# wipertorvlp.com — Recorded security evidence | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/wipertorvlp.com/
Machine-readable companion: https://phishdestroy.io/domain/wipertorvlp.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Unverified
- First observed by PhishDestroy: 2026-11-11 17:42:14 UTC
- Selected availability observation: 2026-11-11T17:42:14Z
- Stored record updated: 2026-11-11 21:58:35 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored infrastructure
- Observed IP address: 104.21.70.191
- Registrar in stored WHOIS data: West263 International Limited
- Registration date in stored WHOIS data: 2026-07-27 01:08:19 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a1cbb2-24bc-77fb-a311-26f520bd517c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/wipertorvlp.com
- Certificate Transparency search: https://crt.sh/?q=%25.wipertorvlp.com
- Web Archive lookup: https://web.archive.org/web/*/https://wipertorvlp.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy stores a record for wipertorvlp.com. Source observations are dated separately; missing checks do not establish safety.
PhishDestroy stores a record for wipertorvlp.com. Source observations are dated separately; missing checks do not establish safety.
A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: 49d2b76e361880a3b12539680631b96fd9cfa4c580f176dc935d32a991dea4c7
Source facts (timestamps as stored): {"record_id":1923771,"first_recorded_at":"2026-11-11 18:42:14","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":15,"denominator":92,"malicious":13,"suspicious":2,"vendors":{"CRDF":"malicious","DNS8":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-11T18:09:24Z","checked_at":null,"fetched_at":"2026-11-11T18:23:27Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":15,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","DNS8","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-11-11 18:09:24","checked_at":"2026-11-11 19:23:27","fetched_at":"2026-11-11 18:23:28","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","VIPRE","G-Data","Lionic","Sophos","CyRadar","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":45,"malicious":13,"suspicious":2,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-11 22:58:01"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-11 20:38:28"},"availability":{"state":"unknown","label_key":"availability.unverified","detail_key":"detail.no_response","params":[],"source":"current_http_probe","record_id":1923771,"scope":"checked_url","observed_at":"2026-11-11T17:42:14Z","http_status":null,"http_observed_at":"2026-11-11T17:42:14Z","stored_http_code":null,"stored_http_observed_at":"2026-11-11T17:42:14Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan · 2026-11-11: https://screenshots.phishdestroy.io/us/01a1cbb2-24bc-77fb-a311-26f520bd517c.png
Captured: 2026-11-11 17:40:31 UTC
Source report: https://urlscan.io/result/01a1cbb2-24bc-77fb-a311-26f520bd517c/
SHA-256: c415d6f1d58c5a16c28a8d097ea3f838f673143b8832c7e692399d7a8a3de361
- URLScan · 2026-08-10: https://screenshots.phishdestroy.io/us/019feb54-9e13-70be-a8f6-9bff0b4eaca6.png
Captured: 2026-08-10 11:00:28 UTC
Source report: https://urlscan.io/result/019feb54-9e13-70be-a8f6-9bff0b4eaca6/
SHA-256: c415d6f1d58c5a16c28a8d097ea3f838f673143b8832c7e692399d7a8a3de361
- URLScan · 2026-08-11: https://screenshots.phishdestroy.io/us/019fefa0-76a7-716c-adcb-c9f7b9bbb374.png
Captured: 2026-08-11 07:01:49 UTC
Source report: https://urlscan.io/result/019fefa0-76a7-716c-adcb-c9f7b9bbb374/
SHA-256: c415d6f1d58c5a16c28a8d097ea3f838f673143b8832c7e692399d7a8a3de361
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1de7684b-4cf1-4251-b4e9-301efaa3b2be.png
Captured: 2026-11-11 18:17:43 UTC
Source report: https://radar.cloudflare.com/scan/1de7684b-4cf1-4251-b4e9-301efaa3b2be
SHA-256: 4fe9757449a6497b25de3a8221ff507b145220f98ef694d7a233513e22afe719
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-11T17:42:31Z",
"uuid": "01a1cbb2-24bc-77fb-a311-26f520bd517c",
"scanned_at": "2026-11-11T17:40:31Z",
"final_url": "https://www.wipertorvlp.com/",
"status": 200,
"redirected": "https-only",
"redirects": [
{
"to": "https://www.wipertorvlp.com/",
"from": "http://www.wipertorvlp.com/",
"status": 307
}
],
"ip": "172.67.138.202",
"domains": [
"fonts.gstatic.com",
"fonts.googleapis.com",
"static.cloudflareinsights.com"
],
"ips": [
"142.251.179.94",
"104.16.79.73",
"142.251.111.95",
"172.67.138.202"
],
"asns": [
"15169",
"13335"
],
"countries": [
"US"
],
"link_domains": [
"wipertorvlp.com",
"www.facebook.com",
"twitter.com",
"www.instagram.com"
],
"social": [
"https://www.facebook.com/sharer/sharer.php",
"https://twitter.com/intent/tweet",
"https://www.instagram.com"
],
"doc_hash": "af4156779098882e8cc03237996f16484bd5afcb9712ec08e0b8e6bad08b1b03",
"script_hashes": [
"442e21785fb52552ca054d52a3b98e232c6c03c21bfbd2110c4750c9a56e075f",
"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620",
"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070",
"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1",
"17daa5f5929c3deab38ffaacd89b213810e35e7d3ee115fc890b6bfdc230a9ad",
"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b",
"d49d81944a6dc5d206ccbc1de527bc75b043721fe2ab2a8c749d0c1853235217",
"11b78b193ca667c248469d629940672e44408491838b221f243a8676b6ac55d3"
],
"globals": [
"_ckyConfig",
"_ckyStyles",
"cookieyes",
"revisitCkyConsent",
"getCkyConsent",
"jQuery",
"wc_add_to_cart_params",
"woocommerce_params",
"wc_cart_fragments_params",
"RipResume",
"mmlight",
"sbjs",
"wc_order_attribution",
"webpackChunkelementorFrontend",
"elementorModules",
"elementorFrontendConfig",
"elementorFrontend",
"NexpayEmbeddedConfig",
"NexpayEmbedded",
"Cookies",
"on_keydown_remove_from_cart",
"focus_populate_live_region",
"refresh_sorted_by_live_region",
"on_document_ready",
"_wpemojiSettings",
"__cfBeacon",
"mmenu",
"twemoji",
"wp",
"lazyloadRunObserver",
"events"
],
"cookies": [
"sbjs_migrations",
"sbjs_current_add",
"sbjs_first_add",
"sbjs_current",
"sbjs_first",
"sbjs_udata",
"sbjs_session",
"cookieyes-consent"
],
"storage_keys": [
"wc",
"wpEmojiSettingsSupports"
],
"tls": {
"san": [
"wipertorvlp.com",
"*.wipertorvlp.com"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "wipertorvlp.com",
"protocol": "QUIC",
"valid_to": "2026-12-23T07:18:20Z",
"valid_from": "2026-09-24T06:19:35Z"
},
"domain_age_days": 107,
"apex_age_days": 107,
"tls_age_days": 48,
"tls_valid_days": 90,
"requests": 78,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 45,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"priority": "u=0,i",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n200000"
},
"dns": [
{
"name": "wipertorvlp.com",
"type": "A",
"value": "104.21.70.191"
},
{
"name": "wipertorvlp.com",
"type": "A",
"value": "172.67.138.202"
},
{
"name": "wipertorvlp.com",
"type": "AAAA",
"value": "2606:4700:3031::ac43:8aca"
},
{
"name": "wipertorvlp.com",
"type": "AAAA",
"value": "2606:4700:3033::6815:46bf"
},
{
"name": "www.wipertorvlp.com",
"type": "A",
"value": "172.67.138.202"
},
{
"name": "www.wipertorvlp.com",
"type": "A",
"value": "104.21.70.191"
},
{
"name": "www.wipertorvlp.com",
"type": "AAAA",
"value": "2606:4700:3033::6815:46bf"
},
{
"name": "www.wipertorvlp.com",
"type": "AAAA",
"value": "2606:4700:3031::ac43:8aca"
}
],
"dnssec_valid": false,
"ip": "172.67.138.202",
"verdict": {
"tags": [
"malware"
],
"malicious": true,
"categories": [
"malware"
]
},
"whois": {
"registrar": "West263 International Limited",
"created": "2026-07-27T03:08:19Z",
"updated": "2026-07-27T03:09:31Z",
"expires": "2027-07-27T03:08:19Z",
"nameservers": [
"abdullah.ns.cloudflare.com",
"edna.ns.cloudflare.com"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-11T18:23:27Z",
"analysis_at": "2026-11-11T18:09:24Z",
"stats": {
"timeout": 0,
"harmless": 45,
"malicious": 13,
"suspicious": 2,
"undetected": 32
},
"detections": {
"CRDF": "malicious",
"DNS8": "suspicious",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "suspicious",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
},
"reputation": 0,
"registrar": "West263 International Limited",
"created": "2026-07-27T03:08:19Z",
"expires": "2027-07-27T03:08:19Z",
"updated": "2026-07-27T03:09:31Z",
"first_seen": "2026-07-27T04:12:36Z",
"dns": [
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3031::ac43:8aca"
},
{
"ttl": 21600,
"type": "NS",
"value": "abdullah.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "edna.ns.cloudflare.com"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "abdullah.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "104.21.70.191"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3033::6815:46bf"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.138.202"
},
{
"ttl": 300,
"type": "TXT",
"value": "google-site-verification=EqJBhcKrhANi_H09jGDAlXOLWjgaQI5sqBDlObmwoDU"
},
{
"ttl": 300,
"type": "TXT",
"value": "google-site-verification=UD5-SHU8rYAElEn_eRthKyX6PFeOp65-ziBCCfDpHYU"
}
],
"dns_at": "2026-11-11T18:14:40Z",
"jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
"cert": {
"san": [
"wipertorvlp.com",
"*.wipertorvlp.com"
],
"issuer": "Google Trust Services / WE1",
"serial": "63ff4757b1182d9613c6a1225db6a85b",
"sha256": "4ec13baf3f3431ac7af308ff7ec118f70814fc66e0c97f05253b50908fdc3484",
"subject": "wipertorvlp.com",
"valid_to": "2026-12-23T07:18:20Z",
"valid_from": "2026-09-24T06:19:35Z",
"observed_at": "2026-11-11T18:14:40Z"
},
"whois": {
"registrar": "West263 International Limited",
"registrar_iana_id": "1915",
"registrar_url": "http://www.hkdns.hk",
"created": "2026-07-27T03:08:18Z",
"updated": "2026-07-27T03:08:18Z",
"expires": "2027-07-27T03:08:19Z",
"status": [
"ok"
],
"nameservers": [
"abdullah.ns.cloudflare.com",
"edna.ns.cloudflare.com"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"active"
],
"events": {
"expiration": "2027-07-27T11:08:19Z",
"last changed": "2026-07-27T11:08:19Z",
"registration": "2026-07-27T11:08:18Z",
"last update of RDAP database": "2026-11-12T02:14:39Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-11T18:06:46Z",
"mail_config": {
"spf_lookups": 0
},
"block_lists": {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
},
"archives": {
"last": "2026-11-11T17:44:38Z",
"first": "2026-11-11T17:44:38Z",
"changes": 0,
"days_archived": 1,
"avg_page_bytes": 31136
},
"trackers": {
"requests": 55,
"trackers": [
{
"name": "Google Fonts",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 3
}
]
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
80,
443,
8080
]
},
"dns_server": {
"ns": [
{
"ip": "162.159.44.203",
"host": "abdullah.ns.cloudflare.com"
},
{
"ip": "173.245.58.109",
"host": "edna.ns.cloudflare.com"
}
],
"zone": "wipertorvlp.com"
},
"location": {
"ip": "2606:4700:3033::6815:46bf",
"asn": "13335",
"org": "Cloudflare, Inc.",
"city": "Toronto",
"country": "CA"
},
"ssl": {
"issuer": "Google Trust Services / WE1",
"subject": "wipertorvlp.com"
},
"dns": {
"A": [
"172.67.138.202",
"104.21.70.191"
],
"NS": [
"edna.ns.cloudflare.com",
"abdullah.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"abdullah.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415809213, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"TXT": [
"google-site-verification=EqJBhcKrhANi_H09jGDAlXOLWjgaQI5sqBDlObmwoDU",
"google-site-verification=UD5-SHU8rYAElEn_eRthKyX6PFeOp65-ziBCCfDpHYU"
],
"AAAA": [
"2606:4700:3031::ac43:8aca",
"2606:4700:3033::6815:46bf"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"firewall": {
"waf": "Cloudflare",
"has_waf": true
},
"get_ip": {
"ip": "2606:4700:3033::6815:46bf",
"family": 6
},
"subdomains": {
"count": 1,
"subdomains": [
"www.wipertorvlp.com"
]
},
"whois": {
"registrar": "West263 International Limited",
"created": "2026-07-27T03:08:19Z",
"updated": "2026-07-27T03:09:31Z",
"expires": "2027-07-27T03:08:19Z",
"status": [
"ok https://icann.org/epp"
],
"nameservers": [
"abdullah.ns.cloudflare.com",
"edna.ns.cloudflare.com"
]
},
"headers": {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"content-security-policy": "default-src 'none'; script-src 'nonce-5rLH2UjrwyFl9ACuEUXPAY' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenge",
"x-frame-options": "SAMEORIGIN",
"x-content-type-options": "nosniff",
"referrer-policy": "same-origin",
"permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*",
"cross-origin-opener-policy": "same-origin",
"cross-origin-resource-policy": "same-origin",
"cross-origin-embedder-policy": "require-corp"
}
}
}
}
```
## Complete dated records
Availability observations: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/wipertorvlp.com/records.json?source=content&format=json
## Dated availability observation
No conclusive current response is stored
```json
{
"state": "unknown",
"label_key": "availability.unverified",
"detail_key": "detail.no_response",
"params": [],
"source": "current_http_probe",
"record_id": 1923771,
"scope": "checked_url",
"observed_at": "2026-11-11T17:42:14Z",
"http_status": null,
"http_observed_at": "2026-11-11T17:42:14Z",
"stored_http_code": null,
"stored_http_observed_at": "2026-11-11T17:42:14Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```