# PhishDestroy domain threat record: digitalwebprints.info

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/digitalwebprints.info/
Machine-readable companion: https://phishdestroy.io/domain/digitalwebprints.info/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 16:20:54 UTC
- Last availability or vendor check: 2026-10-26 16:42:05 UTC
- Stored record updated: 2026-10-26 20:12:09 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 198.251.89.144
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2025-12-21 14:25:49 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17915-95c1-7108-9145-80f87078cbf5/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/digitalwebprints.info
- Certificate Transparency search: https://crt.sh/?q=%25.digitalwebprints.info
- Web Archive lookup: https://web.archive.org/web/*/https://digitalwebprints.info/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot shows a dark investment landing page branded Bayswift, headlined SAFE INVESTMENT WITH BAYSWIFT and GET LIFETIME INCOME ON INVESTMENT, with an OPEN DEPOSIT button, registration and login links, a crypto price ticker, and a popup claiming a user just earned $4102. PhishDestroy listed the domain because intake assessed it as a fraudulent investment scheme with high model confidence. First seen by PhishDestroy on 2026-10-26.

How the scam works
The page lures visitors with promises of lifetime income and automated trading robots, then routes them through registration and a deposit flow built to capture transfers. As a category risk, such pages solicit deposits against fabricated returns and social-proof earning popups with no verifiable yield behind them. The observed OPEN DEPOSIT call to action is the conversion point.

Evidence
The captured screenshot shows the deposit offer, live ticker and earnings popup as observed on 2026-10-26. URLScan returned a malicious verdict with an ML score of 98, categorised as phishing and a crypto scam, on 2026-10-26, reached through an HTTP to HTTPS 307 redirect. VirusTotal flagged the domain as suspicious, with a labelling vendor categorising it as phishing. Spamhaus did not list it, Google Safe Browsing did not flag it, and AlienVault OTX recorded zero pulses on 2026-10-26, while two external blocklists, MetaMask and SEAL, plus PhishDestroy's internal blocklist, did flag it. Site inspection recorded jQuery, GSAP, createjs, Smartsupp chat, Google Tag Manager and Clarity, and five distinct script SHA256 hashes for pivoting, the first beginning f554d2f09272.

Infrastructure
Registered through Dynadot Inc on 2025-12-21, with LiteSpeed as the recorded web server and no WAF or firewall identified. Technical posture is weak: TLS 1.3, AES-256-GCM, forward secrecy, ALPN h2; CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, COEP and CORP all absent; SPF and DKIM present but no DMARC; CAA records present; DNSSEC unsigned.

What to do
Visitors who submitted credentials or deposit details should change the password on the genuine service they used, enable two-factor authentication, and report any transfer to their bank or exchange. Do not send further deposits or trust the chat agents shown on the captured page. Security teams should block digitalwebprints.info, retain the recorded script hashes, and watch for related infrastructure.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17915-95c1-7108-9145-80f87078cbf5/
Cloudflare Radar report: https://radar.cloudflare.com/scan/5c0bb3bc-72a4-4494-bf64-812cc415bd42
URLQuery report: https://urlquery.net/report/e590768f-e7d7-4679-997c-22fa46e4c362
Stored capture screenshot: https://i.ibb.co/DgzdQ2Wt/b35cb1029d8e.png
Cloudflare Radar screenshot (2026-10-26T16:29:50Z): https://screenshots.phishdestroy.io/cf/5c0bb3bc-72a4-4494-bf64-812cc415bd42.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/e590768f-e7d7-4679-997c-22fa46e4c362.png
VirusTotal report: https://www.virustotal.com/gui/domain/digitalwebprints.info
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=digitalwebprints.info
Archived copy: https://web.archive.org/web/20261026163211/https://digitalwebprints.info/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:12:09 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/DgzdQ2Wt/b35cb1029d8e.png
  Captured: 2026-10-26 16:42:05 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17915-95c1-7108-9145-80f87078cbf5.png
  Captured: 2026-10-26 16:42:05 UTC
  Source report: https://urlscan.io/result/01a17915-95c1-7108-9145-80f87078cbf5/
- URLScan capture 2: https://urlscan.io/screenshots/01a176fe-542b-765f-b0f3-1429fb887b8d.png
  Captured: 2026-10-26 16:20:54 UTC
  Source report: https://urlscan.io/result/01a17915-95c1-7108-9145-80f87078cbf5/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5c0bb3bc-72a4-4494-bf64-812cc415bd42.png
  Captured: 2026-10-26 16:29:50 UTC
  Source report: https://radar.cloudflare.com/scan/5c0bb3bc-72a4-4494-bf64-812cc415bd42
  SHA-256: cfd0283452405db79e52d223234e8c12d5de20327730a8400627fdb57fd2dd25
- URLQuery: https://screenshots.phishdestroy.io/uq/e590768f-e7d7-4679-997c-22fa46e4c362.png
  Source report: https://urlquery.net/report/e590768f-e7d7-4679-997c-22fa46e4c362
  SHA-256: 3a9cf314bc96d82944e5de581ca4d3cfb53441b2a125367d5f19f567816fb4c5

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T18:11:40Z",
        "uuid": "01a17915-95c1-7108-9145-80f87078cbf5",
        "scanned_at": "2026-10-26T16:40:29Z",
        "final_url": "https://digitalwebprints.info/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://digitalwebprints.info/",
                "from": "http://digitalwebprints.info/",
                "status": 307
            }
        ],
        "ip": "198.251.89.144",
        "ptr": "s11.my-control-panel.com",
        "domains": [
            "www.tradingview-widget.com",
            "s2.coinmarketcap.com",
            "widget.coinlib.io",
            "s3-symbol-logo.tradingview.com",
            "widgetdata.tradingview.com",
            "widget-sheriff.tradingview-widget.com",
            "s3.tradingview.com",
            "www.googletagmanager.com",
            "cdnjs.cloudflare.com",
            "bootstrap.smartsuppchat.com",
            "www.smartsuppchat.com",
            "fonts.gstatic.com",
            "fonts.googleapis.com",
            "code.createjs.com",
            "www.clarity.ms",
            "static.whatshelp.io"
        ],
        "ips": [
            "108.138.7.96",
            "142.251.14.97",
            "63.180.149.57",
            "195.181.175.40",
            "108.138.26.43",
            "142.251.110.94",
            "185.111.111.155",
            "74.125.29.95",
            "216.150.1.193",
            "23.44.215.195",
            "185.111.111.157",
            "104.17.25.14",
            "198.251.89.144"
        ],
        "asns": [
            "16509",
            "15169",
            "60068",
            "212238",
            "20940",
            "13335",
            "53667"
        ],
        "countries": [
            "US",
            "DE",
            "CZ",
            "LU"
        ],
        "link_domains": [
            "coinlib.io",
            "www.tradingview.com"
        ],
        "doc_hash": "73f070299eea97f0426b13005d989cf63da2f79e9dac4f0a5e014c4b2ca64e3b",
        "script_hashes": [
            "f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729",
            "3080edfd181c84e9a02b4b7c3de1445ff5e8c4d855500deb776b6615dc2a138f",
            "b0ae81165dd22ea20a9dfe56e8d184a5b931fd484f8779fd0ca5c5da56d59f90",
            "87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de",
            "a2e77918046fe456ba3d874ccddd3d0bf40a9774c0ffe5d70b08e069b777e847"
        ],
        "globals": [
            "$",
            "jQuery",
            "gsapVersions",
            "notifier",
            "StickySidebar",
            "createjs",
            "JSON3",
            "AdobeAn",
            "canvas",
            "stage",
            "exportRoot",
            "anim_container",
            "dom_overlay_container",
            "fnStartAnimation",
            "init",
            "handleFileLoad",
            "handleComplete",
            "_smartsupp",
            "smartsupp",
            "select",
            "tar",
            "minMoneyur2",
            "minMoneyu2",
            "maxMoneyu2",
            "valut",
            "minMoneyur3",
            "minMoneyu3",
            "maxMoneyu3",
            "minMoneyur4",
            "minMoneyu4",
            "maxMoneyu4",
            "minMoneyr",
            "minMoney",
            "maxMoney",
            "amount",
            "daily",
            "weekly",
            "mountly",
            "Modal",
            "SMARTSUPP_LOADED"
        ],
        "cookies": [
            "XSRF-TOKEN",
            "bitcoin_investment_session"
        ],
        "tls": {
            "san": [
                "*.shipping.digitalwebprints.com",
                "autodiscover.digitalwebprints.info",
                "bayswift.xyz",
                "cpanel.digitalwebprints.info",
                "cpcalendars.digitalwebprints.info",
                "cpcontacts.digitalwebprints.info",
                "digitalwebprints.info",
                "mail.digitalwebprints.info",
                "shipping.digitalwebprints.com",
                "shippings.igitalwebprints.cpm.digitalwebprints.info"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR2",
            "subject": "webdisk.digitalwebprints.info",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-07T12:12:35Z",
            "valid_from": "2026-10-09T12:12:36Z"
        },
        "domain_age_days": 308,
        "apex_age_days": 308,
        "tls_age_days": 17,
        "tls_valid_days": 89,
        "requests": 301,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "cryptoscam"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Crypto Scam"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "LiteSpeed",
            "content-type": "text/html; charset=UTF-8",
            "x-powered-by": "PHP/7.4.33"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T16:33:13Z",
        "uuid": "5c0bb3bc-72a4-4494-bf64-812cc415bd42",
        "scanned_at": "2026-10-26T16:29:50Z",
        "final_url": "https://digitalwebprints.info/",
        "status": 200,
        "history": [
            {
                "url": "https://digitalwebprints.info/",
                "status": 200
            }
        ],
        "dom_hash": "66038b0b003652fd9453007ca0135ecebec1dc1dca0768c34b86a45688f8ddff",
        "doc_hash": "73f070299eea97f0426b13005d989cf63da2f79e9dac4f0a5e014c4b2ca64e3b",
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Scam",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "digitalwebprints.info",
                "type": "A",
                "value": "198.251.89.144"
            }
        ],
        "dnssec_valid": false,
        "ip": "198.251.89.144"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T16:28:02Z",
        "analysis_at": "2026-10-23T23:09:56Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 0,
            "suspicious": 1,
            "undetected": 35
        },
        "detections": {
            "alphaMountain.ai": "suspicious"
        },
        "reputation": 0,
        "categories": {
            "Sophos": "phishing and fraud",
            "Webroot": "Phishing and Other Frauds",
            "alphaMountain.ai": "Phishing (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "phishing and other frauds"
        },
        "created": "2025-12-21T00:00:00Z",
        "updated": "2025-12-22T00:00:00Z",
        "first_seen": "2025-12-22T07:03:11Z",
        "dns": [
            {
                "ttl": 14400,
                "type": "A",
                "value": "198.251.89.144"
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "v=spf1 +a +mx +ip4:192.168.168.2 ~all"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns15.my-control-panel.com"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "alerts.my-control-panel.com",
                "value": "ns15.my-control-panel.com"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "digitalwebprints.info",
                "priority": 0
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns16.my-control-panel.com"
            }
        ],
        "dns_at": "2026-10-23T23:11:15Z",
        "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
        "cert": {
            "san": [
                "*.shipping.digitalwebprints.com",
                "autodiscover.digitalwebprints.info",
                "bayswift.xyz",
                "cpanel.digitalwebprints.info",
                "cpcalendars.digitalwebprints.info",
                "cpcontacts.digitalwebprints.info",
                "digitalwebprints.info",
                "mail.digitalwebprints.info",
                "shipping.digitalwebprints.com",
                "shippings.igitalwebprints.cpm.digitalwebprints.info"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "6048993a590c6b9309ffbd5a0d8a957ba1a",
            "sha256": "c6bd8ea12ffa6db0d05d630b253a027bcc62ce88bc040b448aebc608a77770bd",
            "subject": "webdisk.digitalwebprints.info",
            "valid_to": "2027-01-07T12:12:35Z",
            "valid_from": "2026-10-09T12:12:36Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2026-12-21T15:25:49Z",
                "last changed": "2025-12-22T05:48:43Z",
                "registration": "2025-12-21T15:25:49Z",
                "registrar expiration": "2026-12-21T15:25:49Z",
                "last update of RDAP database": "2026-10-23T10:09:49Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T16:34:25Z",
        "mail_config": {
            "mx": [
                "digitalwebprints.info"
            ],
            "spf": "v=spf1 +a +mx +ip4:192.168.168.2 ~all",
            "dkim": [
                "default"
            ],
            "dkim_bits": 2048,
            "spf_lookups": 2
        },
        "caa_records": {
            "domain": "digitalwebprints.info"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T16:32:11Z",
            "first": "2026-10-26T16:32:11Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 17446
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true
        },
        "social_tags": {
            "title": "Bayswift – Safe investment with Bayswift"
        },
        "mixed_content": {
            "no_sri": [
                "https://s3.tradingview.com/external-embedding/embed-widget-market-overview.js",
                "https://s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js",
                "https://s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js",
                "https://code.createjs.com/createjs-2015.11.26.min.js"
            ],
            "third_party_scripts": 4
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 5,
                "tls": 75,
                "wait": 1417,
                "connect": 61,
                "download": 183
            },
            "response_ms": 1741
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                25,
                53,
                80,
                110,
                143,
                443,
                587,
                993,
                995,
                3306
            ]
        },
        "carbon": {
            "bytes": 89310,
            "co2_grams": 0.0033,
            "cleaner_than": 24
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "107.189.12.204",
                    "host": "ns15.my-control-panel.com"
                },
                {
                    "ip": "198.251.89.144",
                    "host": "ns16.my-control-panel.com"
                }
            ],
            "zone": "digitalwebprints.info"
        },
        "location": {
            "ip": "198.251.89.144",
            "asn": "53667",
            "org": "FranTech Solutions",
            "city": "Luxembourg",
            "country": "LU"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "webdisk.digitalwebprints.info"
        },
        "dns": {
            "A": [
                "198.251.89.144"
            ],
            "MX": [
                "{\"exchange\": \"digitalwebprints.info\", \"priority\": 0}"
            ],
            "NS": [
                "ns16.my-control-panel.com",
                "ns15.my-control-panel.com"
            ],
            "SOA": "{\"nsname\": \"ns15.my-control-panel.com\", \"hostmaster\": \"alerts.my-control-panel.com\", \"serial\": 2026102605, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
            "TXT": [
                "v=spf1 +a +mx +ip4:192.168.168.2 ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "198.251.89.144",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://digitalwebprints.info"
            ]
        },
        "subdomains": {
            "count": 20,
            "subdomains": [
                "autodiscover.digitalwebprints.info",
                "bridgedglobes.online.digitalwebprints.info",
                "cpanel.digitalwebprints.info",
                "cpcalendars.digitalwebprints.info",
                "cpcontacts.digitalwebprints.info",
                "digitalwebprints.com.digitalwebprints.info",
                "mail.digitalwebprints.info",
                "online.digitalwebprints.info",
                "orbitglobal.online.digitalwebprints.info",
                "shippings.igitalwebprints.com.digitalwebprints.info",
                "shippings.igitalwebprints.cpm.digitalwebprints.info",
                "webdisk.digitalwebprints.info",
                "webmail.digitalwebprints.info",
                "www.bridgedglobes.online.digitalwebprints.info",
                "www.digitalwebprints.com.digitalwebprints.info",
                "www.digitalwebprints.info",
                "www.northcrestllc.online.digitalwebprints.info",
                "www.orbitglobal.online.digitalwebprints.info",
                "www.shippings.igitalwebprints.com.digitalwebprints.info",
                "www.shippings.igitalwebprints.cpm.digitalwebprints.info"
            ]
        },
        "linked_pages": {
            "external": [
                "https://coinlib.io/",
                "https://www.tradingview.com/"
            ],
            "external_count": 2,
            "internal_count": 12
        },
        "headers": {
            "headers": {
                "server": "LiteSpeed",
                "content-type": "text/html; charset=UTF-8",
                "x-powered-by": "PHP/7.4.33"
            }
        }
    }
}
```