alvalocke[.]shop

PhishDestroy first observed alvalocke.shop on Aug 28, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Spamhaus DBL, and Cloudflare Radar. On Aug 28, 2026 at 14:30 UTC, VirusTotal recorded 19 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, Netcraft, Seclookup, SOCRadar, Sophos, VIPRE, Webroot; Spamhaus DBL: DBL_PHISH. Cloudflare Radar classified the hostname as malicious and placed it in the malware category; its verdict timestamp was not retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 28, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Aug 28, 2026 at 15:09 UTC. URLScan captured the page on Aug 28, 2026 at 14:26 UTC.

The collector marked the hostname reachable on Aug 28, 2026 at 14:26 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 47.251.94.120. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer.

The record contains 3 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.