# PhishDestroy domain threat record: harmonybitspire.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/harmonybitspire.shop/
Machine-readable companion: https://phishdestroy.io/domain/harmonybitspire.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-28 02:14:04 UTC
- Last availability or vendor check: 2026-10-28 11:00:23 UTC
- Stored record updated: 2026-10-28 11:23:05 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.56.63
- Registrar in stored WHOIS data: Nicenic International Group Co., Limited
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-17 23:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019f7ea2-58f5-70c8-b44d-72b96deab37a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/harmonybitspire.shop
- Certificate Transparency search: https://crt.sh/?q=%25.harmonybitspire.shop
- Web Archive lookup: https://web.archive.org/web/*/https://harmonybitspire.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed harmonybitspire.shop on its internal blocklist as a suspicious domain after automated analysis flagged it. The site presented the title “Harmonybitspire | AI Trading Platform | Official Website” and returned HTTP 200 when fetched on 2026-10-28. PhishDestroy first saw the domain on 2026-10-28.

How the scam works
The classification reflects a generic risk that the site could be used for phishing, malware distribution, or fraudulent trading offers, which are common tactics for domains receiving multiple malicious vendor labels. No specific malicious behavior was observed on the captured page.

Evidence
VirusTotal scanned the domain on 2026-10-24 and marked it malicious by 13 vendors and suspicious by 3 vendors out of 92 engines, including BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked the URL on 2026-10-28 and did not flag it. urlscan.io captured the site on 2026-07-20, returned an overall clean verdict but its engine scoring labeled the page malicious with a 99 % confidence tag. Cloudflare Radar scanned the domain on 2026-10-28 and assigned a malicious verdict in the malware category, while OTX listed three pulses referencing the domain as of the same date. PhishDestroy’s internal blocklist also marks the domain as suspicious, and no external public blocklists reported it.

Infrastructure
The domain was registered on 2026-03-18, giving it an age of about 122 days at the time of capture. DNS records observed on 2026-10-24 listed A records pointing to 185.62.56.63 and Cloudflare name servers adam.ns.cloudflare.com and ophelia.ns.cloudflare.com. The page fetch recorded the IP address 188.114.96.12 belonging to Cloudflare’s network, and the TLS certificate issued by ZeroSSL was valid from 2026-09-18 to 2026-12-17. Geolocation data for the observed IP indicated Schiedam, Netherlands, operated by Snel.com B.V.

What to do
Visitors should avoid entering personal or financial data on the site; if any credentials were submitted, change the associated passwords immediately. Security teams can add the exact domain to blocklists or monitoring rules and review access logs for connections to the recorded IP or hostname. Continue to monitor PhishDestroy and other threat feeds for updates on the domain’s status.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019f7ea2-58f5-70c8-b44d-72b96deab37a/
Cloudflare Radar report: https://radar.cloudflare.com/scan/89ba2abc-544c-46c5-9a43-16a709ded19d
Stored capture screenshot: https://urlscan.io/screenshots/019f7ea2-58f5-70c8-b44d-72b96deab37a.png
Cloudflare Radar screenshot (2026-10-28T02:20:27Z): https://screenshots.phishdestroy.io/cf/89ba2abc-544c-46c5-9a43-16a709ded19d.png
VirusTotal report: https://www.virustotal.com/gui/domain/harmonybitspire.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=harmonybitspire.shop
Archived copy: https://web.archive.org/web/20261028021914/https://harmonybitspire.shop/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-28 04:57:32 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019f7ea2-58f5-70c8-b44d-72b96deab37a.png
  Captured: 2026-10-28 02:14:04 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019f7ea2-58f5-70c8-b44d-72b96deab37a.png
  Captured: 2026-10-28 04:31:00 UTC
  Source report: https://urlscan.io/result/019f7ea2-58f5-70c8-b44d-72b96deab37a/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/89ba2abc-544c-46c5-9a43-16a709ded19d.png
  Captured: 2026-10-28 02:20:27 UTC
  Source report: https://radar.cloudflare.com/scan/89ba2abc-544c-46c5-9a43-16a709ded19d
  SHA-256: 560e9132065bfdeb9af495e0c9f60aa0ad8bb89445f829f32c4d6e772918f86d

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-28T02:24:34Z",
        "uuid": "019f7ea2-58f5-70c8-b44d-72b96deab37a",
        "scanned_at": "2026-07-20T08:26:42Z",
        "final_url": "https://harmonybitspire.shop/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://harmonybitspire.shop/",
                "from": "http://harmonybitspire.shop/",
                "status": 307
            }
        ],
        "ip": "188.114.96.12",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.17.208.5",
            "192.178.170.95",
            "104.17.25.14",
            "188.114.96.12"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "0a3634eda3547b47d0e3c952c881af919d51c29c19c3b4c38a6d16f44aca9b38",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_v5ki021",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "harmonybitspire.shop"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "harmonybitspire.shop",
            "protocol": "QUIC",
            "valid_to": "2026-10-12T22:38:13Z",
            "valid_from": "2026-07-14T21:38:20Z"
        },
        "domain_age_days": 122,
        "apex_age_days": 122,
        "tls_age_days": 5,
        "tls_valid_days": 90,
        "requests": 17,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-28T02:24:36Z",
        "uuid": "89ba2abc-544c-46c5-9a43-16a709ded19d",
        "scanned_at": "2026-10-28T02:20:27Z",
        "final_url": "https://harmonybitspire.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://harmonybitspire.shop/",
                "status": 200
            }
        ],
        "dom_hash": "48d46f586d50337cd5b85aa46054d88017c71efbdedb2c4e901035fa7017ed61",
        "doc_hash": "c74191ed0d78b799a64592427b60f2bba824611a46c7c7d739969e5d9e685d6e",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "harmonybitspire.shop",
                "type": "A",
                "value": "185.62.56.63"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.10",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-28T04:56:03Z",
        "analysis_at": "2026-10-24T12:18:05Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-03-18T00:00:00Z",
        "updated": "2026-03-19T00:00:00Z",
        "first_seen": "2026-03-19T09:01:19Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "adam.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.56.63"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "adam.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ophelia.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-24T12:23:30Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "harmonybitspire.shop"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "635c68326492dc5ffbc4c299c6aebcf",
            "sha256": "978eea9a503a8b75ec87065505cdb99bb2157afc275bb6f0b5b544cebddbc783",
            "subject": "harmonybitspire.shop",
            "valid_to": "2026-12-17T23:59:59Z",
            "valid_from": "2026-09-18T00:00:00Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-28T02:24:58Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "harmonybitspire.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-28T02:19:14Z",
            "first": "2026-10-11T22:46:44Z",
            "changes": 1,
            "days_archived": 3,
            "scans_per_day": 0.12,
            "avg_page_bytes": 8527
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://harmonybitspire.shop/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 175
        },
        "social_tags": {
            "ogUrl": "https://harmonybitspire.shop/",
            "title": "Harmonybitspire | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Harmonybitspire | AI-Driven Trading Automation Platform",
            "ogSiteName": "Harmonybitspire",
            "themeColor": "#0a2040",
            "description": "Harmonybitspire delivers a premium perspective on automated trading bots and AI-driven trading guidance, covering workflows, governance, security practices, and operational efficiency.",
            "twitterCard": "summary",
            "canonicalUrl": "https://harmonybitspire.shop/",
            "ogDescription": "Harmonybitspire presents a premium overview of automated trading bots and AI-powered trading assistance, focusing on workflows, governance, security practices, and operational excellence."
        },
        "trackers": {
            "requests": 20,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 7,
                "tls": 45,
                "wait": 24,
                "connect": 17,
                "download": 19
            },
            "response_ms": 112
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 45462,
            "co2_grams": 0.0017,
            "cleaner_than": 39
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.34.248",
                    "host": "ophelia.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.54",
                    "host": "adam.ns.cloudflare.com"
                }
            ],
            "zone": "harmonybitspire.shop"
        },
        "location": {
            "ip": "185.62.56.63",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Schiedam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "harmonybitspire.shop"
        },
        "dns": {
            "A": [
                "185.62.56.63"
            ],
            "NS": [
                "ophelia.ns.cloudflare.com",
                "adam.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"adam.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416786243, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.56.63",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://harmonybitspire.shop"
            ]
        },
        "linked_pages": {
            "internal_count": 45
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```