# spectreglobalbk.org: Spectre Global Bank homepage with account opening and login | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/spectreglobalbk.org/ Machine-readable companion: https://phishdestroy.io/domain/spectreglobalbk.org/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Unverified - First observed by PhishDestroy: 2026-11-02 11:46:24 UTC - Selected availability observation: 2026-11-02T11:46:24Z - Stored record updated: 2026-11-02 13:00:06 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 23.153.104.17 - Registrar in stored WHOIS data: Dynadot Inc - Registration date in stored WHOIS data: 2026-03-14 20:16:42 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19c13-23c2-73df-a0ae-3fdfbf18e018/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/spectreglobalbk.org - Certificate Transparency search: https://crt.sh/?q=%25.spectreglobalbk.org - Web Archive lookup: https://web.archive.org/web/*/https://spectreglobalbk.org/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records spectreglobalbk.org as a Spectre Global Bank homepage offering account opening, online banking login, routing number and support details. The spectreglobalbk.org homepage presents Spectre Global Bank branding over a mobile banking background image. The header includes Home, About, Services and Contact links, plus Login and Open Account buttons. The hero section displays the heading "Spectre Global Bank" with the tagline "We do banking differently. We believe that people come first, and that everyone deserves a great experience every step of the way," alongside "Open Account Today" and "Login to Banking" buttons. Below the hero, cards show routing number 251480576, branch hours Mon-Fri 9AM-5PM, and 24/7 support at 1-800-BANKING. The stored VirusTotal domain result reports 5 detections out of 92 engines. Fortinet reported "phishing"; Netcraft reported "malicious". Package revision: bfbc81a8b40d65ed6c315ba341de9aa20fe6474088a3668c531b453870dbf1eb Text generated (not scan time): 2026-11-02 13:22:08 Reviewed evidence snapshot: {"domain":"spectreglobalbk.org","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"spectreglobalbk.org","final_host":"spectreglobalbk.org","redirects":[{"to":"https://spectreglobalbk.org/","from":"http://spectreglobalbk.org/","status":307}],"captured_at":"2026-11-02T11:44:30.689000Z","uuid":"01a19c13-23c2-73df-a0ae-3fdfbf18e018","report_url":"https://urlscan.io/result/01a19c13-23c2-73df-a0ae-3fdfbf18e018/","sha256":"cc61d6131030810b39eb552781c32985427e5836220a3b9df30938ee4825dcf1","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":5,"engines":92,"malicious":5,"suspicious":0,"analysis_date":"2026-11-02","retrieved_date":"2026-11-02","vendor_labels":{"Fortinet":"phishing","Netcraft":"malicious","desenmascara.me":"malicious","alphaMountain.ai":"malicious","Bfore.Ai PreCrime":"malicious"},"flagging_vendors":["Fortinet","Netcraft","desenmascara.me","alphaMountain.ai","Bfore.Ai PreCrime"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 5 detections out of 92 engines. Fortinet reported \"phishing\"; Netcraft reported \"malicious\".","page_paragraph_target_characters":542} Source facts (timestamps as stored): {"record_id":1745245,"first_recorded_at":"2026-11-02 12:46:24","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":5,"denominator":92,"malicious":5,"suspicious":0,"vendors":{"Fortinet":"phishing","Netcraft":"malicious","desenmascara.me":"malicious","alphaMountain.ai":"malicious","Bfore.Ai PreCrime":"malicious"},"observed_at":"2026-11-02T07:07:56Z","checked_at":null,"fetched_at":"2026-11-02T12:19:34Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":5,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Bfore.Ai PreCrime","Fortinet","Netcraft","desenmascara.me"],"observed_at":"2026-11-02 07:07:56","checked_at":"2026-11-02 13:19:38","fetched_at":"2026-11-02 12:19:38","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"Fortinet":"phishing","Netcraft":"malicious","desenmascara.me":"malicious","alphaMountain.ai":"malicious","Bfore.Ai PreCrime":"malicious"},"vendor_names":["Fortinet","Netcraft","desenmascara.me","alphaMountain.ai","Bfore.Ai PreCrime"],"stats":{"timeout":0,"harmless":53,"malicious":5,"suspicious":0,"undetected":34}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 13:20:00"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"unknown","label_key":"availability.unverified","detail_key":"detail.no_response","params":[],"source":"current_http_probe","record_id":1745245,"scope":"checked_url","observed_at":"2026-11-02T11:46:24Z","http_status":null,"http_observed_at":"2026-11-02T11:46:24Z","stored_http_code":null,"stored_http_observed_at":"2026-11-02T11:46:24Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19c13-23c2-73df-a0ae-3fdfbf18e018.png Captured: 2026-11-02 11:44:30 UTC Source report: https://urlscan.io/result/01a19c13-23c2-73df-a0ae-3fdfbf18e018/ SHA-256: cc61d6131030810b39eb552781c32985427e5836220a3b9df30938ee4825dcf1 - URLScan · 2026-05-02: https://screenshots.phishdestroy.io/us/019de75a-2d6e-722b-a6d6-ad8dc62dca1f.png Captured: 2026-05-02 06:22:30 UTC Source report: https://urlscan.io/result/019de75a-2d6e-722b-a6d6-ad8dc62dca1f/ SHA-256: e854c3f72bd88af552112fd29819aadfe2f7bc62f27d89149d6d67261cc4291c - URLScan · 2026-06-23 → recaptcha.cloud: https://screenshots.phishdestroy.io/us/019ef5e7-06e3-7014-95af-32897a123af0.png Captured: 2026-06-23 19:13:52 UTC Source report: https://urlscan.io/result/019ef5e7-06e3-7014-95af-32897a123af0/ SHA-256: d31dbb1f557318eeb330fc7180245e8b292127f293baf81277a0ef88946e8a9c - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1a723f6a-a706-45e6-ad6e-e676336f5664.png Captured: 2026-11-02 12:20:26 UTC Source report: https://radar.cloudflare.com/scan/1a723f6a-a706-45e6-ad6e-e676336f5664 SHA-256: 7adc1b2f6d13a6e897e8691ad0a9dfa8a162c6d87dc863916d3788c1f9228679 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-02T11:48:40Z", "uuid": "01a19c13-23c2-73df-a0ae-3fdfbf18e018", "scanned_at": "2026-11-02T11:44:30Z", "final_url": "https://spectreglobalbk.org/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://spectreglobalbk.org/", "from": "http://spectreglobalbk.org/", "status": 307 } ], "ip": "23.153.104.17", "ptr": "c4-17.my-control-panel.com", "domains": [ "cdn.jsdelivr.net", "widget-v3.smartsuppcdn.com", "images.unsplash.com", "cdn.tailwindcss.com", "websocket-visitors.smartsupp.com", "bootstrap.smartsuppchat.com", "www.smartsuppchat.com", "fonts.googleapis.com" ], "ips": [ "63.188.197.227", "195.181.170.19", "151.101.130.208", "142.251.110.95", "104.16.180.112", "104.26.2.143", "23.153.104.17" ], "asns": [ "16509", "60068", "54113", "15169", "13335", "32561" ], "countries": [ "DE", "US" ], "doc_hash": "256831582c99bf45febdc6951fdaa251bde42006c565e3955f8b6a95db2615d2", "globals": [ "tailwind", "/template.html", "changeLanguage", "updateFlagDisplay", "translatePage", "translateBatch", "translateText", "translateWithLibre", "translateBasic", "getLanguageName", "showTranslationLoading", "hideTranslationLoading", "_smartsupp", "smartsupp", "Alpine", "SMARTSUPP_LOADED", "$smartsupp", "isDarkMode", "observerOptions", "observer", "currentLanguage" ], "cookies": [ "XSRF-TOKEN", "aurevia_trust_session" ], "tls": { "san": [ "*.atlasnb.org", "*.bcassistrecovery.org", "*.com.bcassistrecovery.org", "*.granitehillbk.org", "*.org.bcassistrecovery.org", "*.spectreglobalbk.org", "*.trustwaveglobalassets.com", "atlasnb.org", "bcassistrecovery.org", "granitehillbk.org" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "www.trustwaveglobalassets.com.bcassistrecovery.org", "protocol": "TLS 1.3", "valid_to": "2026-12-14T18:20:18Z", "valid_from": "2026-09-15T18:20:19Z" }, "domain_age_days": 232, "apex_age_days": 232, "tls_age_days": 47, "tls_valid_days": 89, "requests": 35, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericbanking" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Banking" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-11-02T12:21:09Z", "uuid": "1a723f6a-a706-45e6-ad6e-e676336f5664", "scanned_at": "2026-11-02T12:20:26Z", "final_url": "https://spectreglobalbk.org/", "status": 200, "history": [ { "url": "https://spectreglobalbk.org/", "status": 200 } ], "dom_hash": "bda6616060ca5cd35f1fbf6c7906c9ed8677e304707a22bc7e390aa5f32174bb", "doc_hash": "884319ad82c32635ec7c135262d8fa9498ec1ef0911401e39b51bca780cacca3", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "spectreglobalbk.org", "type": "A", "value": "23.153.104.17" } ], "dnssec_valid": false, "ip": "127.0.1.7", "whois": { "registrar": "Dynadot Inc", "created": "2026-03-14T21:16:42Z", "updated": "2026-08-12T07:21:20Z", "expires": "2027-03-14T21:16:42Z", "nameservers": [ "ns7.asurahosting.com", "ns8.asurahosting.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-02T12:19:34Z", "analysis_at": "2026-11-02T07:07:56Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 5, "suspicious": 0, "undetected": 34 }, "detections": { "Fortinet": "phishing", "Netcraft": "malicious", "desenmascara.me": "malicious", "alphaMountain.ai": "malicious", "Bfore.Ai PreCrime": "malicious" }, "reputation": 0, "categories": { "Google": "financial_services", "alphaMountain.ai": "Malicious (alphaMountain.ai)", "Forcepoint ThreatSeeker": "malicious web sites" }, "created": "2026-03-14T00:00:00Z", "updated": "2026-03-15T00:00:00Z", "first_seen": "2026-03-15T01:12:18Z", "dns": [ { "ttl": 14400, "type": "MX", "value": "spectreglobalbk.org", "priority": 0 }, { "ttl": 21600, "type": "NS", "value": "ns8.my-control-panel.com" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 ip4:192.168.168.2 ip4:23.153.104.17 +a +mx ~all" }, { "ttl": 14400, "type": "A", "value": "23.153.104.17" }, { "ttl": 21600, "type": "SOA", "rname": "admin.my-control-panel.com", "value": "ns7.my-control-panel.com" }, { "ttl": 21600, "type": "NS", "value": "ns7.my-control-panel.com" } ], "dns_at": "2026-11-02T07:13:25Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "*.atlasnb.org", "*.bcassistrecovery.org", "*.com.bcassistrecovery.org", "*.granitehillbk.org", "*.org.bcassistrecovery.org", "*.spectreglobalbk.org", "*.trustwaveglobalassets.com", "atlasnb.org", "bcassistrecovery.org", "granitehillbk.org" ], "issuer": "Let's Encrypt / YR1", "serial": "597e721278524738a9517bec306e3f0e3f7", "sha256": "9232f3d924afca32c8df5796e197cc339199b3dcefb30502e4ef2f17c59d9327", "subject": "www.trustwaveglobalassets.com.bcassistrecovery.org", "valid_to": "2026-12-14T18:20:18Z", "valid_from": "2026-09-15T18:20:19Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-03-14T21:16:42Z", "last changed": "2026-03-15T08:55:24Z", "registration": "2026-03-14T21:16:42Z", "registrar expiration": "2027-03-14T21:16:42Z", "last update of RDAP database": "2026-10-29T17:44:31Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-02T12:21:31Z", "mail_config": { "mx": [ "spectreglobalbk.org" ], "spf": "v=spf1 ip4:192.168.168.2 ip4:23.153.104.17 +a +mx ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "caa_records": { "domain": "spectreglobalbk.org" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-11-02T11:47:25Z", "first": "2026-11-02T11:47:25Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 1812 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "Bot Verification" }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/altcha/dist/altcha.js" ], "third_party_scripts": 1 }, "ports": { "open": [ 21, 25, 53, 80, 110, 143, 587, 993, 995 ] }, "dns_server": { "ns": [ { "ip": "198.251.89.201", "host": "ns8.my-control-panel.com" }, { "ip": "23.153.104.16", "host": "ns7.my-control-panel.com" } ], "zone": "spectreglobalbk.org" }, "location": { "ip": "23.153.104.17", "asn": "32561", "org": "Aquiryn LLC", "city": "Sheridan", "country": "US" }, "dns": { "A": [ "23.153.104.17" ], "MX": [ "{\"exchange\": \"spectreglobalbk.org\", \"priority\": 0}" ], "NS": [ "ns7.my-control-panel.com", "ns8.my-control-panel.com" ], "SOA": "{\"nsname\": \"ns7.my-control-panel.com\", \"hostmaster\": \"admin.my-control-panel.com\", \"serial\": 2026091501, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 ip4:192.168.168.2 ip4:23.153.104.17 +a +mx ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "23.153.104.17", "family": 4 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-03-14T21:16:42Z", "updated": "2026-08-12T07:21:20Z", "expires": "2027-03-14T21:16:42Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns7.asurahosting.com", "ns8.asurahosting.com" ] } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a19c13-23c2-73df-a0ae-3fdfbf18e018.png","source":"URLScan","report_url":"https://urlscan.io/result/01a19c13-23c2-73df-a0ae-3fdfbf18e018/","captured_at":"2026-11-02T11:44:30Z","sha256":"cc61d6131030810b39eb552781c32985427e5836220a3b9df30938ee4825dcf1","model_image_sha256":"af19e3ddcf8c595ba93ff759bf77e73d0097c10843f567c26baddd0bd82bc1d8","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/spectreglobalbk.org/records.json?source=content&format=json ## Dated availability observation No conclusive current response is stored ```json { "state": "unknown", "label_key": "availability.unverified", "detail_key": "detail.no_response", "params": [], "source": "current_http_probe", "record_id": 1745245, "scope": "checked_url", "observed_at": "2026-11-02T11:46:24Z", "http_status": null, "http_observed_at": "2026-11-02T11:46:24Z", "stored_http_code": null, "stored_http_observed_at": "2026-11-02T11:46:24Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```