# PhishDestroy domain threat record: partnerinternationalbank.cc Content language: English Canonical HTML report: https://phishdestroy.io/domain/partnerinternationalbank.cc/ Machine-readable companion: https://phishdestroy.io/domain/partnerinternationalbank.cc/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 16:39:31 UTC - Last availability or vendor check: 2026-10-23 23:14:34 UTC - Stored record updated: 2026-10-24 04:00:13 UTC - VirusTotal detections in the stored snapshot: 11/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.37.3 - Registrar in stored WHOIS data: CNOBIN INFORMATION TECHNOLOGY LIMITED - Last stored HTTP status: 200 - Registration date (registry RDAP, partnerinternationalbank.cc): 2026-07-13 08:57:19 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a169a4-ff9c-769f-9512-1a6da0220a6e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/partnerinternationalbank.cc - Certificate Transparency search: https://crt.sh/?q=%25.partnerinternationalbank.cc - Web Archive lookup: https://web.archive.org/web/*/https://partnerinternationalbank.cc/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI flagged partnerinternationalbank.cc on 2026-10-23, citing a 90 % phishing confidence score together with the domain’s 102‑day age. The recorded page title "PIB – Home" and an excerpt describing a full‑service e‑banking system that offers account creation, deposits and withdrawals led the assessment to conclude the site impersonates a legitimate bank. An HTTP 200 response was observed on the same date, confirming the page was reachable at that time. How the scam works Fake banking sites typically present a professional‑looking interface to lure visitors into registering accounts and submitting personal or financial information. Victims may be persuaded to deposit funds or provide credentials, which can then be used for identity theft, account takeover, or further monetary fraud. Evidence VirusTotal scanned the domain on 2026-10-23 and reported 11 detections out of 92 engines, with vendors such as BitDefender, Fortinet, Forcepoint ThreatSeeker, G‑Data and others labeling it malicious or phishing. Google Safe Browsing checked on 2026-10-23 and did not flag the URL. urlscan.io captured the site on 2026-10-23; its engine analysis gave a malicious score of 99 while the overall verdict was listed as non‑malicious. OTX listed four pulses referencing the domain as of 2026-10-23, and PhishDestroy’s internal blocklist contains the domain while external blocklists returned zero hits on that date. Infrastructure The domain was registered on 2026-07-13 through CNOBIN INFORMATION TECHNOLOGY LIMITED, giving it a 102‑day age at the time of first sighting. DNS records observed on 2026-10-23 listed A addresses 104.21.37.3 and 172.67.201.252 and AAAA addresses 2606:4700:3033::ac43:c9fc and 2606:4700:3037::6815:2503. The site presented a TLS certificate issued by Google Trust Services, valid from 2026-09-10 to 2026-12-09. Nameservers recorded were jewel.ns.cloudflare.com and norman.ns.cloudflare.com, and the hosting network was identified as Cloudflare, Inc. in Canada. What to do Visitors should avoid entering any credentials or personal data on the site and, if they have already done so, change passwords on affected accounts and monitor for unauthorized activity. Organizations should block partnerinternationalbank.cc at the DNS or proxy level and add the domain to threat‑intel feeds. Security teams can review logs for connections to the recorded IPs and Cloudflare ASN 13335 to detect possible exposure and report the site to browser anti‑phishing programs and the registrar if abuse is observed. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a169a4-ff9c-769f-9512-1a6da0220a6e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/05c5bfeb-3cd9-4155-98cd-92b0acba6bfa URLQuery report: https://urlquery.net/report/1d532f18-6dc2-454a-9574-a7b1bed1f081 Stored capture screenshot: https://i.ibb.co/xKVRtZMP/ab4611558a8f.png Cloudflare Radar screenshot (2026-10-23T16:39:55Z): https://screenshots.phishdestroy.io/cf/05c5bfeb-3cd9-4155-98cd-92b0acba6bfa.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/1d532f18-6dc2-454a-9574-a7b1bed1f081.png URLScan screenshot (2026-08-05T06:26:54Z): https://screenshots.phishdestroy.io/us/019fd09a-51df-7509-8a5a-1d50fa6ea400.png URLScan capture report: https://urlscan.io/result/019fd09a-51df-7509-8a5a-1d50fa6ea400/ URLScan screenshot (2026-09-10T15:26:17Z): https://screenshots.phishdestroy.io/us/01a08bed-0c46-776b-a7f0-7094062ba9d3.png URLScan capture report: https://urlscan.io/result/01a08bed-0c46-776b-a7f0-7094062ba9d3/ URLScan screenshot (2026-09-12T10:17:32Z): https://screenshots.phishdestroy.io/us/01a0951f-2670-76a4-8072-e2ce34e04fa5.png URLScan capture report: https://urlscan.io/result/01a0951f-2670-76a4-8072-e2ce34e04fa5/ URLScan screenshot (2026-10-23T16:40:16Z): https://screenshots.phishdestroy.io/us/01a169a2-47c9-7289-a6b2-2921455404f6.png URLScan capture report: https://urlscan.io/result/01a169a2-47c9-7289-a6b2-2921455404f6/ VirusTotal report: https://www.virustotal.com/gui/domain/partnerinternationalbank.cc Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=partnerinternationalbank.cc Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 17:19:28 UTC ## Stored page captures - Primary capture: https://i.ibb.co/xKVRtZMP/ab4611558a8f.png Captured: 2026-10-23 16:44:01 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a169a4-ff9c-769f-9512-1a6da0220a6e.png Captured: 2026-10-23 16:44:01 UTC Source report: https://urlscan.io/result/01a169a4-ff9c-769f-9512-1a6da0220a6e/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a0951f-2670-76a4-8072-e2ce34e04fa5.png Captured: 2026-10-23 16:39:31 UTC Source report: https://urlscan.io/result/01a169a4-ff9c-769f-9512-1a6da0220a6e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/05c5bfeb-3cd9-4155-98cd-92b0acba6bfa.png Captured: 2026-10-23 16:39:55 UTC Source report: https://radar.cloudflare.com/scan/05c5bfeb-3cd9-4155-98cd-92b0acba6bfa SHA-256: d17b2d75c0c394ae85123088847f19e10e078699ab8c2177f74c4047a7c680ab - URLQuery: https://screenshots.phishdestroy.io/uq/1d532f18-6dc2-454a-9574-a7b1bed1f081.png Source report: https://urlquery.net/report/1d532f18-6dc2-454a-9574-a7b1bed1f081 SHA-256: 4f1f05b4ee337e55c0a1d4013665d17eefc9b675192f28117f445105e345d9a6 - URLScan · 2026-08-05: https://screenshots.phishdestroy.io/us/019fd09a-51df-7509-8a5a-1d50fa6ea400.png Captured: 2026-08-05 06:26:54 UTC Source report: https://urlscan.io/result/019fd09a-51df-7509-8a5a-1d50fa6ea400/ SHA-256: d3bd9d10887db39ac6648efb5dc442cf98c9d08ffffd9ca2713c11cf84e2dd33 - URLScan · 2026-09-10: https://screenshots.phishdestroy.io/us/01a08bed-0c46-776b-a7f0-7094062ba9d3.png Captured: 2026-09-10 15:26:17 UTC Source report: https://urlscan.io/result/01a08bed-0c46-776b-a7f0-7094062ba9d3/ SHA-256: 5bc443478bc34c4f369eacd83d1ba804bbb80d758085fc58afbbf28d54a0df2c - URLScan · 2026-09-12: https://screenshots.phishdestroy.io/us/01a0951f-2670-76a4-8072-e2ce34e04fa5.png Captured: 2026-09-12 10:17:32 UTC Source report: https://urlscan.io/result/01a0951f-2670-76a4-8072-e2ce34e04fa5/ SHA-256: 0d043bdbdaae94b276148c86b246d2eb6448b15df25e40cd4fff7d272edb6515 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a169a2-47c9-7289-a6b2-2921455404f6.png Captured: 2026-10-23 16:40:16 UTC Source report: https://urlscan.io/result/01a169a2-47c9-7289-a6b2-2921455404f6/ SHA-256: fa32bae7cf6fd05dbc6fa57ef4e68a52c1f6af9312ed8e680063991bcf76ba73 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T17:18:30Z", "uuid": "01a169a4-ff9c-769f-9512-1a6da0220a6e", "scanned_at": "2026-10-23T16:43:12Z", "final_url": "https://partnerinternationalbank.cc/", "status": 200, "ip": "172.67.201.252", "domains": [ "embed.tawk.to", "va.tawk.to", "fonts.gstatic.com", "fonts.googleapis.com", "static.cloudflareinsights.com" ], "ips": [ "172.66.161.212", "142.250.195.227", "142.250.195.234", "104.16.79.73", "172.67.201.252" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "link_domains": [ "www.facebook.com", "www.twitter.com", "www.instagram.com", "www.linkedin.com", "partnerinternationalbank.com" ], "social": [ "https://www.facebook.com", "https://www.twitter.com", "https://www.instagram.com" ], "doc_hash": "9128cd11d435b5c4bb7f6dd958310b0f5eb5d0fe071b640393d4076a4e97590f", "script_hashes": [ "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8", "3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24", "9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b", "abd8a208545b5ea87bfbe376b3344ab7cb22eb3ac99b5f115dc802834341079f", "032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888", "f7f9a7bb7c2ad9c6631a8169962d0703e2c46cf96af13c3ed9da2510c1d71f5b", "a864278b1e750825bdf4465c7d5ad98041a4e6976fbbcfbbc6876155273e7e69", "b5cc6b1bff62a81d50bc3d757b095272dcbe58314d6cea68cdcf31202f4310b0", "eb94751b98ab535553fa4f0be1ca2a81ddec692bcefd6b9fb289ffc3ebf621dc", "ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497" ], "globals": [ "$", "jQuery", "uidEvent", "bootstrap", "lightcase", "Odometer", "Tawk_API", "Tawk_LoadStart", "iziToast", "notify", "firebase", "permission", "authenticated", "pushNotify", "firebaseConfig", "pushNotifyAction", "__cfBeacon", "$_Tawk_AccountKey", "$_Tawk_WidgetId", "$_Tawk_Unstable", "$_Tawk", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "$__TawkEngine", "EventEmitter", "$__TawkSocket", "__i18next_supportNoticeShown", "colors", "icons", "notifications", "errors", "triggerToaster" ], "cookies": [ "XSRF-TOKEN", "finovobank_session", "twk_idm_key", "TawkConnectionTime" ], "storage_keys": [ "exist_test" ], "tls": { "san": [ "partnerinternationalbank.cc", "*.partnerinternationalbank.cc" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "partnerinternationalbank.cc", "protocol": "QUIC", "valid_to": "2026-12-09T19:34:17Z", "valid_from": "2026-09-10T18:34:21Z" }, "domain_age_days": 102, "apex_age_days": 102, "tls_age_days": 42, "tls_valid_days": 90, "requests": 78, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T17:18:31Z", "uuid": "05c5bfeb-3cd9-4155-98cd-92b0acba6bfa", "scanned_at": "2026-10-23T16:39:55Z", "final_url": "https://partnerinternationalbank.cc/", "status": 200, "history": [ { "url": "https://partnerinternationalbank.cc/", "status": 200 } ], "dom_hash": "81e52aa62946edfb6fd4c38e3f054152e03cef03e6751e83cfec7ecbae0b7693", "doc_hash": "c18a1fc9495f94345181a873465a1073e3608ee1d882c4f14b272cb7e60cd4e6", "phishing_v2": [ "phishing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "partnerinternationalbank.cc", "type": "A", "value": "104.21.37.3" }, { "name": "partnerinternationalbank.cc", "type": "A", "value": "172.67.201.252" }, { "name": "partnerinternationalbank.cc", "type": "AAAA", "value": "2606:4700:3033::ac43:c9fc" }, { "name": "partnerinternationalbank.cc", "type": "AAAA", "value": "2606:4700:3037::6815:2503" } ], "dnssec_valid": false, "ip": "104.21.37.3", "whois": { "registrar": "CNOBIN INFORMATION TECHNOLOGY LIMITED", "created": "2026-07-13T08:57:19Z", "updated": "2026-07-13T09:16:46Z", "expires": "2027-07-13T08:57:19Z", "nameservers": [ "jewel.ns.cloudflare.com", "norman.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T17:16:38Z", "analysis_at": "2026-10-23T09:35:55Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 10, "suspicious": 1, "undetected": 35 }, "detections": { "CRDF": "malicious", "G-Data": "phishing", "Lionic": "malicious", "Sophos": "phishing", "CyRadar": "malicious", "Fortinet": "spam", "Kaspersky": "phishing", "Gridinsoft": "malicious", "BitDefender": "phishing", "alphaMountain.ai": "malicious", "Forcepoint ThreatSeeker": "malicious" }, "reputation": 0, "registrar": "CNOBIN INFORMATION TECHNOLOGY LIMITED", "created": "2026-07-13T08:57:19Z", "expires": "2027-07-13T08:57:19Z", "updated": "2026-07-13T09:16:46Z", "first_seen": "2026-07-13T09:40:43Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::ac43:c9fc" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "jewel.ns.cloudflare.com" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 +a +mx +ip4:85.206.243.75 ~all" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 redirect=_spf.mailhostbox.com" }, { "ttl": 21600, "type": "NS", "value": "norman.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "jewel.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.37.3" }, { "ttl": 300, "type": "MX", "value": "us2.mx3.mailhostbox.com", "priority": 0 }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:2503" }, { "ttl": 300, "type": "MX", "value": "us2.mx2.mailhostbox.com", "priority": 10 }, { "ttl": 300, "type": "A", "value": "172.67.201.252" }, { "ttl": 300, "type": "MX", "value": "us2.mx1.mailhostbox.com", "priority": 10 }, { "ttl": 300, "type": "MX", "value": "_dc-mx.6b26f3e397ea.partnerinternationalbank.cc", "priority": 20 } ], "dns_at": "2026-10-23T09:48:31Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "partnerinternationalbank.cc", "*.partnerinternationalbank.cc" ], "issuer": "Google Trust Services / WE1", "serial": "77561572f316a38613ef41e6e7fb5cc2", "sha256": "42798ceb115926e60b51c2255dde2b57aaa489689af8b3191382bfa0635055e4", "subject": "partnerinternationalbank.cc", "valid_to": "2026-12-09T19:34:17Z", "valid_from": "2026-09-10T18:34:21Z" }, "whois": { "registrar": "CNOBIN INFORMATION TECHNOLOGY LIMITED", "registrar_iana_id": "3254", "registrar_url": "http://www.ordertld.com", "created": "2026-07-13T08:57:19Z", "updated": "2026-07-13T09:16:46Z", "expires": "2027-07-13T08:57:19Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "jewel.ns.cloudflare.com", "norman.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-07-13T08:57:19Z", "last changed": "2026-07-13T16:57:19Z", "registration": "2026-07-13T08:57:19Z", "registrar expiration": "2027-07-13T08:57:19Z", "last update of RDAP database": "2026-10-23T17:48:31Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T16:40:51Z", "mail_config": { "mx": [ "us2.mx3.mailhostbox.com", "us2.mx1.mailhostbox.com", "us2.mx2.mailhostbox.com", "_dc-mx.6b26f3e397ea.partnerinternationalbank.cc" ], "spf": "v=spf1 redirect=_spf.mailhostbox.com", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 0 }, "caa_records": { "domain": "partnerinternationalbank.cc" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "ogUrl": "https://partnerinternationalbank.cc", "title": "PIB - Home", "ogType": "website", "ogImage": "https://partnerinternationalbank.cc/assets/images/seo/69d8af841aa1f1775808388.png", "ogTitle": "PartnerInternationalBank", "keywords": "bank,e-banking,digital banking,digital bank,laon,deposit,fdr,dps", "description": "PartnerInternationalBank is a complete e-Banking system. We have account-holders from almost all over the world. This is getting popular day by day. Our system is secure and robust. You may feel safe about your deposited funds.", "twitterCard": "summary_large_image", "ogDescription": "PartnerInternationalBank is a complete e-Banking system. We have account-holders from almost all over the world. This is getting popular day by day. Our system is secure and robust. You may feel safe about your deposited funds." }, "trackers": { "requests": 69, "trackers": [ { "name": "Tawk", "company": "Tawk", "country": "US", "category": "Customer Interaction", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 1, "tls": 19, "wait": 559, "connect": 7, "download": 10 }, "response_ms": 596 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 109115, "co2_grams": 0.004, "cleaner_than": 20 }, "dns_server": { "ns": [ { "ip": "162.159.38.171", "host": "jewel.ns.cloudflare.com" }, { "ip": "108.162.193.217", "host": "norman.ns.cloudflare.com" } ], "zone": "partnerinternationalbank.cc" }, "cookies": { "cookies": [ { "name": "XSRF-TOKEN", "secure": true, "same_site": "Lax" }, { "name": "finovobank_session", "secure": true, "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3037::6815:2503", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "partnerinternationalbank.cc" }, "dns": { "A": [ "104.21.37.3", "172.67.201.252" ], "MX": [ "{\"exchange\": \"us2.mx1.mailhostbox.com\", \"priority\": 10}", "{\"exchange\": \"us2.mx3.mailhostbox.com\", \"priority\": 0}", "{\"exchange\": \"_dc-mx.6b26f3e397ea.partnerinternationalbank.cc\", \"priority\": 20}", "{\"exchange\": \"us2.mx2.mailhostbox.com\", \"priority\": 10}" ], "NS": [ "norman.ns.cloudflare.com", "jewel.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"jewel.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416854861, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 redirect=_spf.mailhostbox.com", "v=spf1 +a +mx +ip4:85.206.243.75 ~all" ], "AAAA": [ "2606:4700:3033::ac43:c9fc", "2606:4700:3037::6815:2503" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3033::ac43:c9fc", "family": 6 }, "redirects": { "chain": [ "https://partnerinternationalbank.cc" ] }, "subdomains": { "count": 2, "subdomains": [ "mail.partnerinternationalbank.cc", "www.partnerinternationalbank.cc" ] }, "linked_pages": { "external": [ "https://www.facebook.com/", "https://www.twitter.com/", "https://www.instagram.com/", "https://www.linkedin.com/", "https://partnerinternationalbank.com/Documentation/FinovoBank_like_reference_720p_EN.mp4" ], "external_count": 5, "internal_count": 18 }, "whois": { "registrar": "CNOBIN INFORMATION TECHNOLOGY LIMITED", "created": "2026-07-13T08:57:19Z", "updated": "2026-07-13T09:16:46Z", "expires": "2027-07-13T08:57:19Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "jewel.ns.cloudflare.com", "norman.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } } } } ```