# shisancore-pro.com: ShisanCore market-education content and signup form | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/shisancore-pro.com/ Machine-readable companion: https://phishdestroy.io/domain/shisancore-pro.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-07 13:35:59 UTC - Selected availability observation: 2026-11-07T23:00:52Z - Stored record updated: 2026-11-08 05:36:55 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 185.62.57.48 - Registrar in stored WHOIS data: MainReg Inc. - Last stored HTTP status: 200 (observed: 2026-11-07T23:00:52Z) - Registration date in stored WHOIS data: 2026-03-04 08:19:02 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019f897b-de96-724a-a001-44592978c2b4/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/shisancore-pro.com - Certificate Transparency search: https://crt.sh/?q=%25.shisancore-pro.com - Web Archive lookup: https://web.archive.org/web/*/https://shisancore-pro.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records shisancore-pro.com as a page presenting ShisanCore market-education content alongside a registration form requesting personal details. On 2026-07-22, shisancore-pro.com displayed a dark-themed page branded "ShisanCore," describing a concise, finance-focused view of market concepts with educational framing and structured study. Feature rows list concise concept summaries, learning-oriented ideas mapped to market activity, and privacy and setting highlights, with badges for structured content flow, AI-enhanced readability, and a risk-awareness checklist. A "START NOW" panel invites details to access educational content, and a lower section titled "Market-Education Content Overview" states that ShisanCore presents core financial market concepts for Stocks, Commodities, and Forex. The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported "suspicious"; ESET reported "suspicious". Package revision: e115485485ea637e23c46e67927709b78632a591c106e93114a799d72ca20eb0 Text generated (not scan time): 2026-11-08 03:00:06 Reviewed evidence snapshot: {"domain":"shisancore-pro.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"shisancore-pro.com","final_host":"shisancore-pro.com","redirects":[{"to":"https://shisancore-pro.com/","from":"http://shisancore-pro.com/","status":307}],"captured_at":"2026-07-22T11:00:30.306000Z","uuid":"019f897b-de96-724a-a001-44592978c2b4","report_url":"https://urlscan.io/result/019f897b-de96-724a-a001-44592978c2b4/","sha256":"a4c6ee1c870bbe2a9f1d8c0bb5851a044e98dc8ac7e110364347c7ba13d9e031","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"The website presents itself as an educational platform for financial market concepts and then requests personal details (First Name, Last Name, Email, Phone) to 'access educational content and a guided overview of market concepts, plus connections to independent educational providers'. This behavior is consistent with fraudulent investment schemes that collect user data under the guise of education or exclusive access. The disclaimer 'this website operates exclusively as a marketing platform' fu","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":17,"engines":92,"malicious":14,"suspicious":3,"analysis_date":"2026-11-02","retrieved_date":"2026-11-08","vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Bfore.Ai PreCrime":"malicious","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Bfore.Ai PreCrime","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported \"suspicious\"; ESET reported \"suspicious\".","page_paragraph_target_characters":546} Source facts (timestamps as stored): {"record_id":1846135,"first_recorded_at":"2026-11-07 14:35:59","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":17,"denominator":92,"malicious":14,"suspicious":3,"vendors":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Bfore.Ai PreCrime":"malicious","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-02T15:02:57Z","checked_at":null,"fetched_at":"2026-11-08T01:31:49Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":17,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Bfore.Ai PreCrime","BitDefender","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-02 15:02:57","checked_at":"2026-11-08 02:31:49","fetched_at":"2026-11-08 01:31:49","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Bfore.Ai PreCrime":"malicious","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Bfore.Ai PreCrime","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":46,"malicious":14,"suspicious":3,"undetected":29}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 02:32:01"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-07 16:31:00"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1846135,"scope":"checked_url","observed_at":"2026-11-07T23:00:52Z","http_status":200,"http_observed_at":"2026-11-07T23:00:52Z","stored_http_code":200,"stored_http_observed_at":"2026-11-07T23:00:52Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-07T23:00:52Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-07-22: https://screenshots.phishdestroy.io/us/019f897b-de96-724a-a001-44592978c2b4.png Captured: 2026-07-22 11:00:30 UTC Source report: https://urlscan.io/result/019f897b-de96-724a-a001-44592978c2b4/ SHA-256: a4c6ee1c870bbe2a9f1d8c0bb5851a044e98dc8ac7e110364347c7ba13d9e031 - URLScan · 2026-03-08: https://screenshots.phishdestroy.io/us/019ccbea-1f78-7621-aeb4-2e2b5755e87c.png Captured: 2026-03-08 05:27:30 UTC Source report: https://urlscan.io/result/019ccbea-1f78-7621-aeb4-2e2b5755e87c/ SHA-256: 72673a17297a90840f0a17ca187acaad05a3e5df61e1851d7254fb0273567d2e - URLScan · 2026-07-21: https://screenshots.phishdestroy.io/us/019f843a-e331-758b-8e26-b3dc2a764216.png Captured: 2026-07-21 10:31:27 UTC Source report: https://urlscan.io/result/019f843a-e331-758b-8e26-b3dc2a764216/ SHA-256: a7e4f16860332ec21ce07bf43a3304203be0069e267f1e473210db9e583a4478 - URLScan · 2026-07-22: https://screenshots.phishdestroy.io/us/019f877c-e7ce-7209-9134-a9fa98315f03.png Captured: 2026-07-22 01:42:23 UTC Source report: https://urlscan.io/result/019f877c-e7ce-7209-9134-a9fa98315f03/ SHA-256: 7d67f629823ddcb51fbb4027d0d7166fba8c434c2b5c758bdd1d83465c240e79 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f091a4d4-5e3c-4dd0-b8f9-e876c01e96c7.png Captured: 2026-11-07 13:47:11 UTC Source report: https://radar.cloudflare.com/scan/f091a4d4-5e3c-4dd0-b8f9-e876c01e96c7 SHA-256: c429b2fb43f61757d04a6e13ca2d40e52f6a799099cf625b33f2c467d03a6654 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-07T13:43:21Z", "uuid": "019f897b-de96-724a-a001-44592978c2b4", "scanned_at": "2026-07-22T11:00:30Z", "final_url": "https://shisancore-pro.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://shisancore-pro.com/", "from": "http://shisancore-pro.com/", "status": 307 } ], "ip": "185.62.57.48", "ptr": "static-48-57-62-185.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.17.208.5", "142.251.20.94", "104.16.123.96", "2606:4700::6811:cf05", "104.17.24.14", "2a00:1450:4001:c25::5f", "185.62.57.48" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "DE", "NL" ], "doc_hash": "344f1a359b8a1cbbd86c63947c6c944b20551a6ae689fc23d28e5c38715255a7", "script_hashes": [ "e776c8e03ae39686bf5344edf2667ee34a517077e47c1b709c3cc2c8dd1792c3" ], "globals": [ "toggleTermsPopup", "intlTelInput", "FingerprintJS", "__visitorCountry" ], "storage_keys": [ "t_fingerprint" ], "tls": { "san": [ "shisancore-pro.com" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "shisancore-pro.com", "protocol": "TLS 1.3", "valid_to": "2026-10-19T23:59:59Z", "valid_from": "2026-07-21T00:00:00Z" }, "domain_age_days": 139, "apex_age_days": 139, "tls_age_days": 1, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-11-07T13:50:19Z", "uuid": "f091a4d4-5e3c-4dd0-b8f9-e876c01e96c7", "scanned_at": "2026-11-07T13:47:11Z", "final_url": "https://shisancore-pro.com/", "status": 200, "history": [ { "url": "https://shisancore-pro.com/", "status": 200 } ], "dom_hash": "226305b569f118d4a4f7e5271bdcbd3d4cfd41bf719a84a7184bb4b30faa5f9f", "doc_hash": "132fe1210e0d90d8f3a3fa1cad59d4f086728d9de91ac2d0ad5b714827805ff0", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "shisancore-pro.com", "type": "A", "value": "185.62.57.48" } ], "dnssec_valid": false, "ip": "127.0.1.25", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "MainReg Inc.", "created": "2026-03-04T09:19:02Z", "updated": "2026-03-04T13:29:03Z", "expires": "2027-03-04T09:19:02Z", "nameservers": [ "paityn.ns.cloudflare.com", "piotr.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-08T01:31:49Z", "analysis_at": "2026-11-02T15:02:57Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 14, "suspicious": 3, "undetected": 29 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Bfore.Ai PreCrime": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-03-04T00:00:00Z", "updated": "2026-03-04T00:00:00Z", "first_seen": "2026-03-04T13:49:35Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "paityn.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "piotr.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "paityn.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.48" } ], "dns_at": "2026-11-02T15:16:44Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "shisancore-pro.com" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "6faa01d27ef488eb933c3c7853a5285e", "sha256": "9989f11f5c6bf1bdea9416ef3e14fb2979802858358dbdc2e094a71e31f815a5", "subject": "shisancore-pro.com", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "whois": [], "rdap": { "status": [ "active" ], "events": { "last changed": "2026-03-04T00:00:00Z", "registration": "2026-03-04T00:00:00Z", "registrar expiration": "2027-03-04T00:00:00Z", "last update of RDAP database": "2026-10-26T16:55:00Z" }, "registrar": "MainReg Inc.", "registrar_iana_id": "1917" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-07T13:50:36Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://shisancore-pro.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "ogUrl": "https://shisancore-pro.com/", "title": "ShisanCore | Compliance Automation | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "ShisanCore | Market Concepts Overview", "ogSiteName": "ShisanCore", "themeColor": "#000000", "description": "ShisanCore offers an informational overview of market concepts, linking users to independent third-party educational providers. Content centers on Stocks, Commodities, and Forex, focusing on knowledge and awareness with no practical financial guidance.", "twitterCard": "summary", "canonicalUrl": "https://shisancore-pro.com/", "ogDescription": "ShisanCore provides an informational overview of market concepts, connecting users to independent third-party educational providers. All content is educational and awareness-based; no financial services are offered." }, "trackers": { "requests": 24, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 12, "tls": 137, "wait": 19, "connect": 23, "download": 25 }, "response_ms": 216 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 49371, "co2_grams": 0.0018, "cleaner_than": 37 }, "dns_server": { "ns": [ { "ip": "108.162.194.18", "host": "paityn.ns.cloudflare.com" }, { "ip": "172.64.33.222", "host": "piotr.ns.cloudflare.com" } ], "zone": "shisancore-pro.com" }, "location": { "ip": "185.62.57.48", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "shisancore-pro.com" }, "dns": { "A": [ "185.62.57.48" ], "NS": [ "piotr.ns.cloudflare.com", "paityn.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"paityn.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418509115, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.48", "family": 4 }, "redirects": { "chain": [ "https://shisancore-pro.com" ] }, "linked_pages": { "internal_count": 49 }, "whois": { "registrar": "MainReg Inc.", "created": "2026-03-04T09:19:02Z", "updated": "2026-03-04T13:29:03Z", "expires": "2027-03-04T09:19:02Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "paityn.ns.cloudflare.com", "piotr.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/019f897b-de96-724a-a001-44592978c2b4.png","source":"URLScan","report_url":"https://urlscan.io/result/019f897b-de96-724a-a001-44592978c2b4/","captured_at":"2026-07-22T11:00:30Z","sha256":"a4c6ee1c870bbe2a9f1d8c0bb5851a044e98dc8ac7e110364347c7ba13d9e031","model_image_sha256":"53675e5330ee138f9e55aa34d79a59c6ac27446d3db583f8498c0d91b8186780","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/shisancore-pro.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1846135, "scope": "checked_url", "observed_at": "2026-11-07T23:00:52Z", "http_status": 200, "http_observed_at": "2026-11-07T23:00:52Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-07T23:00:52Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-07T23:00:52Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```