# PhishDestroy domain threat record: britmarkflow.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/britmarkflow.shop/ Machine-readable companion: https://phishdestroy.io/domain/britmarkflow.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 14:56:23 UTC - Last availability or vendor check: 2026-10-23 23:14:34 UTC - Stored record updated: 2026-10-24 10:20:53 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.56.121 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-04-15 22:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16941-7e9e-771d-80d2-9a250cf94424/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/britmarkflow.shop - Certificate Transparency search: https://crt.sh/?q=%25.britmarkflow.shop - Web Archive lookup: https://web.archive.org/web/*/https://britmarkflow.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added britmarkflow.shop to its internal blocklist on 2026-10-23 based on a trusted report. The recorded page title advertised an AI trading platform. An HTTP 200 response was recorded on the same date, indicating the site was reachable at that time. How the scam works Because the domain triggered multiple security detections, it is considered potentially malicious, but no concrete phishing, malware delivery, or credential‑harvesting behavior was observed on the fetched page. Evidence VirusTotal scanned the domain on 2026-10-22 and returned 17 detections from 92 engines, including 14 malicious and 3 suspicious labels. Google Safe Browsing checked on 2026-10-23 did not flag the site. OTX listed five pulses as of 2026-10-23. urlscan.io captured the site on 2026-10-23, reporting a malicious engine score of 98 while its overall verdict was non‑malicious. Cloudflare Radar also flagged the domain as malicious with a malware category on 2026-10-23. Infrastructure The domain was registered on 2026-04-16, giving it an age of 190 days at first sighting. The recorded IP was 185.62.56.121, which the hosting record listed as belonging to Snel.com B.V. in the Netherlands, and the domain used Cloudflare DNS at the time of observation. The TLS certificate, issued by ZeroSSL ECC DV, covered britmarkflow.shop and was valid from 2026-08-31 to 2026-11-29, using TLS 1.3 with forward secrecy. What to do Visitors should avoid entering credentials or downloading files from the site until its safety can be verified; if any credentials were submitted, change the associated passwords. Defenders should block the exact domain, monitor logs for connections to the recorded IP, and treat any activity involving britmarkflow.shop as potentially malicious. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16941-7e9e-771d-80d2-9a250cf94424/ Cloudflare Radar report: https://radar.cloudflare.com/scan/86b67997-163d-4e3a-8902-8ee4029f0615 URLQuery report: https://urlquery.net/report/1a3ee069-85ee-48f2-aa9b-8a719379fe07 Stored capture screenshot: https://urlscan.io/screenshots/01a16941-7e9e-771d-80d2-9a250cf94424.png Cloudflare Radar screenshot (2026-10-23T15:30:40Z): https://screenshots.phishdestroy.io/cf/86b67997-163d-4e3a-8902-8ee4029f0615.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/1a3ee069-85ee-48f2-aa9b-8a719379fe07.png URLScan screenshot (2026-10-23T14:51:45Z): https://screenshots.phishdestroy.io/us/01a1693e-d68a-7536-ab83-4883025a0f79.png URLScan capture report: https://urlscan.io/result/01a1693e-d68a-7536-ab83-4883025a0f79/ VirusTotal report: https://www.virustotal.com/gui/domain/britmarkflow.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=britmarkflow.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 16:01:19 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16941-7e9e-771d-80d2-9a250cf94424.png Captured: 2026-10-23 14:56:23 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16941-7e9e-771d-80d2-9a250cf94424.png Captured: 2026-10-23 14:56:23 UTC Source report: https://urlscan.io/result/01a16941-7e9e-771d-80d2-9a250cf94424/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/86b67997-163d-4e3a-8902-8ee4029f0615.png Captured: 2026-10-23 15:30:40 UTC Source report: https://radar.cloudflare.com/scan/86b67997-163d-4e3a-8902-8ee4029f0615 SHA-256: 6d30e62c3653001f01c22346144bf0de9b036a038ff9debdd1fd415127655b9a - URLQuery: https://screenshots.phishdestroy.io/uq/1a3ee069-85ee-48f2-aa9b-8a719379fe07.png Source report: https://urlquery.net/report/1a3ee069-85ee-48f2-aa9b-8a719379fe07 SHA-256: 8e2c03dfa56c25aeab02b5d95210ab286ed5ce344c4caddc11334f8295862327 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a1693e-d68a-7536-ab83-4883025a0f79.png Captured: 2026-10-23 14:51:45 UTC Source report: https://urlscan.io/result/01a1693e-d68a-7536-ab83-4883025a0f79/ SHA-256: b8fb693f13b18c1ad22f07b54268378bb30cce340a71750ddb518d096d9b747e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T15:33:15Z", "uuid": "01a16941-7e9e-771d-80d2-9a250cf94424", "scanned_at": "2026-10-23T14:54:35Z", "final_url": "https://britmarkflow.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://britmarkflow.shop/", "from": "http://britmarkflow.shop/", "status": 307 } ], "ip": "185.62.56.121", "domains": [ "fonts.gstatic.com", "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.16.123.96", "142.251.42.99", "104.17.208.5", "104.17.25.14", "142.250.195.138", "185.62.56.121" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "313bd4d76489229c851d2e4a2499c15ce22ec0d010c95a98da0dfcb96b67bd7d", "script_hashes": [ "266f1237d8895b06e1237aae5369ed15716b2eb23e22443c39fb8f146a647265" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "britmarkflow.shop" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "britmarkflow.shop", "protocol": "TLS 1.3", "valid_to": "2026-11-29T23:59:59Z", "valid_from": "2026-08-31T00:00:00Z" }, "domain_age_days": 190, "apex_age_days": 190, "tls_age_days": 53, "tls_valid_days": 90, "requests": 28, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T15:33:18Z", "uuid": "86b67997-163d-4e3a-8902-8ee4029f0615", "scanned_at": "2026-10-23T15:30:40Z", "final_url": "https://britmarkflow.shop/", "status": 200, "history": [ { "url": "https://britmarkflow.shop/", "status": 200 } ], "dom_hash": "9d75a01e7944e58621f4d67f4756fdffd5670e5143b1e3d7c33f23c060f78f4e", "doc_hash": "313bd4d76489229c851d2e4a2499c15ce22ec0d010c95a98da0dfcb96b67bd7d", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "britmarkflow.shop", "type": "A", "value": "185.62.56.121" } ], "dnssec_valid": false, "ip": "185.62.56.121", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T16:00:20Z", "analysis_at": "2026-10-22T12:09:17Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-04-16T00:00:00Z", "updated": "2026-04-16T00:00:00Z", "first_seen": "2026-04-16T14:40:52Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "glen.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.56.121" }, { "ttl": 21600, "type": "NS", "value": "ophelia.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "glen.ns.cloudflare.com" } ], "dns_at": "2026-10-22T12:14:40Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "britmarkflow.shop" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "48483b893e65dae7ff47f563dada1c14", "sha256": "c5727683ac5759a7499bcbe9da1704517e4cd0a46aa39ae802eb6579715f371a", "subject": "britmarkflow.shop", "valid_to": "2026-11-29T23:59:59Z", "valid_from": "2026-08-31T00:00:00Z" }, "whois": [] }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T15:23:42Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "britmarkflow.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T14:57:35Z", "first": "2026-10-23T14:57:35Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 12619 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://britmarkflow.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://britmarkflow.shop/", "title": "Britmark flow | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Britmark flow | AI Bot Execution & Risk Controls", "ogSiteName": "Britmark flow", "themeColor": "#180025", "description": "Britmark flow unveils AI-powered trading bot tooling for strategy orchestration, precise execution controls, and risk-aware workflows across major markets with reinforced operational visibility.", "twitterCard": "summary", "canonicalUrl": "https://britmarkflow.shop/", "ogDescription": "Britmark flow delivers AI-powered trading bot tooling for strategy orchestration, execution controls, and risk-aware workflows across major markets with reinforced operational visibility." }, "trackers": { "requests": 20, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 28, "tls": 34, "wait": 22, "connect": 46, "download": 42 }, "response_ms": 172 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 48370, "co2_grams": 0.0018, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "172.64.33.169", "host": "glen.ns.cloudflare.com" }, { "ip": "172.64.34.248", "host": "ophelia.ns.cloudflare.com" } ], "zone": "britmarkflow.shop" }, "location": { "ip": "185.62.56.121", "asn": "62370", "org": "Snel.com B.V.", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "britmarkflow.shop" }, "dns": { "A": [ "185.62.56.121" ], "NS": [ "glen.ns.cloudflare.com", "ophelia.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"glen.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417152386, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.121", "family": 4 }, "redirects": { "chain": [ "https://britmarkflow.shop" ] }, "tech_stack": { "technologies": [ "Cloudflare", "Cloudflare Turnstile", "ClientJS", "Priority Hints", "jsDelivr", "Google Font API", "Font Awesome", "cdnjs", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 37 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```