# PhishDestroy domain threat record: boc.bankhk-center.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/boc.bankhk-center.com/ Machine-readable companion: https://phishdestroy.io/domain/boc.bankhk-center.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 07:23:29 UTC - Last availability or vendor check: 2026-10-22 07:35:03 UTC - Stored record updated: 2026-10-22 08:00:05 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: visa ## Stored infrastructure - Observed IP address: 144.172.85.32 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-09-30 02:04:06 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16287-16ce-7210-90bb-1bf9ec103b15/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/boc.bankhk-center.com - Certificate Transparency search: https://crt.sh/?q=%25.boc.bankhk-center.com - Web Archive lookup: https://web.archive.org/web/*/https://boc.bankhk-center.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed boc.bankhk-center.com as a suspicious domain. The recorded page title is “中國銀行(香港)有限公司”. The domain was first seen by PhishDestroy on 2026-10-22 and returned HTTP 200 at that time. How the scam works The current classification does not identify a specific malicious mechanism; it only indicates that the domain is considered suspicious. In general, domains that mimic legitimate financial brands may be used to trick users into revealing credentials or personal information. Evidence VirusTotal scanned the domain on 2026-10-11 (retrieved 2026-10-22) and reported 0 malicious detections out of 92 engines, tagging it as a possible DGA. Google Safe Browsing checked on 2026-10-22 and did not flag the site. urlscan.io recorded a malicious engine score of 99 but an overall verdict of not malicious on 2026-10-22. Cloudflare Radar flagged the URL as phishing on 2026-10-22. No external blocklists reported the domain and OTX had zero pulses. PhishDestroy’s internal blocklist marks the domain as suspicious. Infrastructure The recorded IP was 144.172.85.32, associated with RouterHosting LLC in Singapore, and the domain used the nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. The domain and its apex are 22 days old and use a Let’s Encrypt certificate issued on 2026-09-30, valid until 2026-12-29. Open ports observed were 22, 80 and 443, and the page served technologies such as Adobe Experience Manager, Java, Nginx, Smartsupp and jQuery. What to do Visitors should avoid entering any login credentials or personal data on the site; if credentials were entered, change the associated passwords immediately. Organizations should block traffic to boc.bankhk-center.com and monitor logs for connections to 144.172.85.32. Security teams can use the recorded TLS certificate details and IP information for further investigation or containment. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16274-5b44-740e-bc3f-a6076c8d227e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/2ef9a142-13a7-4536-842f-d9796673a02a Stored capture screenshot: https://urlscan.io/screenshots/01a16274-5b44-740e-bc3f-a6076c8d227e.png Cloudflare Radar screenshot (2026-10-22T07:23:53Z): https://screenshots.phishdestroy.io/cf/2ef9a142-13a7-4536-842f-d9796673a02a.png URLScan screenshot (2026-09-30T04:28:32Z): https://screenshots.phishdestroy.io/us/01a0f092-15e4-7100-a5a5-78c80138b5f5.png URLScan capture report: https://urlscan.io/result/01a0f092-15e4-7100-a5a5-78c80138b5f5/ URLScan screenshot (2026-10-22T07:12:44Z): https://screenshots.phishdestroy.io/us/01a16274-6008-7424-b838-f22588b43e1f.png URLScan capture report: https://urlscan.io/result/01a16274-6008-7424-b838-f22588b43e1f/ VirusTotal report: https://www.virustotal.com/gui/domain/boc.bankhk-center.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=boc.bankhk-center.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 07:25:05 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16287-16ce-7210-90bb-1bf9ec103b15.png Captured: 2026-10-22 07:35:03 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16274-5b44-740e-bc3f-a6076c8d227e.png Captured: 2026-10-22 07:23:29 UTC Source report: https://urlscan.io/result/01a16287-16ce-7210-90bb-1bf9ec103b15/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2ef9a142-13a7-4536-842f-d9796673a02a.png Captured: 2026-10-22 07:23:53 UTC Source report: https://radar.cloudflare.com/scan/2ef9a142-13a7-4536-842f-d9796673a02a SHA-256: eb6fb0d8f1b0e2f2d2b8261b8f387c247ec2e1d8b046dde521e6800768592672 - URLScan · 2026-09-30: https://screenshots.phishdestroy.io/us/01a0f092-15e4-7100-a5a5-78c80138b5f5.png Captured: 2026-09-30 04:28:32 UTC Source report: https://urlscan.io/result/01a0f092-15e4-7100-a5a5-78c80138b5f5/ SHA-256: 0e41099ebed593aa0ec452341480f9946eada0d0a15bb84cb45c022a26379924 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16274-6008-7424-b838-f22588b43e1f.png Captured: 2026-10-22 07:12:44 UTC Source report: https://urlscan.io/result/01a16274-6008-7424-b838-f22588b43e1f/ SHA-256: 7c226c92408639954f518c76d674ab0bc4020dd04b6e65d727d00c87d2aac535 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T08:45:53Z", "uuid": "01a16287-16ce-7210-90bb-1bf9ec103b15", "scanned_at": "2026-10-22T07:33:12Z", "final_url": "https://boc.bankhk-center.com/", "status": 200, "ip": "144.172.85.32", "domains": [ "widget-v3.smartsuppcdn.com", "www.bochk.com", "snap.licdn.com", "websocket-visitors.smartsupp.com", "px.ads.linkedin.com", "bootstrap.smartsuppchat.com", "www.smartsuppchat.com" ], "ips": [ "202.127.170.52", "195.181.175.40", "2a06:98c1:3109::6812:2929", "2a02:26f0:ab00::b819:335a", "2a02:6ea0:c700::11", "63.185.191.188", "2a02:6ea0:c77a::48", "144.172.85.32" ], "asns": [ "24396", "60068", "13335", "20940", "16509", "14956" ], "countries": [ "HK", "DE", "SG" ], "link_domains": [ "www.bochk.com" ], "doc_hash": "bdc6cd054727947c987c0726ac7b7abe4cf420c75b0145a9b683c4b178a82302", "script_hashes": [ "8028beb041fb41956e80af9982bc9b113ab059a9882eb50f6d1e048d84182379", "da06647b88a66fb8e0385816c398d746b1262f882a14e293834ca7eb928b940a", "a84cb702fb991628b50583f252c01b53f1f6dec1ce87fa59ac3efabb7c3419cc", "c4a8b3557758476503848e86bd07819627b7fe53112bf51a06e06552787dcc56", "6fe9965e6af5fd5bcb5a883f3641b0aee0cfca92cda370ad7f2d7f986657c612", "660397bc22eaee467ffcb448e77fe0c3a1d72e35a73a646a3dd9be4f3fab2fdf", "634fbaf2b3678a5865bed5e7a85e32ff52b07bd2e5da5bb9f776ab25d83f4de8", "d7a1aacaff128cba603b8155100f1a575d6bac36b140ee5c481cc4e196131ce9", "a0fe8a1bce540943451e192de4545e4bd84313412a0855b99e89920b9d86c989", "22f283a0a93273bbba9681875e02ac191516cb9738d2ba914d6536e255d1c1dc" ], "globals": [ "startTime", "detectMobile", "_wcm_vlc", "_wcm_ct", "_wcm_cp", "_wcm_cd", "_wcm_cu", "_wcm_cuj", "_wcm_ce", "_wcm_c", "_wcm_co", "_wcm_d", "_wcm_vo", "_wcm_do", "_wcm_epv", "_wcm_pa", "_wcm_to", "_wcm_i", "_wcm_w", "_wcm_performLinkClick", "callSensor", "_wcm_eventCapture", "_wcm_captureLink", "_wcm_captureLinkArea", "_wcm_isMobileLink", "_wcm_captureVideo", "_wcm_det_link_type", "_wcm_syncFinishAjax", "_wcm_asyncFinishAjax", "_wcm_linkCapture", "determineLinkTitle", "_wcm_isLinkWithImg", "$", "jQuery", "sendRequest", "formDataToJSONString", "formElemToJSON", "addJSONRecord", "QR8bitByte", "QRCode" ], "cookies": [ "FontSize", "bcookie", "li_gc", "lidc", "__cf_bm" ], "tls": { "san": [ "boc.bankhk-center.com" ], "cipher": "AES_256_GCM", "issuer": "YR2", "subject": "boc.bankhk-center.com", "protocol": "TLS 1.3", "valid_to": "2026-12-29T03:22:30Z", "valid_from": "2026-09-30T03:22:31Z" }, "domain_age_days": 22, "apex_age_days": 22, "tls_age_days": 22, "tls_valid_days": 89, "requests": 102, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T07:24:23Z", "uuid": "2ef9a142-13a7-4536-842f-d9796673a02a", "scanned_at": "2026-10-22T07:23:53Z", "final_url": "https://boc.bankhk-center.com/", "status": 200, "history": [ { "url": "https://boc.bankhk-center.com/", "status": 200 } ], "dom_hash": "f8b505bc51c4f0368ebcae1cbc32703d3d0144ec5364f1c0be3104f60c4a8cc5", "doc_hash": "bdc6cd054727947c987c0726ac7b7abe4cf420c75b0145a9b683c4b178a82302", "phishing_v2": [ "phishing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "boc.bankhk-center.com", "type": "A", "value": "144.172.85.32" } ], "dnssec_valid": false, "ip": "144.172.85.32", "whois": { "registrar": "Dynadot Inc", "created": "2026-09-30T04:04:06Z", "updated": "2026-09-30T04:04:51Z", "expires": "2027-09-30T04:04:06Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T07:23:49Z", "analysis_at": "2026-10-11T06:24:25Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "tags": [ "dga" ], "registrar": "Dynadot Inc", "created": "2026-09-30T04:04:06Z", "expires": "2027-09-30T04:04:06Z", "updated": "2026-09-30T04:04:51Z", "first_seen": "2026-09-30T05:14:44Z", "dns": [ { "ttl": 300, "type": "A", "value": "144.172.85.32" } ], "dns_at": "2026-10-11T06:26:50Z", "jarm": "2ad2ad16d2ad2ad00042d42d000000df133019600a83abfb096ff3e86cd79d", "cert": { "san": [ "boc.bankhk-center.com" ], "issuer": "Let's Encrypt / YR2", "serial": "694c04939b1284279d8bca1983ff544c622", "sha256": "31e9de7a0982b36d98866a55872a5c27cb52ad6fb2daa17ad5dcac0d567e961a", "subject": "boc.bankhk-center.com", "valid_to": "2026-12-29T03:22:30Z", "valid_from": "2026-09-30T03:22:31Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-09-30T04:04:06Z", "updated": "2026-09-30T04:04:51Z", "expires": "2027-09-30T04:04:06Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T07:24:46Z", "caa_records": { "domain": "boc.bankhk-center.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "ogUrl": "https://boc.bankhk-center.com/", "title": "中國銀行(香港)有限公司", "ogType": "website", "ogImage": "http://boc.bankhk-center.com/files/whatsapp.png", "ogTitle": "中銀香港", "ogDescription": "中銀香港為您提供創新、專業及全面的金融服務,助您創富增值,致力成為您的最佳銀行。" }, "trackers": { "requests": 92, "trackers": [ { "name": "LinkedIn Ads", "company": "Microsoft", "country": "US", "category": "Advertising", "requests": 2 }, { "name": "Smartsupp Chat", "company": "Smartsuppp", "country": "CZ", "category": "Customer Interaction", "requests": 7 }, { "name": "LinkedIn Analytics", "company": "Microsoft", "country": "US", "category": "Site Analytics", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 203, "wait": 255, "connect": 191, "download": 799 }, "response_ms": 1450 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 237188, "co2_grams": 0.0087, "cleaner_than": 3 }, "dns_server": { "ns": [ { "ip": "162.159.27.158", "host": "ns1.dyna-ns.net" }, { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" } ], "zone": "bankhk-center.com" }, "location": { "ip": "144.172.85.32", "asn": "14956", "org": "RouterHosting LLC", "city": "Singapore", "country": "SG" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "boc.bankhk-center.com" }, "dns": { "A": [ "144.172.85.32" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "same-origin", "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "144.172.85.32", "family": 4 }, "redirects": { "chain": [ "https://boc.bankhk-center.com" ] }, "subdomains": { "count": 1, "subdomains": [ "boc.bankhk-center.com" ] }, "tech_stack": { "technologies": [ "Adobe Experience Manager", "Java", "Nginx", "Smartsupp", "jQuery UI", "jQuery", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://www.bochk.com/tc/home.html", "https://www.bochk.com/tc/home.html", "https://www.bochk.com/dam/wm/family-wealth-management/offer_tc.html", "https://www.bochk.com/tc/creditcard/cip/ci.html", "https://www.bochk.com/tc/home.html", "https://www.bochk.com/tc/corporate.html", "https://www.bochk.com/tc/corporate/casestudies.html", "https://www.bochk.com/tc/corporate/commbanking.html", "https://www.bochk.com/tc/corporate/ecomm.html", "https://www.bochk.com/tc/corporate/cashmgt.html", "https://www.bochk.com/tc/corporate/treasury.html", "https://www.bochk.com/tc/corporate/card.html", "https://www.bochk.com/dam/smeinone/crossborderbusinessfinancialsolutions/tc.html", "https://www.bochk.com/tc/pw.html", "https://www.bochk.com/tc/wm.html", "https://www.bochk.com/tc/enrich.html", "https://www.bochk.com/tc/enrich/offer.html", "https://www.bochk.com/tc/enrich/tailoredinfo.html", "https://www.bochk.com/tc/enrich/servicetype.html", "https://www.bochk.com/tc/enrich/econanalysis.html", "https://www.bochk.com/tc/ifree.html", "https://www.bochk.com/tc/ifree/promotion.html", "https://www.bochk.com/tc/ifree/parentsandchildren.html", "https://www.bochk.com/tc/ifree/smartelderly.html", "https://www.bochk.com/tc/ifree/student.html" ], "external_count": 480, "internal_count": 1 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-09-30T04:04:06Z", "updated": "2026-09-30T04:04:51Z", "expires": "2027-09-30T04:04:06Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```