# PhishDestroy domain threat record: crestvaultshire.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/crestvaultshire.shop/
Machine-readable companion: https://phishdestroy.io/domain/crestvaultshire.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 01:00:51 UTC
- Last availability or vendor check: 2026-10-25 11:00:52 UTC
- Stored record updated: 2026-10-25 11:31:47 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.57.222
- Registrar in stored WHOIS data: Dynadot Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-19 23:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17091-439e-74a9-86b9-f3fff2665349/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/crestvaultshire.shop
- Certificate Transparency search: https://crt.sh/?q=%25.crestvaultshire.shop
- Web Archive lookup: https://web.archive.org/web/*/https://crestvaultshire.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed crestvaultshire.shop on 2026-10-25 after the domain returned HTTP 200 with a page titled “Crest Vaultshire | AI Trading Platform | Official Website”. The listing relies on multiple security‑vendor detections rather than observed theft. The site was first seen by PhishDestroy on 2026-10-25.

How the scam works
The domain is flagged by several anti‑malware engines as phishing or malware. In general, sites that present a fake AI‑driven trading service may try to harvest login credentials, deliver unwanted scripts, or redirect visitors to malicious payloads. No specific malicious payload or credential‑harvesting form was captured in the page snapshot.

Evidence
VirusTotal recorded 14 malicious and 3 suspicious detections from 92 engines on 2026-10-22 (retrieved 2026-10-25). Google Safe Browsing reported no threat on 2026-10-25. urlscan.io’s engine verdict marked the URL as malicious with a score of 98 on 2026-10-25, while its overall verdict was non‑malicious. Cloudflare Radar classified the domain as malicious with malware and phishing tags on 2026-10-25. OTX listed five pulses referencing the domain as of 2026-10-25. PhishDestroy’s internal blocklist also contains the domain.

Infrastructure
The recorded DNS A record pointed to 185.62.57.222, which the registration data listed as belonging to Snel.com B.V. in Rotterdam, NL, and the domain was delivered through Cloudflare’s CDN. The certificate issued by ZeroSSL ECC DV was valid from 2026-08-31 to 2026-11-29. The page loaded third‑party scripts from jsDelivr, Cloudflare and Google services.

What to do
Visitors should avoid submitting any personal or financial information on the site; if credentials were entered, change them immediately. Do not download or execute files from the domain. Network defenders should block the hostname crestvaultshire.shop and monitor outbound traffic for connections to the listed third‑party services.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17091-439e-74a9-86b9-f3fff2665349/
Cloudflare Radar report: https://radar.cloudflare.com/scan/b6f4cade-446f-4847-92d3-a571aa46ea09
URLQuery report: https://urlquery.net/report/9b608344-7042-4028-b2e5-18f44a691a0e
Stored capture screenshot: https://urlscan.io/screenshots/01a17091-439e-74a9-86b9-f3fff2665349.png
Cloudflare Radar screenshot (2026-10-25T01:33:47Z): https://screenshots.phishdestroy.io/cf/b6f4cade-446f-4847-92d3-a571aa46ea09.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/9b608344-7042-4028-b2e5-18f44a691a0e.png
URLScan screenshot (2026-10-25T00:48:18Z): https://screenshots.phishdestroy.io/us/01a17087-7268-7788-824c-297b801f4027.png
URLScan capture report: https://urlscan.io/result/01a17087-7268-7788-824c-297b801f4027/
URLScan screenshot (2026-10-25T00:48:37Z): https://screenshots.phishdestroy.io/us/01a17087-bf06-7498-8d24-c89747c6933f.png
URLScan capture report: https://urlscan.io/result/01a17087-bf06-7498-8d24-c89747c6933f/
VirusTotal report: https://www.virustotal.com/gui/domain/crestvaultshire.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=crestvaultshire.shop
Archived copy: https://web.archive.org/web/20261025010219/https://crestvaultshire.shop/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 02:51:02 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17091-439e-74a9-86b9-f3fff2665349.png
  Captured: 2026-10-25 01:00:51 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17091-439e-74a9-86b9-f3fff2665349.png
  Captured: 2026-10-25 01:00:51 UTC
  Source report: https://urlscan.io/result/01a17091-439e-74a9-86b9-f3fff2665349/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b6f4cade-446f-4847-92d3-a571aa46ea09.png
  Captured: 2026-10-25 01:33:47 UTC
  Source report: https://radar.cloudflare.com/scan/b6f4cade-446f-4847-92d3-a571aa46ea09
  SHA-256: 14022204a168ffd464d206edad6ab3889b5c05ae4bbd9a1d430a155f3619cdd5
- URLQuery: https://screenshots.phishdestroy.io/uq/9b608344-7042-4028-b2e5-18f44a691a0e.png
  Source report: https://urlquery.net/report/9b608344-7042-4028-b2e5-18f44a691a0e
  SHA-256: c95fda8fdb0be3ab16017b9e224ad4419ee6135afc75310dc15ebad5aa8b08de
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17087-7268-7788-824c-297b801f4027.png
  Captured: 2026-10-25 00:48:18 UTC
  Source report: https://urlscan.io/result/01a17087-7268-7788-824c-297b801f4027/
  SHA-256: db0a8bfce67e987f963349cd2bc3aec999c5d13e84b4c619787ef5f27af51927
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17087-bf06-7498-8d24-c89747c6933f.png
  Captured: 2026-10-25 00:48:37 UTC
  Source report: https://urlscan.io/result/01a17087-bf06-7498-8d24-c89747c6933f/
  SHA-256: 83dd51129bebd280a65bb9a8ba4b9e034452bd88d668883629dffdcde6d24a35

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T01:03:42Z",
        "uuid": "01a17091-439e-74a9-86b9-f3fff2665349",
        "scanned_at": "2026-10-25T00:59:01Z",
        "final_url": "https://crestvaultshire.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://crestvaultshire.shop/",
                "from": "http://crestvaultshire.shop/",
                "status": 307
            }
        ],
        "ip": "185.62.57.222",
        "ptr": "s46024.hosted-by-snel.com",
        "domains": [
            "cdn.jsdelivr.net",
            "challenges.cloudflare.com",
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "www.cloudflare.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.20.94",
            "104.18.94.41",
            "104.16.123.96",
            "151.101.65.229",
            "104.17.24.14",
            "142.251.127.95",
            "185.62.57.222"
        ],
        "asns": [
            "15169",
            "13335",
            "54113",
            "62370"
        ],
        "countries": [
            "US",
            "NL"
        ],
        "doc_hash": "5d4e4bc034315fb49e05ed6cd7c3de4e89a9aa050b6b5fd65da49814ec027656",
        "script_hashes": [
            "62192182b2578d27c0a1a872d315a2102b9431acd2a622b4020011ca1b8fbfd1"
        ],
        "globals": [
            "toggleTermsPopup",
            "intlTelInput",
            "__TS_SITEKEY",
            "__tsGet",
            "__tsReset",
            "__tsNeedsClick",
            "__tsShow",
            "__lgBS",
            "ClientJS",
            "__visitorCountry",
            "turnstile"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "crestvaultshire.shop"
            ],
            "cipher": "CHACHA20_POLY1305",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "crestvaultshire.shop",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-29T23:59:59Z",
            "valid_from": "2026-08-31T00:00:00Z"
        },
        "domain_age_days": 218,
        "apex_age_days": 218,
        "tls_age_days": 55,
        "tls_valid_days": 90,
        "requests": 22,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T02:13:39Z",
        "uuid": "b6f4cade-446f-4847-92d3-a571aa46ea09",
        "scanned_at": "2026-10-25T01:33:47Z",
        "final_url": "https://crestvaultshire.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://crestvaultshire.shop/",
                "status": 200
            }
        ],
        "dom_hash": "0c30e0b5d84afe68dcc887db94e37f6fb39ea67e907cd47f49c579cf8d0ff481",
        "doc_hash": "5d4e4bc034315fb49e05ed6cd7c3de4e89a9aa050b6b5fd65da49814ec027656",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "crestvaultshire.shop",
                "type": "A",
                "value": "185.62.57.222"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.57.222",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T02:45:40Z",
        "analysis_at": "2026-10-22T18:12:50Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 14,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Bfore.Ai PreCrime": "malicious",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-03-20T00:00:00Z",
        "updated": "2026-03-20T00:00:00Z",
        "first_seen": "2026-03-20T20:46:31Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.57.222"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jocelyn.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "robert.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "jocelyn.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-22T18:18:31Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "crestvaultshire.shop"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "69ee952a2064c8016711e3610e10741b",
            "sha256": "e9fadf50d5d00e4f138a238a4eff53f8e3334b9cb843d0a2ebac8ee09bfac927",
            "subject": "crestvaultshire.shop",
            "valid_to": "2026-11-29T23:59:59Z",
            "valid_from": "2026-08-31T00:00:00Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T01:27:14Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "crestvaultshire.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T01:02:19Z",
            "first": "2026-10-10T00:11:55Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.07,
            "avg_page_bytes": 13437
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://crestvaultshire.shop/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 175
        },
        "social_tags": {
            "ogUrl": "https://crestvaultshire.shop/",
            "title": "Crest Vaultshire | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Crest Vaultshire | AI-Driven Trading Bots Overview",
            "ogSiteName": "Crest Vaultshire",
            "themeColor": "#000000",
            "description": "Crest Vaultshire delivers a premium tour of AI-driven automated trading bots, workflow orchestration, and risk governance, with crisp feature insights and actionable guidance.",
            "twitterCard": "summary",
            "canonicalUrl": "https://crestvaultshire.shop/",
            "ogDescription": "Crest Vaultshire provides a premium look at AI-powered automated trading bots, workflow automation, and risk governance, with crisp feature insights and actionable guidance."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 6
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 22,
                "tls": 271,
                "wait": 164,
                "connect": 62,
                "download": 0
            },
            "response_ms": 519
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_CHACHA20_POLY1305_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 50346,
            "co2_grams": 0.0018,
            "cleaner_than": 37
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.32.174",
                    "host": "jocelyn.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.140",
                    "host": "robert.ns.cloudflare.com"
                }
            ],
            "zone": "crestvaultshire.shop"
        },
        "location": {
            "ip": "185.62.57.222",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "crestvaultshire.shop"
        },
        "dns": {
            "A": [
                "185.62.57.222"
            ],
            "NS": [
                "robert.ns.cloudflare.com",
                "jocelyn.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"jocelyn.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415455934, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.57.222",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://crestvaultshire.shop"
            ]
        },
        "linked_pages": {
            "internal_count": 49
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```