# PhishDestroy domain threat record: bancokronal.digital Content language: English Canonical HTML report: https://phishdestroy.io/domain/bancokronal.digital/ Machine-readable companion: https://phishdestroy.io/domain/bancokronal.digital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 20:47:30 UTC - Last availability or vendor check: 2026-10-22 22:29:20 UTC - Stored record updated: 2026-10-22 22:30:52 UTC - VirusTotal detections in the stored snapshot: 19/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.57.14 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-02 14:44:42 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0ba78-5094-74aa-8f2b-061cdeadc78d/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bancokronal.digital - Certificate Transparency search: https://crt.sh/?q=%25.bancokronal.digital - Web Archive lookup: https://web.archive.org/web/*/https://bancokronal.digital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added bancokronal.digital to its internal blocklist on 2026-10-22 after an intake flagged it because VirusTotal reported fifteen malicious detections. The site presented a page titled “Banco Kronal | Automated Trading Tools Overview” and returned HTTP 200 when fetched on 2026-10-22. How the scam works The listing reflects a generic phishing or malware risk that many security engines associate with domains that host deceptive financial‑service content; no specific credential‑stealing form or malicious payload was observed on the captured page. Evidence VirusTotal scanned the domain on 2026-10-21 and recorded 15 malicious and 4 suspicious detections from 92 engines, with vendors such as BitDefender, Kaspersky and Forcepoint ThreatSeeker labeling it phishing or malicious. Google Safe Browsing checked on 2026-10-22 and did not flag the site, while Cloudflare Radar on the same day marked it malicious under the malware category. URLScan captured the site on 2026-09-19, assigning a high engine score of 93 for maliciousness despite an overall clean verdict, and OTX listed one pulse referencing the domain. Infrastructure The domain was registered on 2026-03-02 through NICENIC INTERNATIONAL GROUP CO., LIMITED; the recorded A record pointed to 185.62.57.14, which was listed as belonging to Snel.com B.V. in the Netherlands. At the time of capture the DNS was served by Cloudflare using the nameservers austin.ns.cloudflare.com and destiny.ns.cloudflare.com, and the TLS certificate observed was issued by ZeroSSL and was valid until 2026-12-21. What to do Visitors should avoid entering any credentials or downloading files from the site and, if they have already submitted sensitive information, change related passwords and monitor accounts for unusual activity. Defenders can block the domain at the network perimeter and review logs for any connections to the recorded IP address. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0ba78-5094-74aa-8f2b-061cdeadc78d/ Cloudflare Radar report: https://radar.cloudflare.com/scan/c063e1d6-aaa2-43be-bd18-fbc7f2a47c0f Stored capture screenshot: https://urlscan.io/screenshots/01a0ba78-5094-74aa-8f2b-061cdeadc78d.png Cloudflare Radar screenshot (2026-10-22T20:51:07Z): https://screenshots.phishdestroy.io/cf/c063e1d6-aaa2-43be-bd18-fbc7f2a47c0f.png URLScan screenshot (2026-08-27T22:07:07Z): https://screenshots.phishdestroy.io/us/01a04543-1c3e-70a8-b0ef-4038b16cde2e.png URLScan capture report: https://urlscan.io/result/01a04543-1c3e-70a8-b0ef-4038b16cde2e/ VirusTotal report: https://www.virustotal.com/gui/domain/bancokronal.digital Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bancokronal.digital Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 20:56:32 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a0ba78-5094-74aa-8f2b-061cdeadc78d.png Captured: 2026-10-22 20:47:30 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a0ba78-5094-74aa-8f2b-061cdeadc78d.png Source report: https://urlscan.io/result/01a0ba78-5094-74aa-8f2b-061cdeadc78d/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c063e1d6-aaa2-43be-bd18-fbc7f2a47c0f.png Captured: 2026-10-22 20:51:07 UTC Source report: https://radar.cloudflare.com/scan/c063e1d6-aaa2-43be-bd18-fbc7f2a47c0f SHA-256: 1a9cac31997e12bbd39a83ce0707e10e5704b742bb067088d60e4d46255f9a25 - URLScan · 2026-08-27: https://screenshots.phishdestroy.io/us/01a04543-1c3e-70a8-b0ef-4038b16cde2e.png Captured: 2026-08-27 22:07:07 UTC Source report: https://urlscan.io/result/01a04543-1c3e-70a8-b0ef-4038b16cde2e/ SHA-256: e8f90cd11f4cba94903ccbaef40a51018d27230e90332f7b469eb60cabdb38d0 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T20:55:43Z", "uuid": "01a0ba78-5094-74aa-8f2b-061cdeadc78d", "scanned_at": "2026-09-19T16:20:49Z", "final_url": "https://bancokronal.digital/", "status": 200, "ip": "185.62.57.28", "ptr": "static-28-57-62-185.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "151.101.193.229", "142.250.154.94", "104.16.124.96", "2a04:4e42:400::485", "104.17.25.14", "2a00:1450:4001:c17::5f", "185.62.57.28" ], "asns": [ "54113", "15169", "13335", "62370" ], "countries": [ "US", "DE", "NL" ], "doc_hash": "0d9db3a7fde64adade825f189a13050b50453a2b2382380d22f0aa369afe8efd", "script_hashes": [ "dcffb692e1e6bda024f7830b7f5a3fa758c06ede0ac195daebf2c9fe01442f3f" ], "globals": [ "intlTelInput", "ClientJS", "__visitorCountry" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "bancokronal.digital" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "bancokronal.digital", "protocol": "TLS 1.3", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "domain_age_days": 200, "apex_age_days": 200, "tls_age_days": 0, "tls_valid_days": 90, "requests": 16, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 93, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T20:55:50Z", "uuid": "c063e1d6-aaa2-43be-bd18-fbc7f2a47c0f", "scanned_at": "2026-10-22T20:51:07Z", "final_url": "https://bancokronal.digital/", "status": 200, "history": [ { "url": "https://bancokronal.digital/", "status": 200 } ], "dom_hash": "82e5908f6f00865c86c4534bc7c5ecd4d65d4f06112e89d9a3eae6ea3c0216ec", "doc_hash": "ed72aa2442341a096798331af368c2ce8251526a43685afd540c75fb7e59ed7c", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bancokronal.digital", "type": "A", "value": "185.62.57.14" } ], "dnssec_valid": false, "ip": "185.62.57.14", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T20:49:34Z", "analysis_at": "2026-10-21T12:56:53Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 15, "suspicious": 4, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "SafeToOpen": "phishing", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "spam", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-03-03T15:11:45Z", "dns": [ { "ttl": 300, "type": "A", "value": "185.62.57.14" }, { "ttl": 21600, "type": "NS", "value": "austin.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "austin.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "destiny.ns.cloudflare.com" } ], "dns_at": "2026-10-21T13:02:15Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bancokronal.digital" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "52437eb7841fd99a0864910c8fa839c", "sha256": "9333221e3e48ae8a34100c3642ca559d9eb31326f628acd4c7737a675496a0b2", "subject": "bancokronal.digital", "valid_to": "2026-12-21T23:59:59Z", "valid_from": "2026-09-22T00:00:00Z" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-03-01T16:00:00Z", "registration": "2026-03-01T16:00:00Z", "registrar expiration": "2027-03-01T16:00:00Z", "last update of RDAP database": "2026-03-01T16:00:00Z" }, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T20:56:06Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bancokronal.digital" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-22T20:49:45Z", "first": "2026-10-22T20:49:45Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 8255 }, "robots_txt": { "agents": [ "*" ], "present": true }, "sitemap": { "present": true, "url_count": 203 }, "social_tags": { "ogUrl": "https://bancokronal.digital/", "title": "Banco Kronal | Automated Trading Tools Overview", "ogType": "website", "robots": "index, follow", "ogTitle": "Banco Kronal | Automated Trading Tools Overview", "ogSiteName": "Banco Kronal", "themeColor": "#0a2040", "description": "Banco Kronal presents a professional overview of automated trading bots and AI-powered trading assistance, covering workflows, controls, security...", "twitterCard": "summary", "canonicalUrl": "https://bancokronal.digital/", "ogDescription": "Banco Kronal presents a professional overview of automated trading bots and AI-powered trading assistance, covering workflows, controls, security practices, and operational features." }, "trackers": { "requests": 23, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 11 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 5, "tls": 35, "wait": 24, "connect": 22, "download": 26 }, "response_ms": 112 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 30110, "co2_grams": 0.0011, "cleaner_than": 48 }, "dns_server": { "ns": [ { "ip": "172.64.34.76", "host": "destiny.ns.cloudflare.com" }, { "ip": "173.245.59.70", "host": "austin.ns.cloudflare.com" } ], "zone": "bancokronal.digital" }, "location": { "ip": "185.62.57.14", "asn": "62370", "org": "Snel.com B.V.", "city": "Schiedam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "bancokronal.digital" }, "dns": { "A": [ "185.62.57.14" ], "NS": [ "destiny.ns.cloudflare.com", "austin.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"austin.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415570593, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.14", "family": 4 }, "redirects": { "chain": [ "https://bancokronal.digital" ] }, "tech_stack": { "technologies": [ "Cloudflare", "Cloudflare Turnstile", "ClientJS", "jsDelivr", "Google Font API", "Font Awesome", "cdnjs", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 44 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```