# PhishDestroy domain threat record: bratislavabucks.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/bratislavabucks.com/ Machine-readable companion: https://phishdestroy.io/domain/bratislavabucks.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 12:03:38 UTC - Last availability or vendor check: 2026-10-23 12:32:21 UTC - Stored record updated: 2026-10-23 14:30:47 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.54.122 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date (registry RDAP, bratislavabucks.com): 2026-05-26 13:19:48 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a168bf-0c81-739c-8d06-494854d92d64/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bratislavabucks.com - Certificate Transparency search: https://crt.sh/?q=%25.bratislavabucks.com - Web Archive lookup: https://web.archive.org/web/*/https://bratislavabucks.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy has placed bratislavabucks.com on its internal blocklist. The recorded page title reads "BratislavaBucks – Moderná investičná platforma pre Slovensko 2026". The domain was first seen by PhishDestroy on 2026-10-23 and returned an HTTP 200 response at that time. How the scam works The listing is based on multiple security‑vendor detections that label the site as malicious, a pattern commonly seen with phishing or fraudulent investment fronts. No specific credential‑stealing form or wallet‑drain module was observed on the page. Consequently, the site should be treated as a potential phishing or scam platform until further behavior is demonstrated. Evidence VirusTotal scanned the domain on 2026-10-22, reporting 16 detections from 92 engines, including 13 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-23 reported no warning. OTX listed three pulses referencing the domain as of 2026-10-23. URLScan captured the site on 2026-10-23; its engine score was 83 (malicious) but the overall verdict was non‑malicious. Cloudflare Radar flagged the domain as malware on the same day. Infrastructure The domain was registered on 2026-05-26 through Dynadot Inc and is 149 days old. The recorded DNS data showed the domain pointing to Cloudflare‑served IPs 104.21.54.122 (recorded in Canada) and 172.67.138.134, and the TLS certificate observed was issued by Let’s Encrypt and was valid until 2026-12-20. Nameservers recorded were mustafa.ns.cloudflare.com and raegan.ns.cloudflare.com. What to do Do not enter credentials, personal data or financial information on this site; if you have already done so, change passwords and monitor accounts for suspicious activity. Security teams should add bratislavabucks.com to blocklists and watch for DNS queries or connections to the recorded Cloudflare IPs. Continue to monitor security feeds for any new behavior associated with this domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a168bf-0c81-739c-8d06-494854d92d64/ Cloudflare Radar report: https://radar.cloudflare.com/scan/e221b51d-04d8-48cf-8dfb-1c48d71774a9 URLQuery report: https://urlquery.net/report/2824fb8e-6904-4c51-86b4-325db1aeb7c6 Stored capture screenshot: https://i.ibb.co/6Rxy3RgB/892f1c6203d8.png Cloudflare Radar screenshot (2026-10-23T12:13:12Z): https://screenshots.phishdestroy.io/cf/e221b51d-04d8-48cf-8dfb-1c48d71774a9.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/2824fb8e-6904-4c51-86b4-325db1aeb7c6.png URLScan screenshot (2026-09-21T20:45:45Z): https://screenshots.phishdestroy.io/us/01a0c5b7-9c5e-738e-8e32-1affe2d19aad.png URLScan capture report: https://urlscan.io/result/01a0c5b7-9c5e-738e-8e32-1affe2d19aad/ URLScan screenshot (2026-09-22T10:04:24Z): https://screenshots.phishdestroy.io/us/01a0c892-ae93-740a-a607-f003a378ea93.png URLScan capture report: https://urlscan.io/result/01a0c892-ae93-740a-a607-f003a378ea93/ URLScan screenshot (2026-10-23T12:23:14Z): https://screenshots.phishdestroy.io/us/01a168b6-fc5f-777b-be57-0aabd9024416.png URLScan capture report: https://urlscan.io/result/01a168b6-fc5f-777b-be57-0aabd9024416/ URLScan screenshot (2026-10-23T12:32:44Z): https://screenshots.phishdestroy.io/us/01a168bf-b6e6-7408-bf0d-eba3c237c843.png URLScan capture report: https://urlscan.io/result/01a168bf-b6e6-7408-bf0d-eba3c237c843/ VirusTotal report: https://www.virustotal.com/gui/domain/bratislavabucks.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bratislavabucks.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 12:47:19 UTC ## Stored page captures - Primary capture: https://i.ibb.co/6Rxy3RgB/892f1c6203d8.png Captured: 2026-10-23 12:32:21 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a168bf-0c81-739c-8d06-494854d92d64.png Captured: 2026-10-23 12:32:21 UTC Source report: https://urlscan.io/result/01a168bf-0c81-739c-8d06-494854d92d64/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a0c892-ae93-740a-a607-f003a378ea93.png Captured: 2026-10-23 12:03:38 UTC Source report: https://urlscan.io/result/01a168bf-0c81-739c-8d06-494854d92d64/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e221b51d-04d8-48cf-8dfb-1c48d71774a9.png Captured: 2026-10-23 12:13:12 UTC Source report: https://radar.cloudflare.com/scan/e221b51d-04d8-48cf-8dfb-1c48d71774a9 SHA-256: 1dbb637e5df674524939c2148fb274a00baef39588930967f85d92f870f30045 - URLQuery: https://screenshots.phishdestroy.io/uq/2824fb8e-6904-4c51-86b4-325db1aeb7c6.png Source report: https://urlquery.net/report/2824fb8e-6904-4c51-86b4-325db1aeb7c6 SHA-256: dcb7be7dedcbb72473d2819ded932faa5617f5792bda4cb7e36c7d1204f6ab76 - URLScan · 2026-09-21: https://screenshots.phishdestroy.io/us/01a0c5b7-9c5e-738e-8e32-1affe2d19aad.png Captured: 2026-09-21 20:45:45 UTC Source report: https://urlscan.io/result/01a0c5b7-9c5e-738e-8e32-1affe2d19aad/ SHA-256: 2440b2d719fa93e757581d98efba4ca529b12109a94c7fa805acb719e49dd99e - URLScan · 2026-09-22: https://screenshots.phishdestroy.io/us/01a0c892-ae93-740a-a607-f003a378ea93.png Captured: 2026-09-22 10:04:24 UTC Source report: https://urlscan.io/result/01a0c892-ae93-740a-a607-f003a378ea93/ SHA-256: 2440b2d719fa93e757581d98efba4ca529b12109a94c7fa805acb719e49dd99e - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a168b6-fc5f-777b-be57-0aabd9024416.png Captured: 2026-10-23 12:23:14 UTC Source report: https://urlscan.io/result/01a168b6-fc5f-777b-be57-0aabd9024416/ SHA-256: a1e52c252a8e0e0dbf1ebe02a5655331ef0f84b4aeedb9bf507834fa96d8f3cc - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a168bf-b6e6-7408-bf0d-eba3c237c843.png Captured: 2026-10-23 12:32:44 UTC Source report: https://urlscan.io/result/01a168bf-b6e6-7408-bf0d-eba3c237c843/ SHA-256: 3dd9bd7db6c11a39d1e3f8a1fe57248aece8b42db73b61e40afca48d66d4b768 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T12:46:25Z", "uuid": "01a168bf-0c81-739c-8d06-494854d92d64", "scanned_at": "2026-10-23T12:32:06Z", "final_url": "https://bratislavabucks.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bratislavabucks.com/", "from": "http://bratislavabucks.com/", "status": 307 }, { "to": "http://bratislavabucks.com/", "from": "https://bratislavabucks.com/", "status": 307 }, { "to": "https://bratislavabucks.com/", "from": "http://bratislavabucks.com/", "status": 307 } ], "ip": "172.67.138.134", "domains": [ "fonts.gstatic.com", "cdnjs.cloudflare.com", "cdn.jsdelivr.net", "modernroomdesigns.com", "fonts.googleapis.com" ], "ips": [ "192.178.183.94", "172.67.222.66", "104.17.24.14", "104.17.208.5", "142.251.13.95", "172.67.138.134" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "doc_hash": "8166db9a5d012733372a2075bbc5f5710e9c276b8eeb999ef48d44667b31b514", "script_hashes": [ "4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885", "e6dceff02b748c5e65495e6fce3bb60a3ce75b53f9ee0c57cd7c42f083846989", "e0d474a967169b7d786344ed8e8223714d42007e0447facc8880749bf1f949b6" ], "globals": [ "polylang", "_language", "_loader", "GEO_API_URL", "_phone_error", "_form_unknown_error", "_leadContactFocusInit", "_tp_intl_locale", "_tp_day_label_1", "_tp_day_label_n", "__offerChatWidgetMounted", "intlTelInput", "gsapVersions", "Linear", "Power0", "Quad", "Power1", "Cubic", "Power2", "Quart", "Power3", "Quint", "Power4", "Strong", "Elastic", "Bounce", "Expo", "Circ", "Sine", "Back", "SteppedEase", "TweenLite", "TweenMax", "TimelineMax", "TimelineLite", "AttrPlugin", "EndArrayPlugin", "RoundPropsPlugin", "ModifiersPlugin", "SnapPlugin" ], "cookies": [ "_subid", "csrftoken" ], "tls": { "san": [ "*.bratislavabucks.com", "bratislavabucks.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bratislavabucks.com", "protocol": "TLS 1.3", "valid_to": "2026-12-20T13:23:43Z", "valid_from": "2026-09-21T13:23:44Z" }, "domain_age_days": 149, "apex_age_days": 149, "tls_age_days": 31, "tls_valid_days": 89, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 83, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T12:14:57Z", "uuid": "e221b51d-04d8-48cf-8dfb-1c48d71774a9", "scanned_at": "2026-10-23T12:13:12Z", "final_url": "https://bratislavabucks.com/", "status": 200, "history": [ { "url": "https://bratislavabucks.com/", "status": 200 } ], "dom_hash": "f0cc79368bf8beca06bc7289f8e873d4ffcc164df2fc367dd092c4dcb0c90aae", "doc_hash": "54f033f69c146eba93e9de14b2df4cebfd512ea83ac637a1fd7ab5c73103ab56", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bratislavabucks.com", "type": "A", "value": "104.21.54.122" }, { "name": "bratislavabucks.com", "type": "A", "value": "172.67.138.134" }, { "name": "bratislavabucks.com", "type": "AAAA", "value": "2606:4700:3030::ac43:8a86" }, { "name": "bratislavabucks.com", "type": "AAAA", "value": "2606:4700:3031::6815:367a" } ], "dnssec_valid": false, "ip": "104.21.54.122", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-05-26T13:19:48Z", "updated": "2026-05-26T13:19:58Z", "expires": "2027-05-26T13:19:48Z", "nameservers": [ "mustafa.ns.cloudflare.com", "raegan.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T12:44:40Z", "analysis_at": "2026-10-22T06:06:13Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "Dynadot Inc", "created": "2026-05-26T13:19:48Z", "expires": "2027-05-26T13:19:48Z", "updated": "2026-05-26T13:19:58Z", "first_seen": "2026-05-26T13:43:08Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::6815:367a" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "mustafa.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.138.134" }, { "ttl": 21600, "type": "NS", "value": "raegan.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "mustafa.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.54.122" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::ac43:8a86" } ], "dns_at": "2026-10-22T06:11:44Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.bratislavabucks.com", "bratislavabucks.com" ], "issuer": "Let's Encrypt / YE2", "serial": "6eaf81bfa6b20781ddf5503dddc8060e60c", "sha256": "f178b3e93603f7770181c0b39fb8c358820b756b68d274c4ffbcb4a7d3b8950b", "subject": "bratislavabucks.com", "valid_to": "2026-12-20T13:23:43Z", "valid_from": "2026-09-21T13:23:44Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-05-26T13:19:48Z", "updated": "2026-05-26T13:19:58Z", "expires": "2027-05-26T13:19:48Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "mustafa.ns.cloudflare.com", "raegan.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-05-26T13:19:48Z", "last changed": "2026-05-26T13:19:58Z", "registration": "2026-05-26T13:19:48Z", "registrar expiration": "2027-05-26T13:19:48Z", "last update of RDAP database": "2026-10-16T07:10:21Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T12:15:16Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bratislavabucks.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T12:07:45Z", "first": "2026-10-15T06:22:31Z", "changes": 2, "days_archived": 3, "scans_per_day": 0.24, "avg_page_bytes": 17981 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://bratislavabucks.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 31 }, "social_tags": { "ogUrl": "https://bratislavabucks.com/", "title": "BratislavaBucks – Moderná investičná platforma pre Slovensko 2026", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://bratislavabucks.com/static/template_25/media/brand.svg", "ogTitle": "BratislavaBucks – Moderná investičná platforma pre Slovensko 2026", "ogSiteName": "BratislavaBucks", "themeColor": "#f8fbf7", "description": "BratislavaBucks je inovatívna platforma pre používateľov na Slovensku. Objavte moderné nástroje, rýchly prístup a inteligentné riešenia pre finančný rast v roku 2026. Bezpečný systém a optimalizované technológie pre lepšie výsledky.", "twitterCard": "summary_large_image", "canonicalUrl": "https://bratislavabucks.com/", "ogDescription": "BratislavaBucks je inovatívna platforma pre používateľov na Slovensku. Objavte moderné nástroje, rýchly prístup a inteligentné riešenia pre finančný rast v roku 2026. Bezpečný systém a optimalizované technológie pre lepšie výsledky." }, "trackers": { "requests": 17, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 4 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 4 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js", "https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js", "https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/ScrollTrigger.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 7, "tls": 54, "wait": 217, "connect": 8, "download": 1 }, "response_ms": 287 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 61307, "co2_grams": 0.0022, "cleaner_than": 33 }, "dns_server": { "ns": [ { "ip": "162.159.38.158", "host": "raegan.ns.cloudflare.com" }, { "ip": "162.159.44.27", "host": "mustafa.ns.cloudflare.com" } ], "zone": "bratislavabucks.com" }, "cookies": { "cookies": [ { "name": "_subid", "session": true }, { "name": "csrftoken", "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3030::ac43:8a86", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bratislavabucks.com" }, "dns": { "A": [ "172.67.138.134", "104.21.54.122" ], "NS": [ "raegan.ns.cloudflare.com", "mustafa.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"mustafa.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417846097, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3030::ac43:8a86", "2606:4700:3031::6815:367a" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3031::6815:367a", "family": 6 }, "redirects": { "chain": [ "https://bratislavabucks.com" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-05-26T13:19:48Z", "updated": "2026-05-26T13:19:58Z", "expires": "2027-05-26T13:19:48Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "mustafa.ns.cloudflare.com", "raegan.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "same-origin", "cross-origin-opener-policy": "same-origin" } } } } ```