# PhishDestroy domain threat record: escalabrillizotrade.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/escalabrillizotrade.com/
Machine-readable companion: https://phishdestroy.io/domain/escalabrillizotrade.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 19:07:30 UTC
- Last availability or vendor check: 2026-10-25 19:50:55 UTC
- Stored record updated: 2026-10-25 21:00:13 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-10 20:05:27 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1749c-c935-75cb-b53d-22983d4c36de/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/escalabrillizotrade.com
- Certificate Transparency search: https://crt.sh/?q=%25.escalabrillizotrade.com
- Web Archive lookup: https://web.archive.org/web/*/https://escalabrillizotrade.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake analysis flagged escalabrillizotrade.com because its page claims to be an AI platform for cryptocurrency allocation, a pattern commonly used in fraudulent investment schemes. The recorded page title reads "Escala Brillizo: plataforma de inteligencia artificial para una asignación de criptomonedas más inteligente". The domain first appeared in PhishDestroy’s monitoring on 2026-10-25.

How the scam works
Fake AI crypto investment sites typically promise automated, high‑return allocation of digital assets using alleged artificial‑intelligence models. Victims are enticed to deposit funds or grant wallet permissions, after which the operators disappear or drain the supplied cryptocurrency.

Evidence
A VirusTotal scan performed on 2026-10-16 recorded 15 detections from 92 engines, with 13 labeling the domain malicious and 2 as suspicious. Google Safe Browsing checked on 2026-10-25 did not flag the URL. An urlscan.io capture taken on 2026-08-13 returned a malicious verdict. Cloudflare Radar’s scan on 2026-10-25 marked the domain malicious under the malware category, and OTX listed one pulse referencing the domain on the same day; PhishDestroy’s internal blocklist also marks it as malicious.

Infrastructure
The domain was registered with Dynadot Inc on 2026-03-10, 229 days before its first sighting. It resolved to IP 158.94.210.119, which was listed under the Omegatech LTD network in the Netherlands. The site used a Let’s Encrypt certificate issued on 2026-08-31 and valid until 2026-11-29, and DNS records showed A, NS and SOA entries pointing to the registrar’s name servers. Open ports observed in the scan were 22, 80 and 443.

What to do
Users should avoid entering any credentials, private keys, seed phrases, or cryptocurrency on this site. Organizations should block escalabrillizotrade.com at web filters or firewalls, monitor network logs for connections to 158.94.210.119, and review any related access attempts.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019ff98a-0c99-70f4-83a3-05e903da17ce/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8ac27b96-8d6e-4a7d-97b4-c0972d2dd829
Stored capture screenshot: https://urlscan.io/screenshots/019ff98a-0c99-70f4-83a3-05e903da17ce.png
Cloudflare Radar screenshot (2026-10-25T19:11:42Z): https://screenshots.phishdestroy.io/cf/8ac27b96-8d6e-4a7d-97b4-c0972d2dd829.png
URLScan screenshot (2026-09-16T10:07:39Z): https://screenshots.phishdestroy.io/us/01a0a9af-7d64-75de-9fec-67c8cd754adc.png
URLScan capture report: https://urlscan.io/result/01a0a9af-7d64-75de-9fec-67c8cd754adc/
VirusTotal report: https://www.virustotal.com/gui/domain/escalabrillizotrade.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=escalabrillizotrade.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 19:13:49 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/VYDMhtg3/f1c7935b63e3.png
  Captured: 2026-10-25 19:50:55 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a1749c-c935-75cb-b53d-22983d4c36de.png
  Captured: 2026-10-25 19:50:55 UTC
  Source report: https://urlscan.io/result/01a1749c-c935-75cb-b53d-22983d4c36de/
- URLScan capture 2: https://screenshots.phishdestroy.io/019ff98a-0c99-70f4-83a3-05e903da17ce.png
  Captured: 2026-10-25 19:07:30 UTC
  Source report: https://urlscan.io/result/01a1749c-c935-75cb-b53d-22983d4c36de/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8ac27b96-8d6e-4a7d-97b4-c0972d2dd829.png
  Captured: 2026-10-25 19:11:42 UTC
  Source report: https://radar.cloudflare.com/scan/8ac27b96-8d6e-4a7d-97b4-c0972d2dd829
  SHA-256: 236e4ac3a7bdc5ed8023bf36a9c60f794bfdf6ccabb48b2592d6771673ba42a3
- URLQuery: https://screenshots.phishdestroy.io/uq/ff17422c-572f-4722-a5fa-ad17c5f33744.png
  Source report: https://urlquery.net/report/ff17422c-572f-4722-a5fa-ad17c5f33744
  SHA-256: cee477a72fb859317922ee09622267df1e4d36f9bc3173dedbf0cb4a7e50dec1
- URLScan · 2026-08-13: https://screenshots.phishdestroy.io/us/019ff98a-0c99-70f4-83a3-05e903da17ce.png
  Captured: 2026-08-13 05:13:57 UTC
  Source report: https://urlscan.io/result/019ff98a-0c99-70f4-83a3-05e903da17ce/
  SHA-256: 33e10721d3cd9c394046bce100f3565c712a4ca4a06ac6c90d14c06bfe66ffa9
- URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0a9af-7d64-75de-9fec-67c8cd754adc.png
  Captured: 2026-09-16 10:07:39 UTC
  Source report: https://urlscan.io/result/01a0a9af-7d64-75de-9fec-67c8cd754adc/
  SHA-256: 8ad3362091a1a2c60d32ecdf87b2f0d1ea2cc733317542d3e707e42d78a91d0a
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17485-22c8-75dc-900d-e33180e43711.png
  Captured: 2026-10-25 19:24:12 UTC
  Source report: https://urlscan.io/result/01a17485-22c8-75dc-900d-e33180e43711/
  SHA-256: b08f0d2af38716c11267b3093f620e38c340cc197ea51508dd03b5d4c00783aa
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1748e-e69f-717f-af5f-a4f7fe9fb310.png
  Captured: 2026-10-25 19:34:58 UTC
  Source report: https://urlscan.io/result/01a1748e-e69f-717f-af5f-a4f7fe9fb310/
  SHA-256: 2525549c78327de1092ad9df070a10fb43e39fc26412fd0426e6b71153c7fa4b
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1748f-b5eb-7197-a310-7d9b1881bfbb.png
  Captured: 2026-10-25 19:35:44 UTC
  Source report: https://urlscan.io/result/01a1748f-b5eb-7197-a310-7d9b1881bfbb/
  SHA-256: b08f0d2af38716c11267b3093f620e38c340cc197ea51508dd03b5d4c00783aa
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17493-b0d2-76ed-a270-96e531df2f61.png
  Captured: 2026-10-25 19:40:05 UTC
  Source report: https://urlscan.io/result/01a17493-b0d2-76ed-a270-96e531df2f61/
  SHA-256: b08f0d2af38716c11267b3093f620e38c340cc197ea51508dd03b5d4c00783aa

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T20:44:10Z",
        "uuid": "01a1749c-c935-75cb-b53d-22983d4c36de",
        "scanned_at": "2026-10-25T19:50:03Z",
        "final_url": "https://escalabrillizotrade.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://escalabrillizotrade.com/",
                "from": "http://escalabrillizotrade.com/",
                "status": 307
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "ac88fc59411cbffa92d84dac9d9ef9cceae21ba486a98c659805571f93311ce8",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "escalabrillizotrade.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "escalabrillizotrade.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-29T14:50:52Z",
            "valid_from": "2026-08-31T14:50:53Z"
        },
        "domain_age_days": 228,
        "apex_age_days": 228,
        "tls_age_days": 55,
        "tls_valid_days": 89,
        "requests": 6,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T19:13:05Z",
        "uuid": "8ac27b96-8d6e-4a7d-97b4-c0972d2dd829",
        "scanned_at": "2026-10-25T19:11:42Z",
        "final_url": "https://escalabrillizotrade.com/",
        "status": 200,
        "history": [
            {
                "url": "https://escalabrillizotrade.com/",
                "status": 200
            }
        ],
        "dom_hash": "941cbca2c5598bde5b10807bacfa1da5e2f8578c85d8d14256b8ce4924735d85",
        "doc_hash": "79a6fbf1b6f52a8e50343820b2cff729c86cef2c7b44e68ffa150acdb0d5e023",
        "phishing_v2": [
            "phishing"
        ],
        "url_risks": [
            "Scam"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "Scam",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "escalabrillizotrade.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-03-10T21:05:27Z",
            "updated": "2026-08-13T12:25:20Z",
            "expires": "2027-03-10T21:05:27Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T19:10:36Z",
        "analysis_at": "2026-10-16T03:28:37Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 2,
            "undetected": 33
        },
        "detections": {
            "CRDF": "malicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-03-10T00:00:00Z",
        "updated": "2026-04-16T00:00:00Z",
        "first_seen": "2026-03-10T21:38:15Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.escalabrillizotrade.com",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-16T03:33:55Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "escalabrillizotrade.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "57b56be743cd6b5dfb986fe7beb072e91",
            "sha256": "80a92ac5fa7ac87e0813c660a1b57b44f3c7ac592419caa4db0e86c707ce2b3a",
            "subject": "escalabrillizotrade.com",
            "valid_to": "2026-11-29T14:50:52Z",
            "valid_from": "2026-08-31T14:50:53Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-03-10T21:05:27Z",
                "last changed": "2026-08-31T15:25:50Z",
                "registration": "2026-03-10T21:05:27Z",
                "registrar expiration": "2027-03-10T21:05:27Z",
                "last update of RDAP database": "2026-10-15T07:42:10Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T19:13:21Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "escalabrillizotrade.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T19:09:07Z",
            "first": "2026-10-07T22:07:00Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.06,
            "avg_page_bytes": 16933
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://escalabrillizotrade.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Escala Brillizo: plataforma de inteligencia artificial para una asignación de criptomonedas más inteligente",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Escala Brillizo: una plataforma impulsada por IA para contribuciones criptográficas automatizadas y ajustadas al riesgo. Optimice su estrategia de asignación con modelos predictivos y programación inteligente de puntos de entrada.",
            "canonicalUrl": "https://escalabrillizotrade.com/"
        },
        "trackers": {
            "requests": 54,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 102,
                "tls": 96,
                "wait": 126,
                "connect": 79,
                "download": 186
            },
            "response_ms": 589
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 73422,
            "co2_grams": 0.0027,
            "cleaner_than": 29
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "escalabrillizotrade.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "escalabrillizotrade.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns2.dyna-ns.net",
                "ns1.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.escalabrillizotrade.com\", \"serial\": 2026083101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://escalabrillizotrade.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.escalabrillizotrade.com"
            ]
        },
        "linked_pages": {
            "internal_count": 9
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-03-10T21:05:27Z",
            "updated": "2026-08-13T12:25:20Z",
            "expires": "2027-03-10T21:05:27Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```