# PhishDestroy domain threat record: bancomasterai.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bancomasterai.shop/
Machine-readable companion: https://phishdestroy.io/domain/bancomasterai.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 20:47:32 UTC
- Last availability or vendor check: 2026-10-22 22:29:20 UTC
- Stored record updated: 2026-10-22 22:30:52 UTC
- VirusTotal detections in the stored snapshot: 19/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.57.48
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-05-19 08:19:22 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0aed7-ec1f-756e-8590-336cea634d55/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bancomasterai.shop
- Certificate Transparency search: https://crt.sh/?q=%25.bancomasterai.shop
- Web Archive lookup: https://web.archive.org/web/*/https://bancomasterai.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bancomasterai.shop to its internal blocklist on 2026-10-22 after an intake flagged the domain because sixteen VirusTotal vendors marked it malicious. The recorded page title is “Banco Master AI | a premium AI trading | Official Website”. An HTTP 200 response was recorded for the domain on 2026-10-22. Google Safe Browsing checked on the same day and did not flag the site, and no external blocklists listed it.

How the scam works
The listing reflects a general risk associated with sites that present themselves as AI‑trading platforms, which can be used to lure visitors into providing credentials, downloading malware, or otherwise compromising security. No specific phishing form, wallet request, or malicious payload was observed on the captured page, so the assessment remains a broad suspicion of phishing or malware distribution.

Evidence
VirusTotal scanned the domain on 2026-10-21 and reported 19 detections across 92 engines, with sixteen vendors labeling it malicious and three as suspicious. Google Safe Browsing checked on 2026-10-22 and reported no flag. urlscan captured the site on 2026-09-17; its overall verdict was clean but its engine scoring marked it malicious with a high confidence score. Cloudflare Radar scanned the domain on 2026-10-22 and classified it as malicious malware. OTX listed one pulse referencing the domain on 2026-10-22. PhishDestroy’s internal blocklist shows the domain as blocked, while external blocklists recorded zero hits on the check date.

Infrastructure
The domain was registered on 2026-05-19 through Spaceship, Inc., giving it about 120 days of age at the time of observation. DNS records show an A record pointing to 185.62.57.48, which belongs to the Snel.com B.V. network in the Netherlands. The site uses Cloudflare nameservers and a ZeroSSL ECC DV certificate valid from 2026-08-31 to 2026-11-29. No DNSSEC records or HSTS headers were observed.

What to do
Visitors should avoid entering any credentials or downloading files from this site; if they have already submitted information, they should change related passwords and monitor accounts for unusual activity. Defenders can add bancomasterai.shop to blocklists, review logs for connections to 185.62.57.48, and enforce a domain‑specific block at network perimeters.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0aed7-ec1f-756e-8590-336cea634d55/
Cloudflare Radar report: https://radar.cloudflare.com/scan/bd6f8224-8138-47b2-b9f4-16d63f3e2c59
Stored capture screenshot: https://urlscan.io/screenshots/01a0aed7-ec1f-756e-8590-336cea634d55.png
Cloudflare Radar screenshot (2026-10-22T20:51:05Z): https://screenshots.phishdestroy.io/cf/bd6f8224-8138-47b2-b9f4-16d63f3e2c59.png
URLScan screenshot (2026-08-08T10:28:41Z): https://screenshots.phishdestroy.io/us/019fe0ea-c932-75ef-9f89-9e2afdd4c998.png
URLScan capture report: https://urlscan.io/result/019fe0ea-c932-75ef-9f89-9e2afdd4c998/
URLScan screenshot (2026-09-14T17:58:19Z): https://screenshots.phishdestroy.io/us/01a0a111-bffb-738b-887a-418d2779b03a.png
URLScan capture report: https://urlscan.io/result/01a0a111-bffb-738b-887a-418d2779b03a/
VirusTotal report: https://www.virustotal.com/gui/domain/bancomasterai.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bancomasterai.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 20:57:06 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0aed7-ec1f-756e-8590-336cea634d55.png
  Captured: 2026-10-22 20:47:32 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0aed7-ec1f-756e-8590-336cea634d55.png
  Source report: https://urlscan.io/result/01a0aed7-ec1f-756e-8590-336cea634d55/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/bd6f8224-8138-47b2-b9f4-16d63f3e2c59.png
  Captured: 2026-10-22 20:51:05 UTC
  Source report: https://radar.cloudflare.com/scan/bd6f8224-8138-47b2-b9f4-16d63f3e2c59
  SHA-256: 7d82cab11f00fbc0e3a94c744b7274f2702821ea8b68043ed9c4ccef41b3bf95
- URLScan · 2026-08-08: https://screenshots.phishdestroy.io/us/019fe0ea-c932-75ef-9f89-9e2afdd4c998.png
  Captured: 2026-08-08 10:28:41 UTC
  Source report: https://urlscan.io/result/019fe0ea-c932-75ef-9f89-9e2afdd4c998/
  SHA-256: 27fb1a577f6c27558167d98d184b260ac698b4c569f6a7e23141cb5ffe055064
- URLScan · 2026-09-14: https://screenshots.phishdestroy.io/us/01a0a111-bffb-738b-887a-418d2779b03a.png
  Captured: 2026-09-14 17:58:19 UTC
  Source report: https://urlscan.io/result/01a0a111-bffb-738b-887a-418d2779b03a/
  SHA-256: 27fb1a577f6c27558167d98d184b260ac698b4c569f6a7e23141cb5ffe055064

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T20:55:27Z",
        "uuid": "01a0aed7-ec1f-756e-8590-336cea634d55",
        "scanned_at": "2026-09-17T10:09:47Z",
        "final_url": "https://bancomasterai.shop/",
        "status": 200,
        "ip": "185.62.57.48",
        "ptr": "static-48-57-62-185.hosted-by-snel.com",
        "domains": [
            "cdn.jsdelivr.net",
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "www.cloudflare.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "104.17.208.5",
            "142.250.154.94",
            "104.16.123.96",
            "2606:4700::6811:cf05",
            "104.17.24.14",
            "2a00:1450:4001:c25::5f",
            "185.62.57.48"
        ],
        "asns": [
            "13335",
            "15169",
            "62370"
        ],
        "countries": [
            "US",
            "DE",
            "NL"
        ],
        "doc_hash": "ba12934daa3951afd64ed74dc7797efeb31da5b6cb08226aaa9c65b181aa5ca4",
        "script_hashes": [
            "dcffb692e1e6bda024f7830b7f5a3fa758c06ede0ac195daebf2c9fe01442f3f"
        ],
        "globals": [
            "toggleTermsPopup",
            "intlTelInput",
            "__visitorCountry",
            "ClientJS"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "bancomasterai.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "bancomasterai.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-29T23:59:59Z",
            "valid_from": "2026-08-31T00:00:00Z"
        },
        "domain_age_days": 120,
        "apex_age_days": 120,
        "tls_age_days": 17,
        "tls_valid_days": 90,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T20:55:29Z",
        "uuid": "bd6f8224-8138-47b2-b9f4-16d63f3e2c59",
        "scanned_at": "2026-10-22T20:51:05Z",
        "final_url": "https://bancomasterai.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://bancomasterai.shop/",
                "status": 200
            }
        ],
        "dom_hash": "eeb4aea1933c9db99e3f7d2f54bf62525f1f99acf7982d155a5bc01ad676a84b",
        "doc_hash": "7ac08c384f31474ca5d6d80b74c3e62b09656f67872d390b8de0234dba543260",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bancomasterai.shop",
                "type": "A",
                "value": "185.62.57.48"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.57.48",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T20:49:32Z",
        "analysis_at": "2026-10-21T12:56:50Z",
        "stats": {
            "timeout": 0,
            "harmless": 42,
            "malicious": 16,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Bfore.Ai PreCrime": "malicious",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Information Technology, Phishing (alphaMountain.ai)"
        },
        "first_seen": "2026-05-19T14:48:42Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.57.48"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "rory.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "norah.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "norah.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-21T13:02:19Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "bancomasterai.shop"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "fc903e29079802e74cb32232be1cc215",
            "sha256": "636d2e42d3e285f191e1568ad3915512d3c225c52bd9e430affd350e3715462c",
            "subject": "bancomasterai.shop",
            "valid_to": "2026-11-29T23:59:59Z",
            "valid_from": "2026-08-31T00:00:00Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T20:55:42Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bancomasterai.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-22T20:49:45Z",
            "first": "2026-10-22T20:49:45Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 12261
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://bancomasterai.shop/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://bancomasterai.shop/",
            "title": "Banco Master AI | a premium AI trading | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Banco Master AI | Premier AI Trading Automation Platform",
            "ogSiteName": "Banco Master AI",
            "themeColor": "#0a2040",
            "description": "Banco Master AI delivers a premium overview of AI-driven trading agents and automation tooling, emphasizing governance, security practices, and real-time operational capabilities.",
            "twitterCard": "summary",
            "canonicalUrl": "https://bancomasterai.shop/",
            "ogDescription": "Banco Master AI delivers a premium overview of AI-driven trading agents and automation tooling, highlighting governance, security practices, and real-time operational capabilities."
        },
        "trackers": {
            "requests": 20,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 15,
                "tls": 34,
                "wait": 26,
                "connect": 23,
                "download": 44
            },
            "response_ms": 142
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 44420,
            "co2_grams": 0.0016,
            "cleaner_than": 39
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.166",
                    "host": "rory.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.70",
                    "host": "norah.ns.cloudflare.com"
                }
            ],
            "zone": "bancomasterai.shop"
        },
        "location": {
            "ip": "185.62.57.48",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "bancomasterai.shop"
        },
        "dns": {
            "A": [
                "185.62.57.48"
            ],
            "NS": [
                "norah.ns.cloudflare.com",
                "rory.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"norah.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415124210, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.57.48",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://bancomasterai.shop"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cloudflare",
                "Cloudflare Turnstile",
                "ClientJS",
                "Priority Hints",
                "jsDelivr",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```