# PhishDestroy domain threat record: asesoramientobdv-support--ethtrrgfg.replit.app

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/asesoramientobdv-support--ethtrrgfg.replit.app/
Machine-readable companion: https://phishdestroy.io/domain/asesoramientobdv-support--ethtrrgfg.replit.app/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 00:17:18 UTC
- Last availability or vendor check: 2026-10-27 23:00:30 UTC
- Stored record updated: 2026-10-27 23:21:10 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: flagged

## Stored classification

- Targeted brand: bancodevenezuela

## Stored infrastructure

- Observed IP address: 34.117.33.233
- Registrar in stored WHOIS data: Replit Inc.
- Last stored HTTP status: 200
- Registration date (registry RDAP, replit.app): 2021-04-16 20:44:58 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16b43-9087-7296-ace4-82ba2e87d9dd/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/asesoramientobdv-support--ethtrrgfg.replit.app
- Certificate Transparency search: https://crt.sh/?q=%25.asesoramientobdv-support--ethtrrgfg.replit.app
- Web Archive lookup: https://web.archive.org/web/*/https://asesoramientobdv-support--ethtrrgfg.replit.app/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated assessment classifies this domain as an impersonation phishing page. The recorded page title is "Acceso al Sistema" and was first seen on 2026-10-24. Google Safe Browsing flagged the URL on 2026-10-25 under the SOCIAL_ENGINEERING threat category. The domain resolved to the recorded IP 34.117.33.233 on Google Cloud Platform in the US on 2026-10-24.

How the scam works
Impersonation phishing pages copy the look and feel of legitimate brand login portals to trick visitors into entering credentials or other sensitive data, exposing them to credential theft and further social engineering.

Evidence
Google Safe Browsing flagged the URL as SOCIAL_ENGINEERING on 2026-10-25. urlscan captured the page on 2026-10-24 and returned a malicious verdict with phishing categories and a brand label for Banco de Venezuela. PhishDestroy’s internal listing flagged the domain on 2026-10-26. VirusTotal’s domain analysis on 2026-10-24 reported 0 malicious and 0 suspicious detections across 92 engines and tagged the domain as dga. Spamhaus DBL did not list the domain on 2026-10-24, and OTX reported 0 pulses on 2026-10-24.

Infrastructure
The recorded IP was 34.117.33.233, belonging to Google Cloud Platform (AS396982, Google LLC, US). The TLS certificate covering replit.app and *.replit.app was issued by Google Trust Services (WR3) and was valid from 2026-09-02 to 2026-12-01.

What to do
If credentials were entered, change the Banco de Venezuela account password immediately and enable multi‑factor authentication. Review account activity for unauthorized actions. Security teams should block this exact domain in DNS and web filters and inspect access logs for related traffic.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16b43-9087-7296-ace4-82ba2e87d9dd/
URLQuery report: https://urlquery.net/report/273f24a4-82c8-4da7-b7c0-38c0c5209a45
Stored capture screenshot: https://i.ibb.co/0jGjrW6C/7a3a7a00161f.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/273f24a4-82c8-4da7-b7c0-38c0c5209a45.png
URLScan screenshot (2026-10-23T12:20:33Z): https://screenshots.phishdestroy.io/us/01a168b4-8896-7218-8b75-e429d883fd78.png
URLScan capture report: https://urlscan.io/result/01a168b4-8896-7218-8b75-e429d883fd78/
URLScan screenshot (2026-10-24T01:06:29Z): https://screenshots.phishdestroy.io/us/01a16b71-c438-76e8-b025-c3afef17d2b6.png
URLScan capture report: https://urlscan.io/result/01a16b71-c438-76e8-b025-c3afef17d2b6/
URLScan screenshot (2026-10-24T05:28:16Z): https://screenshots.phishdestroy.io/us/01a16c61-6a19-73ed-982e-f96d8395e4c9.png
URLScan capture report: https://urlscan.io/result/01a16c61-6a19-73ed-982e-f96d8395e4c9/
URLScan screenshot (2026-10-24T06:51:18Z): https://screenshots.phishdestroy.io/us/01a16cad-76cd-768a-92d9-9b5ccbdf0ee6.png
URLScan capture report: https://urlscan.io/result/01a16cad-76cd-768a-92d9-9b5ccbdf0ee6/
URLScan screenshot (2026-10-24T11:14:22Z): https://screenshots.phishdestroy.io/us/01a16d9e-3241-73fb-97f3-eff3707ee900.png
URLScan capture report: https://urlscan.io/result/01a16d9e-3241-73fb-97f3-eff3707ee900/
URLScan screenshot (2026-10-24T11:45:07Z): https://screenshots.phishdestroy.io/us/01a16dba-7cc9-71a2-9084-94e4cbc480a5.png
URLScan capture report: https://urlscan.io/result/01a16dba-7cc9-71a2-9084-94e4cbc480a5/
VirusTotal report: https://www.virustotal.com/gui/domain/asesoramientobdv-support--ethtrrgfg.replit.app
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=asesoramientobdv-support--ethtrrgfg.replit.app
Archived copy: https://web.archive.org/web/20261024001418/https://asesoramientobdv-support--ethtrrgfg.replit.app/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 02:38:53 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/0jGjrW6C/7a3a7a00161f.png
  Captured: 2026-10-24 00:17:18 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a16b43-9087-7296-ace4-82ba2e87d9dd.png
  Captured: 2026-10-24 00:17:18 UTC
  Source report: https://urlscan.io/result/01a16b43-9087-7296-ace4-82ba2e87d9dd/
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a168b4-8896-7218-8b75-e429d883fd78.png
  Captured: 2026-10-23 12:20:33 UTC
  Source report: https://urlscan.io/result/01a168b4-8896-7218-8b75-e429d883fd78/
  SHA-256: 8894a5f8206102cfadd98c839094838d68714db0968305a8841272f54f3991cc
- URLQuery: https://screenshots.phishdestroy.io/uq/273f24a4-82c8-4da7-b7c0-38c0c5209a45.png
  Captured: 2026-10-25 12:40:35 UTC
  Source report: https://urlquery.net/report/273f24a4-82c8-4da7-b7c0-38c0c5209a45
  SHA-256: 53b3dc70f551475c063e6f6d9a2e0b059102f1e8339493fd5d1a18c3122b6f1d
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16b71-c438-76e8-b025-c3afef17d2b6.png
  Captured: 2026-10-24 01:06:29 UTC
  Source report: https://urlscan.io/result/01a16b71-c438-76e8-b025-c3afef17d2b6/
  SHA-256: 8894a5f8206102cfadd98c839094838d68714db0968305a8841272f54f3991cc
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16c61-6a19-73ed-982e-f96d8395e4c9.png
  Captured: 2026-10-24 05:28:16 UTC
  Source report: https://urlscan.io/result/01a16c61-6a19-73ed-982e-f96d8395e4c9/
  SHA-256: 8894a5f8206102cfadd98c839094838d68714db0968305a8841272f54f3991cc
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16cad-76cd-768a-92d9-9b5ccbdf0ee6.png
  Captured: 2026-10-24 06:51:18 UTC
  Source report: https://urlscan.io/result/01a16cad-76cd-768a-92d9-9b5ccbdf0ee6/
  SHA-256: 8894a5f8206102cfadd98c839094838d68714db0968305a8841272f54f3991cc
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16d9e-3241-73fb-97f3-eff3707ee900.png
  Captured: 2026-10-24 11:14:22 UTC
  Source report: https://urlscan.io/result/01a16d9e-3241-73fb-97f3-eff3707ee900/
  SHA-256: 8894a5f8206102cfadd98c839094838d68714db0968305a8841272f54f3991cc
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16dba-7cc9-71a2-9084-94e4cbc480a5.png
  Captured: 2026-10-24 11:45:07 UTC
  Source report: https://urlscan.io/result/01a16dba-7cc9-71a2-9084-94e4cbc480a5/
  SHA-256: 8894a5f8206102cfadd98c839094838d68714db0968305a8841272f54f3991cc

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T01:39:12Z",
        "uuid": "01a16b43-9087-7296-ace4-82ba2e87d9dd",
        "scanned_at": "2026-10-24T00:15:59Z",
        "final_url": "https://asesoramientobdv-support--ethtrrgfg.replit.app/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://asesoramientobdv-support--ethtrrgfg.replit.app/",
                "from": "http://asesoramientobdv-support--ethtrrgfg.replit.app/",
                "status": 307
            }
        ],
        "ip": "34.117.33.233",
        "ptr": "233.33.117.34.bc.googleusercontent.com",
        "domains": [
            "replit-cdn.com"
        ],
        "ips": [
            "35.190.3.23",
            "34.117.33.233"
        ],
        "asns": [
            "396982"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "e57d42c147a6c053d01a7549df126600f4ed7694a67dd292b6c10b812fd8f2d6",
        "script_hashes": [
            "954ffb13fa0ee86b9816dee4594169061bf6aabcb10816e52362b699272a875d",
            "17dfebb7b8dbedef3e028141a045216c8315821eeefcd96a4144ed8169688766"
        ],
        "globals": [
            "_0x4eb74f",
            "_0x13aa",
            "_0x3a76",
            "validateAndProcess"
        ],
        "cookies": [
            "GAESA"
        ],
        "tls": {
            "san": [
                "replit.app",
                "*.replit.app"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WR3",
            "subject": "replit.app",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-01T12:25:50Z",
            "valid_from": "2026-09-02T11:30:15Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 51,
        "tls_valid_days": 90,
        "requests": 9,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "bancodevenezuela"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Banco de Venezuela"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "Google Frontend",
            "content-type": "text/html; charset=UTF-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T00:28:32Z",
        "analysis_at": "2026-10-24T00:09:09Z",
        "stats": {
            "timeout": 0,
            "harmless": 0,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 92
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "created": "2021-04-16T00:00:00Z",
        "updated": "2025-12-04T00:00:00Z",
        "first_seen": "2026-10-23T12:52:19Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "A",
                "value": "34.117.33.233"
            }
        ],
        "dns_at": "2026-10-24T00:09:28Z",
        "jarm": "29d3fd00029d29d00042d43d00041d6f940079659edb62e1c38c38bd26ee84",
        "cert": {
            "san": [
                "replit.app",
                "*.replit.app"
            ],
            "issuer": "Google Trust Services / WR3",
            "serial": "b3df8d4daf091430a5fcdb9944aa352",
            "sha256": "4a74494d584027de8f1b50d93d1683733368fbaea4298191709beefd53e0b0ae",
            "subject": "replit.app",
            "valid_to": "2026-12-01T12:25:50Z",
            "valid_from": "2026-09-02T11:30:15Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T00:52:44Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "asesoramientobdv-support--ethtrrgfg.replit.app"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-24T00:14:18Z",
            "first": "2026-10-24T00:14:18Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 1931
        },
        "social_tags": {
            "title": "Acceso al Sistema"
        },
        "trackers": {
            "requests": 8
        },
        "mixed_content": {
            "no_sri": [
                "https://replit-cdn.com/replit-pill/replit-pill.global.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 16,
                "tls": 18,
                "wait": 219,
                "connect": 6,
                "download": 1
            },
            "response_ms": 260
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 2886,
            "co2_grams": 0.0001,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "216.239.32.107",
                    "host": "ns-cloud-b1.googledomains.com"
                },
                {
                    "ip": "216.239.38.107",
                    "host": "ns-cloud-b4.googledomains.com"
                },
                {
                    "ip": "216.239.36.107",
                    "host": "ns-cloud-b3.googledomains.com"
                },
                {
                    "ip": "216.239.34.107",
                    "host": "ns-cloud-b2.googledomains.com"
                }
            ],
            "zone": "replit.app"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "GAESA"
                }
            ]
        },
        "location": {
            "ip": "34.117.33.233",
            "asn": "396982",
            "org": "Google LLC",
            "city": "Kansas City",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WR3",
            "subject": "replit.app"
        },
        "dns": {
            "A": [
                "34.117.33.233"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains",
            "message": "HSTS header does not contain the preload directive."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000; includeSubDomains",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "34.117.33.233",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://asesoramientobdv-support--ethtrrgfg.replit.app"
            ]
        },
        "headers": {
            "headers": {
                "server": "Google Frontend",
                "content-type": "text/html; charset=UTF-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains"
            }
        }
    }
}
```