Machine-readable companion: https://phishdestroy.io/domain/uklipsy.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 09:33:40 UTC - Last availability or vendor check: 2026-10-22 11:01:58 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: stripe ## Stored infrastructure - Observed IP address: 172.67.216.136 - Registrar in stored WHOIS data: Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) - Registrar country in stored WHOIS data: CN - Last stored HTTP status: 403 - Registration date (registry RDAP, uklipsy.com): 2026-07-10 08:59:56 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a162f4-b811-71d4-8e30-299dcffc59af/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/uklipsy.com - Certificate Transparency search: https://crt.sh/?q=%25.uklipsy.com - Web Archive lookup: https://web.archive.org/web/*/https://uklipsy.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI on 2026-10-22 classified the domain as malicious because it impersonates the Lipsy brand on a non‑official domain (uklipsy.com instead of the legitimate Lipsy sites). The page metadata captured on the same day shows the title “Lipsy Clothing Official Website”, reinforcing the impersonation claim. An HTTP 200 response was recorded on 2026-10-22. How the scam works A fake online store copies the visual branding, product categories and wording of a legitimate retailer to convince visitors they are on the official site. Victims are typically prompted to enter login credentials, payment details or personal information, which the operators can then harvest for fraud or resale. The scheme relies on the trust associated with the well‑known brand name rather than any technical compromise of the site. Evidence VirusTotal scanned the domain on 2026-10-22 (analysis date 2026-09-25) with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked on 2026-10-22 and did not flag the URL. OTX listed no pulses as of 2026-10-22. urlscan captured the site on 2026-10-22; its machine‑learning engine assigned a malicious tag with a score of 89, while the overall verdict was not malicious. PhishDestroy’s internal blocklist marks the domain as malicious, and external blocklists returned no hits on the same date. Infrastructure The domain was registered on 2026-07-10 by Alibaba Cloud Computing Ltd. d/b/a HiChina, giving it an age of 104 days at first sighting. Hosting is provided through Cloudflare, with the recorded IP 172.67.216.136 located in Canada. The TLS certificate issued by Google Trust Services was valid from 2026-09-07 to 2026-12-06. What to do Visitors should avoid entering any credentials or payment information on the site; if they have already done so, they should change passwords on any Lipsy‑related accounts and monitor financial statements for unauthorized activity. Defenders should block the exact domain and its resolved IPs in web filters, log DNS queries for uklipsy.com, and treat the site as malicious in security policies. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a162f4-b811-71d4-8e30-299dcffc59af/ Cloudflare Radar report: https://radar.cloudflare.com/scan/69d999be-3d10-4fe8-bdbe-0165283c7dae Stored capture screenshot: https://i.ibb.co/s9qPCV4V/f502953fc72e.png Cloudflare Radar screenshot: https://screenshots.phishdestroy.io/cf/69d999be-3d10-4fe8-bdbe-0165283c7dae.png URLScan screenshot (2026-10-22T09:30:02Z): https://screenshots.phishdestroy.io/us/01a162f2-06a9-759e-a0c1-28379237a8fd.png URLScan capture report: https://urlscan.io/result/01a162f2-06a9-759e-a0c1-28379237a8fd/ VirusTotal report: https://www.virustotal.com/gui/domain/uklipsy.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=uklipsy.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 09:35:25 UTC ## Stored page captures - Primary capture: https://i.ibb.co/s9qPCV4V/f502953fc72e.png Captured: 2026-10-22 09:33:40 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a162f4-b811-71d4-8e30-299dcffc59af.png Captured: 2026-10-22 09:33:40 UTC Source report: https://urlscan.io/result/01a162f4-b811-71d4-8e30-299dcffc59af/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/69d999be-3d10-4fe8-bdbe-0165283c7dae.png Captured: 2026-10-22 09:34:12 UTC Source report: https://radar.cloudflare.com/scan/69d999be-3d10-4fe8-bdbe-0165283c7dae SHA-256: 22bfc183e0b7852479b63628ea651482444b64a8d9a5f32f880a7c82b4b9498b - URLQuery: https://screenshots.phishdestroy.io/uq/b15cff5d-b95f-4759-a270-a04499fa0d93.png Source report: https://urlquery.net/report/b15cff5d-b95f-4759-a270-a04499fa0d93 SHA-256: 0300e0d079cc1c893da29d4382513ce2f95f64853d24e1edde56324b9c69e7a8 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a162f2-06a9-759e-a0c1-28379237a8fd.png Captured: 2026-10-22 09:30:02 UTC Source report: https://urlscan.io/result/01a162f2-06a9-759e-a0c1-28379237a8fd/ SHA-256: 7d5ae7420160e142eeb3253e62205e36bfefeaf390a2f17c4fa7c38043ef5db2 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a162f6-ab9f-7407-bc33-94c82793d29d.png Captured: 2026-10-22 09:35:01 UTC Source report: https://urlscan.io/result/01a162f6-ab9f-7407-bc33-94c82793d29d/ SHA-256: 7d5ae7420160e142eeb3253e62205e36bfefeaf390a2f17c4fa7c38043ef5db2 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T09:34:28Z", "uuid": "01a162f4-b811-71d4-8e30-299dcffc59af", "scanned_at": "2026-10-22T09:32:53Z", "final_url": "https://uklipsy.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://uklipsy.com/", "from": "http://uklipsy.com/", "status": 307 } ], "ip": "172.67.216.136", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.20.94", "2a00:1450:4001:c13::5f", "172.67.216.136" ], "asns": [ "15169", "13335" ], "countries": [ "US", "DE" ], "doc_hash": "3e6b645b98c12c53ce495de9df16fe50cae5659062a19d05180a721dc75be686", "script_hashes": [ "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8", "268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767", "b374e10bcffae8cceceba134d3e33a9fc0d92a18d4cb5285ffa8242bebb96aae", "c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474", "699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76", "1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813", "f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552", "b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1" ], "globals": [ "jQuery", "webpackChunkelementorFrontend", "elementorModules", "elementorFrontendConfig", "elementorFrontend", "EvEmitter", "imagesLoaded", "webpackChunkelementor_pro", "wp", "ElementorProFrontendConfig", "elementorProFrontend", "_wpemojiSettings", "twemoji" ], "storage_keys": [ "wpEmojiSettingsSupports" ], "tls": { "san": [ "uklipsy.com", "*.uklipsy.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "uklipsy.com", "protocol": "QUIC", "valid_to": "2026-12-06T13:02:29Z", "valid_from": "2026-09-07T12:04:58Z" }, "domain_age_days": 103, "apex_age_days": 103, "tls_age_days": 44, "tls_valid_days": 90, "requests": 85, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 89, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T10:22:09Z", "uuid": "69d999be-3d10-4fe8-bdbe-0165283c7dae", "scanned_at": "2026-10-22T09:34:12Z", "final_url": "https://uklipsy.com/", "status": 200, "history": [ { "url": "https://uklipsy.com/", "status": 200 } ], "dom_hash": "f3760c82f20efcd27258cb895710a9588a5730294c657cc4ffd0e562638f1571", "doc_hash": "234804e71dc3e83d77c1c7607ba92c46942eb740b24cbb8db4674ee97ef45839", "domain_risks": [ "Ecommerce", "Shopping & Auctions", "Fashion", "Society & Lifestyle", "Clothing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "uklipsy.com", "type": "A", "value": "104.21.93.233" }, { "name": "uklipsy.com", "type": "A", "value": "172.67.216.136" }, { "name": "uklipsy.com", "type": "AAAA", "value": "2606:4700:3033::6815:5de9" }, { "name": "uklipsy.com", "type": "AAAA", "value": "2606:4700:3032::ac43:d888" } ], "dnssec_valid": false, "ip": "104.21.93.233", "whois": { "registrar": "Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)", "created": "2026-07-10T08:59:56Z", "updated": "2026-09-15T14:15:30Z", "expires": "2028-07-10T08:59:56Z", "nameservers": [ "dom.ns.cloudflare.com", "marissa.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T09:34:06Z", "analysis_at": "2026-09-25T14:07:45Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "DNSPod, Inc.", "created": "2026-07-10T08:59:56Z", "expires": "2027-07-10T08:59:56Z", "updated": "2026-07-10T18:22:20Z", "first_seen": "2026-07-10T10:24:14Z", "dns": [ { "ttl": 300, "type": "MX", "value": "mx20.antispam.mailspamprotection.com", "priority": 20 }, { "ttl": 300, "type": "A", "value": "104.21.93.233" }, { "ttl": 300, "type": "MX", "value": "mx30.antispam.mailspamprotection.com", "priority": 30 }, { "ttl": 21600, "type": "NS", "value": "dom.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "dom.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "marissa.ns.cloudflare.com" }, { "ttl": 300, "type": "MX", "value": "mx10.antispam.mailspamprotection.com", "priority": 10 }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:5de9" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 +a +mx include:uklipsy.com.spf.auto.dnssmarthost.net ~all" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::ac43:d888" }, { "ttl": 300, "type": "A", "value": "172.67.216.136" } ], "dns_at": "2026-09-25T14:07:50Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "uklipsy.com", "*.uklipsy.com" ], "issuer": "Google Trust Services / WE1", "serial": "eac6b5f7e73f0b7b0ebbf64b90d1582c", "sha256": "d56a69914de06ea8828e772752ccabf769f439ab803f523b3f7fbd65ec073f75", "subject": "uklipsy.com", "valid_to": "2026-12-06T13:02:29Z", "valid_from": "2026-09-07T12:04:58Z" }, "whois": { "registrar": "DNSPod, Inc.", "registrar_iana_id": "1697", "registrar_url": "http://www.dnspod.cn", "created": "2026-07-10T08:59:56Z", "updated": "2026-07-10T18:22:20Z", "expires": "2027-07-10T08:59:56Z", "status": [ "ok" ], "nameservers": [ "dom.ns.cloudflare.com", "marissa.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "expiration": "2027-07-10T08:59:56Z", "registration": "2026-07-10T08:59:56Z", "last update of RDAP database": "2026-07-10T18:22:20Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T09:34:57Z", "mail_config": { "mx": [ "mx10.antispam.mailspamprotection.com", "mx20.antispam.mailspamprotection.com", "mx30.antispam.mailspamprotection.com" ], "spf": "v=spf1 +a +mx include:uklipsy.com.spf.auto.dnssmarthost.net ~all", "dmarc": true, "spf_lookups": 4 }, "caa_records": { "domain": "uklipsy.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://uklipsy.com/sitemap_index.xml" ] }, "sitemap": { "present": true, "url_count": 135 }, "social_tags": { "ogUrl": "https://uklipsy.com/", "title": "Lipsy Clothing Official Website", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://uklipsy.com/wp-content/uploads/2026/08/asset_83055ceb7bd1cb91.webp", "ogTitle": "Lipsy Clothing Official Website", "generator": "WordPress 7.0.4", "ogSiteName": "Lipsy", "description": "Explore Lipsy dresses, clothing, shoes, accessories and occasionwear for women.", "twitterCard": "summary_large_image", "canonicalUrl": "https://uklipsy.com/", "ogDescription": "Explore Lipsy dresses, clothing, shoes, accessories and occasionwear for women." }, "trackers": { "requests": 79, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 6, "tls": 12, "wait": 135, "connect": 6, "download": 12 }, "response_ms": 171 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 150047, "co2_grams": 0.0055, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "173.245.59.157", "host": "dom.ns.cloudflare.com" }, { "ip": "172.64.34.114", "host": "marissa.ns.cloudflare.com" } ], "zone": "uklipsy.com" }, "location": { "ip": "2606:4700:3032::ac43:d888", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "uklipsy.com" }, "dns": { "A": [ "172.67.216.136", "104.21.93.233" ], "MX": [ "{\"exchange\": \"mx10.antispam.mailspamprotection.com\", \"priority\": 10}", "{\"exchange\": \"mx30.antispam.mailspamprotection.com\", \"priority\": 30}", "{\"exchange\": \"mx20.antispam.mailspamprotection.com\", \"priority\": 20}" ], "NS": [ "dom.ns.cloudflare.com", "marissa.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"dom.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414967572, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 +a +mx include:uklipsy.com.spf.auto.dnssmarthost.net ~all" ], "AAAA": [ "2606:4700:3032::ac43:d888", "2606:4700:3033::6815:5de9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3032::ac43:d888", "family": 6 }, "redirects": { "chain": [ "https://uklipsy.com" ] }, "tech_stack": { "technologies": [ "WordPress", "MySQL", "PHP", "Hello Elementor", "Elementor", "Yoast SEO", "jQuery UI", "jQuery Migrate", "jQuery", "core-js", "Priority Hints", "Google Font API", "Cloudflare", "Webpack", "RSS", "Open Graph", "Module Federation", "HTTP/3" ] }, "linked_pages": { "internal_count": 22 }, "whois": { "registrar": "Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)", "created": "2026-07-10T08:59:56Z", "updated": "2026-09-15T14:15:30Z", "expires": "2028-07-10T08:59:56Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "dom.ns.cloudflare.com", "marissa.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } } } } ```