# bankofchina.live: Landing page promoting real-time money transfers | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/bankofchina.live/ Machine-readable companion: https://phishdestroy.io/domain/bankofchina.live/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-04 05:55:49 UTC - Selected availability observation: 2026-11-04T11:05:39Z - Stored record updated: 2026-11-04 15:20:52 UTC - VirusTotal detections in the stored snapshot: 6/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): revolut ## Stored infrastructure - Observed IP address: 64.20.39.203 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 (observed: 2026-11-04T11:05:39Z) - Registration date in stored WHOIS data: 2026-11-01 21:12:26 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1a520-4e55-72ec-bd5e-71459f63ef41/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bankofchina.live - Certificate Transparency search: https://crt.sh/?q=%25.bankofchina.live - Web Archive lookup: https://web.archive.org/web/*/https://bankofchina.live/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records bankofchina.live as a landing page presenting real-time money transfers, digital banking services, and an online banking entry point. On 2026-11-04, bankofchina.live was captured showing a landing page branded with a Bank of China (Hong Kong) logo and a navigation bar linking Home, Business, Personal, Credit Cards, Loans, and Support sections. The hero area carries the heading "Transfer Money Across The World In Real time" above a paragraph stating that bankofchina transformed the digital banking industry using data and technology more than ten years ago and is now one of the largest digital banking providers. The page offers an ONLINE BANKING button in both the header and hero, alongside a Watch Video control and a digital support contact link. Two photographs show people using cards with laptops and tablets, and a badge displays "18.5M+ Active Users." A row of partner-style logos appears below, and a WhatsApp chat button sits at the lower left. Package revision: 9cad4059b3094baec9dcdd4059b0c733e074db0b1a8215e3ba03bf5310c9f787 Text generated (not scan time): 2026-11-04 07:30:44 Reviewed evidence snapshot: {"domain":"bankofchina.live","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"bankofchina.live","final_host":"bankofchina.live","redirects":[],"captured_at":"2026-11-04T05:55:30.979000Z","uuid":"01a1a520-4e55-72ec-bd5e-71459f63ef41","report_url":"https://urlscan.io/result/01a1a520-4e55-72ec-bd5e-71459f63ef41/","sha256":"120691914175706a8e8b4d268048bfe6c926d1a2d5efc87f18ea1b06bd7c6088","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal_public_summary":"","page_paragraph_target_characters":678} Source facts (timestamps as stored): {"record_id":1780907,"first_recorded_at":"2026-11-04 06:55:49","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":6,"denominator":92,"malicious":5,"suspicious":1,"vendors":{"ESET":"phishing","G-Data":"phishing","Netcraft":"malicious","BitDefender":"phishing","alphaMountain.ai":"suspicious","Hunt.io Intelligence":"phishing"},"observed_at":"2026-11-04T05:08:46Z","checked_at":null,"fetched_at":"2026-11-04T07:03:10Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":6,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","ESET","G-Data","Hunt.io Intelligence","Netcraft"],"observed_at":"2026-11-04 05:08:46","checked_at":"2026-11-04 08:03:12","fetched_at":"2026-11-04 07:03:12","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"ESET":"phishing","G-Data":"phishing","Netcraft":"malicious","BitDefender":"phishing","alphaMountain.ai":"suspicious","Hunt.io Intelligence":"phishing"},"vendor_names":["ESET","G-Data","Netcraft","BitDefender","alphaMountain.ai","Hunt.io Intelligence"],"stats":{"timeout":0,"harmless":53,"malicious":5,"suspicious":1,"undetected":33}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-04 08:03:33"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-04 08:31:28"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1780907,"scope":"checked_url","observed_at":"2026-11-04T11:05:39Z","http_status":200,"http_observed_at":"2026-11-04T11:05:39Z","stored_http_code":200,"stored_http_observed_at":"2026-11-04T11:05:39Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-04T11:05:39Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-04: https://screenshots.phishdestroy.io/us/01a1a520-4e55-72ec-bd5e-71459f63ef41.png Captured: 2026-11-04 05:55:30 UTC Source report: https://urlscan.io/result/01a1a520-4e55-72ec-bd5e-71459f63ef41/ SHA-256: 120691914175706a8e8b4d268048bfe6c926d1a2d5efc87f18ea1b06bd7c6088 - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19aec-a251-71fa-a30c-e130384a590a.png Captured: 2026-11-02 06:22:50 UTC Source report: https://urlscan.io/result/01a19aec-a251-71fa-a30c-e130384a590a/ SHA-256: d6f302af3059cb248d3ac5e24cd0f0779de813efa4aa46ca68ceeadc788851a7 - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19b96-c489-72df-8004-7db0f477d409.png Captured: 2026-11-02 09:28:39 UTC Source report: https://urlscan.io/result/01a19b96-c489-72df-8004-7db0f477d409/ SHA-256: 14a81a7c8af6d753f35e2ceec3bc83eb63fbeb127abd3220f471f02df9bc78ff - URLScan · 2026-11-04: https://screenshots.phishdestroy.io/us/01a1a4f5-b74a-754e-85ea-7c4bc29982cb.png Captured: 2026-11-04 05:09:05 UTC Source report: https://urlscan.io/result/01a1a4f5-b74a-754e-85ea-7c4bc29982cb/ SHA-256: 2c2a24c49ae549b8a646b48351935400c871b9a5a35330cd697993bb30662fc9 - URLScan · 2026-11-04: https://screenshots.phishdestroy.io/us/01a1a50a-8b53-71a8-92f1-5c886b3d27fb.png Captured: 2026-11-04 05:31:42 UTC Source report: https://urlscan.io/result/01a1a50a-8b53-71a8-92f1-5c886b3d27fb/ SHA-256: c48edd55360fd823b1ea108a901a86b9c4da1ca46770e305b8c5586c7f24eb17 - URLScan · 2026-11-04: https://screenshots.phishdestroy.io/us/01a1a519-f348-730a-8f0b-8070e0cecc75.png Captured: 2026-11-04 05:48:34 UTC Source report: https://urlscan.io/result/01a1a519-f348-730a-8f0b-8070e0cecc75/ SHA-256: b54371a2cd10621e019f412f6787cf812db7e1aefdfd33922041491861b29cad - URLScan · 2026-11-04: https://screenshots.phishdestroy.io/us/01a1a51c-42cd-75f7-9c1d-a993a0f69c39.png Captured: 2026-11-04 05:51:03 UTC Source report: https://urlscan.io/result/01a1a51c-42cd-75f7-9c1d-a993a0f69c39/ SHA-256: 440159293157687f44c19bd111cda78aa52cefa4a18479cece36aa1ba17791ea - URLQuery: https://screenshots.phishdestroy.io/uq/09528f06-2ce4-40f5-9a7d-d23dbcc36f34.png Source report: https://urlquery.net/report/09528f06-2ce4-40f5-9a7d-d23dbcc36f34 SHA-256: 3583b326fd880c1f7bada38b954d80ee49e415844be76bd92bd1536243c9d1c3 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-04T05:59:30Z", "uuid": "01a1a520-4e55-72ec-bd5e-71459f63ef41", "scanned_at": "2026-11-04T05:55:30Z", "final_url": "https://bankofchina.live/", "status": 200, "ip": "64.20.39.203", "domains": [ "widget-v3.smartsuppcdn.com", "www.gstatic.com", "fonts.gstatic.com", "cdn.jsdelivr.net", "static.getbutton.io", "websocket-visitors.smartsupp.com", "translate-pa.googleapis.com", "bootstrap.smartsuppchat.com", "translate.googleapis.com", "fonts.googleapis.com", "translate.google.com", "code.jquery.com", "www.smartsuppchat.com", "cdn-cgi" ], "ips": [ "178.249.213.3", "172.217.119.4", "63.181.53.227", "142.250.207.10", "142.250.195.163", "142.250.195.99", "142.250.195.138", "142.250.183.46", "151.101.65.229", "151.101.129.155", "172.67.74.247", "95.173.204.16", "64.20.39.203" ], "asns": [ "60068", "15169", "16509", "54113", "13335", "19318" ], "countries": [ "JP", "US", "DE" ], "link_domains": [ "translate.google.com", "www.youtube.com", "www.cnbc.com", "www.investopedia.com", "www.airtreks.com", "facebook.com", "twitter.com", "instagram.com", "linkedin.com", "wa.me", "getbutton.io" ], "social": [ "https://www.youtube.com/watch", "https://facebook.com", "https://twitter.com", "https://instagram.com", "https://wa.me/8617031846265" ], "doc_hash": "6f4df952cbeb6d6b00c4845eddefbdb7cafba1be820453942161e575ee493bca", "script_hashes": [ "ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b", "120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac", "5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a", "01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78", "4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03", "4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029", "b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec", "8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5", "c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7", "b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d" ], "globals": [ "_smartsupp", "smartsupp", "$", "jQuery", "SMARTSUPP_LOADED", "$smartsupp", "uidEvent", "bootstrap", "AOS", "Odometer", "_gsScope", "_gsQueue", "GreenSockGlobals", "com", "_gsDefine", "Ease", "Power4", "Strong", "Quint", "Power3", "Quart", "Power2", "Cubic", "Power1", "Quad", "Power0", "Linear", "TweenLite", "TweenPlugin", "TweenMax", "TimelineLite", "TimelineMax", "BezierPlugin", "CSSPlugin", "BackOut", "BackIn", "BackInOut", "Back", "SlowMo", "SteppedEase" ], "cookies": [ "XSRF-TOKEN", "grand_session" ], "storage_keys": [ "cuex_theme" ], "tls": { "san": [ "*.bankofchina.live", "bankofchina.live" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "*.bankofchina.live", "protocol": "TLS 1.3", "valid_to": "2027-01-30T21:29:28Z", "valid_from": "2026-11-01T21:29:29Z" }, "domain_age_days": 1, "apex_age_days": 1, "tls_age_days": 2, "tls_valid_days": 89, "requests": 103, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 100, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericbanking" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Banking" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.2.35" } }, "vt": { "v": 1, "fetched_at": "2026-11-04T07:03:10Z", "analysis_at": "2026-11-04T05:08:46Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 5, "suspicious": 1, "undetected": 33 }, "detections": { "ESET": "phishing", "G-Data": "phishing", "Netcraft": "malicious", "BitDefender": "phishing", "alphaMountain.ai": "suspicious", "Hunt.io Intelligence": "phishing" }, "reputation": 0, "first_seen": "2026-11-02T06:58:38Z", "dns": [ { "ttl": 14400, "type": "A", "value": "64.20.39.203" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:64.20.39.202 include:relay.mailbaby.net ~all" }, { "ttl": 21600, "type": "SOA", "rname": "not-monitored-email.interserver.net", "value": "dns2000a.trouble-free.net" }, { "ttl": 14400, "type": "MX", "value": "bankofchina.live", "priority": 0 }, { "ttl": 21600, "type": "NS", "value": "dns2000b.trouble-free.net" }, { "ttl": 21600, "type": "NS", "value": "dns2000a.trouble-free.net" } ], "dns_at": "2026-11-04T05:09:11Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "*.bankofchina.live", "bankofchina.live" ], "issuer": "Let's Encrypt / YR2", "serial": "66a77310e80a774fcebf7ba397ea9035523", "sha256": "82243a2abb7500c4915a356c57da475fb12f372d0c56e51d61edcef3bf5ea472", "subject": "*.bankofchina.live", "valid_to": "2027-01-30T21:29:28Z", "valid_from": "2026-11-01T21:29:29Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-11-01T22:12:26Z", "last changed": "2026-11-01T22:19:41Z", "registration": "2026-11-01T22:12:26Z", "registrar expiration": "2027-11-01T22:12:26Z", "last update of RDAP database": "2026-11-01T22:27:05Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-04T05:59:31Z", "mail_config": { "mx": [ "bankofchina.live" ], "spf": "v=spf1 +a +mx +ip4:64.20.39.202 include:relay.mailbaby.net ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 5 }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "bankofchina - Dedicated to innovating, simplifying, and humanizing digital banking.", "robots": "index,follow", "keywords": "Bank,bankofchina , Internet Banking", "ogSiteName": "bankofchina", "description": "bankofchina was launched to make online banking easy and fast.", "canonicalUrl": "/", "ogDescription": "bankofchina was launched to make online banking easy and fast." }, "trackers": { "requests": 85, "trackers": [ { "name": "Google Translate", "company": "Google", "country": "US", "category": "Customer Interaction", "requests": 1 }, { "name": "Smartsupp Chat", "company": "Smartsuppp", "country": "CZ", "category": "Customer Interaction", "requests": 2 }, { "name": "Google APIs", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 5 }, { "name": "jQuery", "company": "JS Foundation", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html", "https://translate.google.com/translate_a/element.js" ], "third_party_scripts": 5 }, "status": { "up": true, "code": 200, "timings": { "dns": 96, "tls": 286, "wait": 835, "connect": 92, "download": 92 }, "response_ms": 1401 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 37983, "co2_grams": 0.0014, "cleaner_than": 43 }, "dns_server": { "ns": [ { "ip": "64.20.39.203", "host": "dns2000b.trouble-free.net" }, { "ip": "64.20.39.202", "host": "dns2000a.trouble-free.net" } ], "zone": "bankofchina.live" }, "cookies": { "cookies": [ { "name": "XSRF-TOKEN", "secure": true, "same_site": "Lax" }, { "name": "grand_session", "secure": true, "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "64.20.39.203", "asn": "19318", "org": "Interserver, Inc", "city": "Secaucus", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "*.bankofchina.live" }, "dns": { "A": [ "64.20.39.203" ], "MX": [ "{\"exchange\": \"bankofchina.live\", \"priority\": 0}" ], "NS": [ "dns2000b.trouble-free.net", "dns2000a.trouble-free.net" ], "SOA": "{\"nsname\": \"dns2000a.trouble-free.net\", \"hostmaster\": \"not-monitored-email.interserver.net\", \"serial\": 2026110203, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:64.20.39.202 include:relay.mailbaby.net ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "64.20.39.203", "family": 4 }, "redirects": { "chain": [ "https://bankofchina.live" ] }, "tech_stack": { "technologies": [ "PHP", "Bootstrap", "React", "GSAP", "styled-components", "LiteSpeed", "OWL Carousel", "jQuery CDN", "GetButton", "Smartsupp", "jQuery", "FancyBox", "core-js", "WhatsApp Business Chat", "jsDelivr", "AOS", "Popper", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://www.youtube.com/watch", "https://www.cnbc.com/2020/02/27/5-things-every-new-business-owner-needs-to-know-before-starting.html", "https://www.investopedia.com/articles/insights/122016/9-common-effects-inflation.asp", "https://www.airtreks.com/go/foreign-currency/", "https://facebook.com/", "https://twitter.com/", "https://instagram.com/", "https://linkedin.com/" ], "external_count": 8, "internal_count": 15 }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.2.35" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://urlscan.io/screenshots/01a1a520-4e55-72ec-bd5e-71459f63ef41.png","source":"Stored capture","report_url":"https://urlscan.io/result/01a1a520-4e55-72ec-bd5e-71459f63ef41/","captured_at":"2026-11-04T05:55:30Z","sha256":"120691914175706a8e8b4d268048bfe6c926d1a2d5efc87f18ea1b06bd7c6088","model_image_sha256":"014a4672f53940c6edeb4173d649b3037b4292aa911058e76a1f3c6151898d31","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/bankofchina.live/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/bankofchina.live/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/bankofchina.live/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/bankofchina.live/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/bankofchina.live/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/bankofchina.live/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/bankofchina.live/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/bankofchina.live/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1780907, "scope": "checked_url", "observed_at": "2026-11-04T11:05:39Z", "http_status": 200, "http_observed_at": "2026-11-04T11:05:39Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-04T11:05:39Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-04T11:05:39Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```