# PhishDestroy domain threat record: bochk.trade

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bochk.trade/
Machine-readable companion: https://phishdestroy.io/domain/bochk.trade/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 05:17:13 UTC
- Last availability or vendor check: 2026-10-23 05:28:10 UTC
- Stored record updated: 2026-10-23 06:30:34 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 216.198.79.1
- Registrar in stored WHOIS data: Spaceship, Inc.
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date (registry RDAP, bochk.trade): 2026-08-19 13:01:14 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16739-4721-7039-86b9-b1db86cef18d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bochk.trade
- Certificate Transparency search: https://crt.sh/?q=%25.bochk.trade
- Web Archive lookup: https://web.archive.org/web/*/https://bochk.trade/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified bochk.trade as malicious because its page title uses the abbreviation “BOC”, matching the Bank of China brand. The domain was first seen by PhishDestroy on 2026-10-23 returning HTTP 200 with the recorded title “BOC BRIDGE — Trade Finance Copilot”.

How the scam works
Brand‑impersonation scams create sites that appear to belong to a reputable financial institution and lure visitors into providing credentials, personal data, or payments. Victims are typically convinced they are accessing a legitimate service such as trade‑finance tools or account portals.

Evidence
VirusTotal scanned the domain on 2026-10-22 with 92 engines and reported 0 malicious or suspicious detections. Google Safe Browsing checked on 2026-10-23 and did not flag the site. URLScan captured the page on 2026-10-23; its overall verdict was clean, but its machine‑learning engine assigned a malicious score of 91. OTX listed 0 pulses on 2026-10-23, external blocklists returned no matches, and PhishDestroy’s internal blocklist marked the domain as malicious on 2026-10-23.

Infrastructure
The domain was registered on 2026-08-19 through Spaceship, Inc., giving it a 64‑day age at the time of first sighting. DNS records observed on 2026-10-23 pointed to IP 216.198.79.1, which the WHOIS data listed as belonging to Network Billing Systems in the United States, and the site presented a Let’s Encrypt TLS 1.3 certificate issued on 2026-10-21. DNSSEC was enabled for the zone and the hosting stack recorded Vercel as the server software.

What to do
Users should avoid entering any credentials or personal information on the site and, if they have already done so, change associated passwords and monitor accounts for suspicious activity. Defenders should add bochk.trade to internal blocklists, review logs for connections to 216.198.79.1, and monitor for any related abuse.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16725-8d17-7451-b6a1-f8002c09c511/
Cloudflare Radar report: https://radar.cloudflare.com/scan/fb16cc43-9d08-4d4a-86d2-4646d1cf50bd
Stored capture screenshot: https://urlscan.io/screenshots/01a16725-8d17-7451-b6a1-f8002c09c511.png
Cloudflare Radar screenshot (2026-10-23T05:20:08Z): https://screenshots.phishdestroy.io/cf/fb16cc43-9d08-4d4a-86d2-4646d1cf50bd.png
URLScan screenshot (2026-10-23T05:02:47Z): https://screenshots.phishdestroy.io/us/01a16723-b9d4-7237-9064-35fd66dc6a4a.png
URLScan capture report: https://urlscan.io/result/01a16723-b9d4-7237-9064-35fd66dc6a4a/
URLScan screenshot (2026-10-23T05:26:17Z): https://screenshots.phishdestroy.io/us/01a16739-4721-7039-86b9-b1db86cef18d.png
URLScan capture report: https://urlscan.io/result/01a16739-4721-7039-86b9-b1db86cef18d/
VirusTotal report: https://www.virustotal.com/gui/domain/bochk.trade
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bochk.trade
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 05:27:48 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16739-4721-7039-86b9-b1db86cef18d.png
  Captured: 2026-10-23 05:28:10 UTC
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16739-4721-7039-86b9-b1db86cef18d.png
  Captured: 2026-10-23 05:26:17 UTC
  Source report: https://urlscan.io/result/01a16739-4721-7039-86b9-b1db86cef18d/
  SHA-256: a710b30827f69e3215f8ebc86bb3baa989038a8098022ac09d713dc5c6a03ac0
- URLScan capture 2: https://urlscan.io/screenshots/01a16725-8d17-7451-b6a1-f8002c09c511.png
  Captured: 2026-10-23 05:17:13 UTC
  Source report: https://urlscan.io/result/01a16739-4721-7039-86b9-b1db86cef18d/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/fb16cc43-9d08-4d4a-86d2-4646d1cf50bd.png
  Captured: 2026-10-23 05:20:08 UTC
  Source report: https://radar.cloudflare.com/scan/fb16cc43-9d08-4d4a-86d2-4646d1cf50bd
  SHA-256: c9107f0fdf5f7532ac710414898f8c15bb2b10740dac2de7caa493ab5883e315
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16723-b9d4-7237-9064-35fd66dc6a4a.png
  Captured: 2026-10-23 05:02:47 UTC
  Source report: https://urlscan.io/result/01a16723-b9d4-7237-9064-35fd66dc6a4a/
  SHA-256: f19f191ad5cd8dc904f97bbd5256f0b47ed3f68d31961fce8c31f80275a848ef

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T06:13:08Z",
        "uuid": "01a16739-4721-7039-86b9-b1db86cef18d",
        "scanned_at": "2026-10-23T05:26:17Z",
        "final_url": "https://www.bochk.trade/",
        "status": 200,
        "ip": "64.29.17.1",
        "domains": [
            "ysucnhiiqailsvkrdzoh.supabase.co"
        ],
        "ips": [
            "172.64.149.246",
            "64.29.17.1"
        ],
        "asns": [
            "13335",
            "16509"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "6803e16c6f05eac3ed802b4cb39b3f86b926eb2578f35ddd32b619f0edb7d4c7",
        "script_hashes": [
            "a8ede99ec490f81eb41f7d5784397e7be26a0b906dce40a5837bd48d8a5be62e",
            "5261101892e2476e4346e19e86fd5f19cbcf7c765ff76e92eb9cefcc86b6db6a",
            "456c68c824662d644b3e37b48088fd4aac273dbe8de44719e51cbff8bd2c1f9f",
            "ddb40695a8f6f12d70ff1bcc2d3f449720a9187f59cdb75b26a84f0e7058ce6c",
            "5545ee9ffe935a298eb066327a888f5f81f8364757a9dc32a13d5c0faf2d16ec",
            "a7eb596f7178bf3ed5f0d95cbc959370a28f5f57152332c45b78c28068f73a83",
            "a63006390ea41e4bac8810be14eb4873cb701877d7e0661e9aaef526a531ec0b",
            "de789666938784241e5c51fb45ce37ee568495a7b7c5a7adf89d8526a68804e1",
            "7d4a80b0d916a6f333cd56bac11c9d9b5c4351db3b1500f4f6b67cd8e9cc0219",
            "c63d11ccca209fa2f2f60fa053841f5add98d7a40c9cdc10467d0d49ad8d8f0c"
        ],
        "globals": [
            "TURBOPACK",
            "__next_f",
            "next",
            "__webpack_hash__",
            "vam",
            "va",
            "vaq",
            "vai"
        ],
        "storage_keys": [
            "lswt-0.298793834787836170.6693118378588252",
            "asuka_sid",
            "asuka_vid"
        ],
        "tls": {
            "san": [
                "www.bochk.trade"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR1",
            "subject": "www.bochk.trade",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-18T22:50:01Z",
            "valid_from": "2026-10-20T22:50:02Z"
        },
        "domain_age_days": 64,
        "apex_age_days": 64,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 24,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 91,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Vercel",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T05:26:53Z",
        "uuid": "fb16cc43-9d08-4d4a-86d2-4646d1cf50bd",
        "scanned_at": "2026-10-23T05:20:08Z",
        "final_url": "https://bochk.trade/",
        "status": 200,
        "history": [
            {
                "url": "https://bochk.trade/",
                "status": 200
            }
        ],
        "dom_hash": "b30835a7b6f3090c7c7fa77a75641ec6aebfedc65913042a3cbfb8a6498f91f2",
        "doc_hash": "6803e16c6f05eac3ed802b4cb39b3f86b926eb2578f35ddd32b619f0edb7d4c7",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bochk.trade",
                "type": "A",
                "value": "216.198.79.1"
            }
        ],
        "dnssec_valid": true,
        "ip": "216.198.79.1",
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-08-19T13:01:14Z",
            "updated": "2026-10-18T13:01:17Z",
            "expires": "2027-08-19T13:01:14Z",
            "nameservers": [
                "launch1.spaceship.net",
                "launch2.spaceship.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T05:18:51Z",
        "analysis_at": "2026-10-22T02:39:02Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "Spaceship, Inc.",
        "created": "2026-08-19T13:01:14Z",
        "expires": "2027-08-19T13:01:14Z",
        "updated": "2026-10-18T13:01:17Z",
        "first_seen": "2026-08-20T03:59:39Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch1.spaceship.net"
            },
            {
                "ttl": 1800,
                "type": "A",
                "value": "216.198.79.1"
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch2.spaceship.net"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "support.spaceship.com",
                "value": "launch1.spaceship.net"
            }
        ],
        "dns_at": "2026-10-22T02:43:13Z",
        "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
        "cert": {
            "san": [
                "bochk.trade"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "5da7d342b2d0c2b795a7833cdbf294fbb51",
            "sha256": "3a0c8e924f903d57afb8a4151a6e5ad835a6f63f09fdbea84bb29ec0285dfb7b",
            "subject": "bochk.trade",
            "valid_to": "2027-01-19T10:41:40Z",
            "valid_from": "2026-10-21T10:41:41Z"
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862",
            "registrar_url": "https://www.spaceship.com/",
            "created": "2026-08-19T13:01:14Z",
            "updated": "2026-10-18T13:01:17Z",
            "expires": "2027-08-19T13:01:14Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "launch1.spaceship.net",
                "launch2.spaceship.net"
            ],
            "dnssec": "signedDelegation"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "server transfer prohibited"
            ],
            "events": {
                "last changed": "2026-08-19T13:01:16Z",
                "registration": "2026-08-19T13:01:14Z",
                "registrar expiration": "2027-08-19T13:01:14Z",
                "last update of RDAP database": "2026-10-21T02:19:32Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T05:27:09Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bochk.trade"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-23T05:20:31Z",
            "first": "2018-01-17T23:17:35Z",
            "changes": 4,
            "days_archived": 5,
            "scans_per_day": 0,
            "avg_page_bytes": 2009
        },
        "social_tags": {
            "title": "BOC BRIDGE — Trade Finance Copilot",
            "generator": "v0.app",
            "themeColor": "#0a0608",
            "description": "Two firewalled AI copilots for the China–ASEAN trade corridor. BRIDGE prepares the SME; the bank assesses faster. A BOCHK Innovation Case Competition concept."
        },
        "trackers": {
            "requests": 34,
            "trackers": [
                {
                    "name": "Vercel Frontend Observability",
                    "company": "Vercel",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 260,
                "tls": 16,
                "wait": 25,
                "connect": 6,
                "download": 0
            },
            "response_ms": 307
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 18493,
            "co2_grams": 0.0007,
            "cleaner_than": 58
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.38",
                    "host": "launch1.spaceship.net"
                },
                {
                    "ip": "162.159.27.32",
                    "host": "launch2.spaceship.net"
                }
            ],
            "zone": "bochk.trade"
        },
        "location": {
            "ip": "216.198.79.1",
            "asn": "16509",
            "org": "Network Billing Systems",
            "city": "Atlanta",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "bochk.trade"
        },
        "dns": {
            "A": [
                "216.198.79.1"
            ],
            "NS": [
                "launch1.spaceship.net",
                "launch2.spaceship.net"
            ],
            "SOA": "{\"nsname\": \"launch1.spaceship.net\", \"hostmaster\": \"support.spaceship.com\", \"serial\": 1787197093, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3600}"
        },
        "dnssec": {
            "ds": true,
            "rrsig": true,
            "dnskey": true
        },
        "hsts": {
            "header": "max-age=63072000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "216.198.79.1",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://bochk.trade"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.bochk.trade"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Node.js",
                "React",
                "Next.js",
                "Vercel",
                "Vercel Analytics",
                "Priority Hints",
                "HSTS",
                "Webpack"
            ]
        },
        "linked_pages": {
            "internal_count": 2
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-08-19T13:01:14Z",
            "updated": "2026-10-18T13:01:17Z",
            "expires": "2027-08-19T13:01:14Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "launch1.spaceship.net",
                "launch2.spaceship.net"
            ]
        },
        "headers": {
            "headers": {
                "server": "Vercel",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000"
            }
        }
    }
}
```