# jibanexapp.shop: Jibanex App AI-driven trading support landing page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/jibanexapp.shop/ Machine-readable companion: https://phishdestroy.io/domain/jibanexapp.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-07 13:19:02 UTC - Selected availability observation: 2026-11-08T11:00:39Z - Stored record updated: 2026-11-08 15:22:35 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 188.114.97.1 - Registrar in stored WHOIS data: NETIM - Last stored HTTP status: 200 (observed: 2026-11-08T11:00:39Z) - Registration date in stored WHOIS data: 2026-08-02 11:39:27 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0806d-6186-7195-acc3-7ea1a8a1f172/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/jibanexapp.shop - Certificate Transparency search: https://crt.sh/?q=%25.jibanexapp.shop - Web Archive lookup: https://web.archive.org/web/*/https://jibanexapp.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records the jibanexapp.shop landing page presenting Jibanex App as an AI-driven trading support platform with a premium workspace registration form. On 2026-09-08, jibanexapp.shop displayed a dark-themed landing page branded "Jibanex App" with the headline "Jibanex App delivers blazing clarity for AI-driven trading support." The page describes a streamlined automation suite where bots operate inside a configurable flow, with feature cards covering latency posture, automation scope, and controls. A registration panel titled "Set up your premium workspace" invites visitors to join for configuration panels, live monitoring, and automation controls, offering fields for given name, surname, email address, and phone number, plus a "START NOW" button. The stored VirusTotal domain result reports 17 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "suspicious". Package revision: fa74518d1786b840bb62f9189fee8495c6498646cc98b9ac70c9238b16e33fa4 Text generated (not scan time): 2026-11-08 02:53:45 Reviewed evidence snapshot: {"domain":"jibanexapp.shop","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"jibanexapp.shop","final_host":"jibanexapp.shop","redirects":[{"to":"https://jibanexapp.shop/","from":"http://jibanexapp.shop/","status":307}],"captured_at":"2026-09-08T09:50:53.286000Z","uuid":"01a0806d-6186-7195-acc3-7ea1a8a1f172","report_url":"https://urlscan.io/result/01a0806d-6186-7195-acc3-7ea1a8a1f172/","sha256":"081ad8fa996616eb162f828d512ce2b06017e852a42ade9d2db93ede34c15f85","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":17,"engines":92,"malicious":14,"suspicious":3,"analysis_date":"2026-11-06","retrieved_date":"2026-11-08","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 17 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"suspicious\".","page_paragraph_target_characters":547} Source facts (timestamps as stored): {"record_id":1849100,"first_recorded_at":"2026-11-07 14:19:02","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":17,"denominator":92,"malicious":14,"suspicious":3,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-06T21:43:46Z","checked_at":null,"fetched_at":"2026-11-08T01:50:35Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":17,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-06 21:43:46","checked_at":"2026-11-08 02:50:35","fetched_at":"2026-11-08 01:50:36","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":43,"malicious":14,"suspicious":3,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 02:51:24"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-08 00:30:51"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1849100,"scope":"checked_url","observed_at":"2026-11-08T11:00:39Z","http_status":200,"http_observed_at":"2026-11-08T11:00:39Z","stored_http_code":200,"stored_http_observed_at":"2026-11-08T11:00:39Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-08T11:00:39Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-09-08: https://screenshots.phishdestroy.io/us/01a0806d-6186-7195-acc3-7ea1a8a1f172.png Captured: 2026-09-08 09:50:53 UTC Source report: https://urlscan.io/result/01a0806d-6186-7195-acc3-7ea1a8a1f172/ SHA-256: 081ad8fa996616eb162f828d512ce2b06017e852a42ade9d2db93ede34c15f85 - URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07afd-d444-741e-a560-3bd16d4ac87a.png Captured: 2026-09-07 08:30:57 UTC Source report: https://urlscan.io/result/01a07afd-d444-741e-a560-3bd16d4ac87a/ SHA-256: 081ad8fa996616eb162f828d512ce2b06017e852a42ade9d2db93ede34c15f85 - URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b6a-9dbf-70ef-ba44-98029d024f94.png Captured: 2026-09-07 10:29:49 UTC Source report: https://urlscan.io/result/01a07b6a-9dbf-70ef-ba44-98029d024f94/ SHA-256: 53d8096ae10ec2e4450eac84af59133a199bb1ea4c876b00ec4066aa5d00bbe2 - URLScan · 2026-11-07: https://screenshots.phishdestroy.io/us/01a1b632-00d2-73e0-9d7b-659770594e53.png Captured: 2026-11-07 13:28:24 UTC Source report: https://urlscan.io/result/01a1b632-00d2-73e0-9d7b-659770594e53/ SHA-256: d8694a492a539b0c21e3e7700bc2929dbc63934585bda797961fa570c0b9962b - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/08d23336-1a23-4ff5-b1c9-de81156e4ea1.png Captured: 2026-11-07 23:21:30 UTC Source report: https://radar.cloudflare.com/scan/08d23336-1a23-4ff5-b1c9-de81156e4ea1 SHA-256: bf5c6e2c5222c745e45cb12d94de8e5ec93fe458537159283b5af6c82d72e50b ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-07T23:19:42Z", "uuid": "01a0806d-6186-7195-acc3-7ea1a8a1f172", "scanned_at": "2026-09-08T09:50:53Z", "final_url": "https://jibanexapp.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://jibanexapp.shop/", "from": "http://jibanexapp.shop/", "status": 307 } ], "ip": "188.114.96.3", "domains": [ "cdnjs.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflare.com" ], "ips": [ "2606:4700::6811:cf05", "2a00:1450:4001:c17::5f", "104.17.25.14", "188.114.96.3" ], "asns": [ "13335", "15169" ], "countries": [ "US", "DE" ], "doc_hash": "998926640352d0592a6c7bfd1b85bac72d33531bf7183aad59ceaadac30921a1", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_lhj1y0", "toggleTermsPopup", "__cfQR", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "jibanexapp.shop" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "jibanexapp.shop", "protocol": "QUIC", "valid_to": "2026-11-01T08:05:28Z", "valid_from": "2026-08-03T07:05:30Z" }, "domain_age_days": 36, "apex_age_days": 36, "tls_age_days": 36, "tls_valid_days": 90, "requests": 17, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.c", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin", "priority": "u=0,i", "link": "; rel=preload; as=style; crossorigin, ; " } }, "cf": { "v": 1, "fetched_at": "2026-11-07T23:24:11Z", "uuid": "08d23336-1a23-4ff5-b1c9-de81156e4ea1", "scanned_at": "2026-11-07T23:21:30Z", "final_url": "https://jibanexapp.shop/", "status": 200, "history": [ { "url": "https://jibanexapp.shop/", "status": 200 } ], "dom_hash": "c2b93333e40d977188417af59d09b5945917407f0b229a4a6b9e49534791d332", "doc_hash": "0db7e721cdddd9b539365b84f83ae100ab1423023ae74cee3fb150b524af622c", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "jibanexapp.shop", "type": "A", "value": "188.114.96.0" }, { "name": "jibanexapp.shop", "type": "A", "value": "188.114.97.0" }, { "name": "jibanexapp.shop", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "jibanexapp.shop", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "127.0.1.30", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-08T01:50:35Z", "analysis_at": "2026-11-06T21:43:46Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Google": "financial_services", "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "first_seen": "2026-08-03T07:58:49Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.205.254" }, { "ttl": 300, "type": "A", "value": "104.21.61.42" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "ray.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "tricia.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::ac43:cdfe" }, { "ttl": 21600, "type": "NS", "value": "ray.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::6815:3d2a" } ], "dns_at": "2026-11-06T23:29:40Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "jibanexapp.shop" ], "issuer": "Google Trust Services / WE1", "serial": "9a422dd8ea7cd2780e3110eea6a86f4c", "sha256": "33ddeb011f4e4ccd143e0d612f0f1e770a085c9d158ce4be6d37d658eb3a8a59", "subject": "jibanexapp.shop", "valid_to": "2026-12-30T11:52:56Z", "valid_from": "2026-10-01T10:53:00Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-07T23:24:24Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-11-07T16:03:20Z", "first": "2026-10-12T11:36:29Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.04, "avg_page_bytes": 43912 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://jibanexapp.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://jibanexapp.shop/", "title": "Jibanex App | AI Trading Platform | Official Direct Gateway", "ogType": "website", "robots": "index, follow", "ogTitle": "Jibanex App | Premium AI-driven trading automation", "ogSiteName": "Jibanex App", "themeColor": "#0F1114", "description": "Jibanex App delivers AI-powered trading guidance and automated bots with configurable execution, risk controls, and real-time oversight for contemporary multi-asset workflows.", "twitterCard": "summary", "canonicalUrl": "https://jibanexapp.shop/", "ogDescription": "Jibanex App delivers AI-powered trading guidance and autonomous bots with configurable execution, risk controls, and real-time oversight for contemporary multi-asset markets." }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 3, "tls": 35, "wait": 125, "connect": 8, "download": 16 }, "response_ms": 187 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 151276, "co2_grams": 0.0055, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "108.162.192.232", "host": "tricia.ns.cloudflare.com" }, { "ip": "108.162.193.138", "host": "ray.ns.cloudflare.com" } ], "zone": "jibanexapp.shop" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "jibanexapp.shop" }, "dns": { "A": [ "188.114.97.3", "188.114.96.3" ], "NS": [ "tricia.ns.cloudflare.com", "ray.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"ray.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086181, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=15552000; includeSubDomains; preload", "message": "HSTS max-age is 15552000, below the 31536000 minimum." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "frame-src https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.c", "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://jibanexapp.shop" ] }, "linked_pages": { "internal_count": 39 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "frame-src https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; frame-ancestors 'self'; default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin", "link": "; rel=preload; as=style; crossorigin, ; rel=preload; as=style; crossorigin" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a0806d-6186-7195-acc3-7ea1a8a1f172.png","source":"URLScan","report_url":"https://urlscan.io/result/01a0806d-6186-7195-acc3-7ea1a8a1f172/","captured_at":"2026-09-08T09:50:53Z","sha256":"081ad8fa996616eb162f828d512ce2b06017e852a42ade9d2db93ede34c15f85","model_image_sha256":"7d5d9fd3e44ff2ebe91b8ce97579efcee3339e93da9a2ece5f054ac3b4212081","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/jibanexapp.shop/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1849100, "scope": "checked_url", "observed_at": "2026-11-08T11:00:39Z", "http_status": 200, "http_observed_at": "2026-11-08T11:00:39Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-08T11:00:39Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-08T11:00:39Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```