VirusTotal
18 / 92 engine detections
打开报告bayancapital.pro:钓鱼,PhishDestroy 于 2026-10-22 检测到。风险:关键(100/100)。注册商:NETIM SAS。状态:最后已知的活跃状态。托管:Snel.com B.V。PhishDestroy 已发送1 份滥用举报。VirusTotal:18/92 个引擎标记。请勿输入登录凭据,也不要连接钱包。
“Bayan Capital | AI Trading Platform | Official Website”
钓鱼: bayancapital.pro — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 18/92 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); CF Radar malicious…
The evidence summary below uses retained observations. Each source keeps its own collection date.
18 / 92 engine detections
打开报告恶意
打开报告扫描报告
打开报告4 community references
打开报告无威胁标记
打开报告无恶意标记
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a165d1-32b0-733b-84d6-28caaa0707ee |
|---|---|
| Final url | https://bayancapital.pro/ |
| 状态 | 200 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://bayancapital.pro/",
"from": "http://bayancapital.pro/",
"status": 307
}
] |
| Ip | 185.62.57.28 |
| Ptr | static-28-57-62-185.hosted-by-snel.com |
| Contacted domains | [
"cdn.jsdelivr.net",
"challenges.cloudflare.com",
"cdnjs.cloudflare.com",
"fonts.gstatic.com",
"www.cloudflare.com",
"fonts.googleapis.com"
] |
| Contacted IP addresses | [
"104.18.95.41",
"104.16.123.96",
"142.251.222.3",
"151.101.1.229",
"104.17.25.14",
"172.217.25.170",
"185.62.57.28"
] |
| Asns | [
"13335",
"15169",
"54113",
"62370"
] |
| Countries | [
"US",
"NL"
] |
| Document hash | 5a7e1da93f9b098049d97c182dd55d31a11e255e99ffe3a121fb74e6a46f9d18 |
| Script hashes | [
"804e116f954a545d3e2285b28414f9ea836a67c8fd17ccf70443ef41e277d3ff"
] |
| Globals | [
"toggleTermsPopup",
"intlTelInput",
"__TS_SITEKEY",
"__tsGet",
"__tsReset",
"__tsNeedsClick",
"__tsShow",
"__lgBS",
"ClientJS",
"__visitorCountry",
"turnstile"
] |
| Storage keys | [
"t_cfp"
] |
| Tls | {
"san": [
"bayancapital.pro"
],
"cipher": "AES_128_GCM",
"issuer": "ZeroSSL ECC DV SSL CA 2",
"subject": "bayancapital.pro",
"protocol": "TLS 1.3",
"valid_to": "2026-12-18T23:59:59Z",
"valid_from": "2026-09-19T00:00:00Z"
} |
| 域名年龄(天) | 247 |
| Apex age days | 247 |
| Tls age days | 33 |
| TLS 有效天数 | 90 |
| Requests | 22 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 92,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"content-type": "text/html; charset=utf-8",
"referrer-policy": "no-referrer-when-downgrade"
} |
观察到: · Retrieved:
| Uuid | 170273f2-7188-4ce9-84d3-3bad77fe9d88 |
|---|---|
| Final url | https://bayancapital.pro/ |
| 状态 | 200 |
| History | [
{
"url": "https://bayancapital.pro/",
"status": 200
}
] |
| DOM structure hash | abe23004235de483b0d821fcc8b982878670f5ce02eb081f6e108fe9ca122814 |
| Document hash | 5a7e1da93f9b098049d97c182dd55d31a11e255e99ffe3a121fb74e6a46f9d18 |
| Phishing v2 | [
"phishing"
] |
| 域名风险 | [
"Malware",
"Security threats",
"CIPA Filter",
"CIPA"
] |
| Radar rank | {
"bucket": ">200000"
} |
| DNS 记录 | [
{
"name": "bayancapital.pro",
"type": "A",
"value": "185.62.57.28"
}
] |
| DNSSEC 有效 | false |
| Ip | 185.62.57.28 |
| Verdict | {
"tags": [
"malware"
],
"malicious": true,
"categories": [
"malware"
]
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 43,
"malicious": 14,
"suspicious": 4,
"undetected": 31
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"DNS8": "suspicious",
"ESET": "suspicious",
"VIPRE": "malware",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Webroot": "malicious",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "suspicious",
"ADMINUSLabs": "malicious",
"BitDefender": "phishing",
"alphaMountain.ai": "spam",
"Forcepoint ThreatSeeker": "phishing"
} |
| Reputation | 0 |
| Categories | {
"Sophos": "phishing and fraud",
"Webroot": "Phishing and Other Frauds",
"alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)"
} |
| 创建 | 2026-02-17T00:00:00Z |
| Updated | 2026-02-17T00:00:00Z |
| 首次发现 | 2026-02-17T14:38:03Z |
| DNS 记录 | [
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "fonzie.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "kira.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "fonzie.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "185.62.57.28"
}
] |
| Dns at | 2026-10-21T13:02:33Z |
| Jarm | 40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319 |
| Certificate | {
"san": [
"bayancapital.pro"
],
"issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
"serial": "7aad849378a7414c66d0b3806a58bfe6",
"sha256": "c8a8aa7de9fb40fc3467d3d4a0dece5aa28f2535fb5718d280f25c8d0274902c",
"subject": "bayancapital.pro",
"valid_to": "2026-12-18T23:59:59Z",
"valid_from": "2026-09-19T00:00:00Z"
} |
| Registry data | {
"status": [
"active",
"client transfer prohibited"
],
"events": {
"expiration": "2027-02-17T21:00:00Z",
"last changed": "2026-02-17T11:04:25Z",
"registration": "2026-02-17T00:00:00Z",
"registrar expiration": "2027-02-17T21:00:00Z",
"last update of RDAP database": "2026-10-18T14:49:26Z"
},
"registrar": "NETIM SAS",
"registrar_iana_id": "1519"
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"domain": "bayancapital.pro"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
} |
| Web archive observations | {
"last": "2026-10-22T20:53:07Z",
"first": "2026-10-22T20:53:07Z",
"changes": 0,
"days_archived": 1,
"avg_page_bytes": 13616
} |
| Crawler rules | {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://bayancapital.pro/sitemap.xml"
]
} |
| Sitemap | {
"present": true,
"url_count": 140
} |
| 页面标题与元数据 | {
"ogUrl": "https://bayancapital.pro/",
"title": "Bayan Capital | AI Trading Platform | Official Website",
"ogType": "website",
"robots": "index, follow",
"ogTitle": "Bayan Capital | Elite AI Trading Automation",
"ogSiteName": "Bayan Capital",
"themeColor": "#f4faff",
"description": "Bayan Capital delivers a premium AI-assisted trading platform with refined automation controls, execution governance, and risk-focused workflows designed for clear oversight and streamlined portfolio operations.",
"twitterCard": "summary",
"canonicalUrl": "https://bayancapital.pro/",
"ogDescription": "Bayan Capital delivers a premium AI-assisted trading platform with refined automation controls, execution governance, and risk-focused workflows designed for clear oversight and streamlined portfolio operations."
} |
| Trackers | {
"requests": 20,
"trackers": [
{
"name": "Cloudflare",
"company": "Cloudflare",
"country": "US",
"category": "Hosting",
"requests": 7
},
{
"name": "Google Fonts",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
},
{
"name": "Google Static",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 2
},
{
"name": "jsDelivr",
"company": "jsDelivr",
"category": "Hosting",
"requests": 3
}
]
} |
| 表单与混合内容 | {
"no_sri": [
"https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
],
"third_party_scripts": 1
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 7,
"tls": 35,
"wait": 28,
"connect": 21,
"download": 41
},
"response_ms": 132
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_128_GCM_SHA256",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"ocsp_stapled": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
80,
443
]
} |
| Carbon | {
"bytes": 51278,
"co2_grams": 0.0019,
"cleaner_than": 36
} |
| Dns server | {
"ns": [
{
"ip": "162.159.38.197",
"host": "kira.ns.cloudflare.com"
},
{
"ip": "172.64.35.70",
"host": "fonzie.ns.cloudflare.com"
}
],
"zone": "bayancapital.pro"
} |
| Location | {
"ip": "185.62.57.28",
"asn": "62370",
"org": "Snel.com B.V.",
"city": "Rotterdam",
"country": "NL"
} |
| Ssl | {
"issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
"subject": "bayancapital.pro"
} |
| DNS 记录 | {
"A": [
"185.62.57.28"
],
"NS": [
"kira.ns.cloudflare.com",
"fonzie.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"fonzie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417217686, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"message": "Site does not serve any HSTS headers."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": "no-referrer-when-downgrade",
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Get ip | {
"ip": "185.62.57.28",
"family": 4
} |
| Redirects | {
"chain": [
"https://bayancapital.pro"
]
} |
| Page links | {
"internal_count": 39
} |
| HTTP headers | {
"headers": {
"content-type": "text/html; charset=utf-8",
"referrer-policy": "no-referrer-when-downgrade"
}
} |
不是。PhishDestroy 将 bayancapital.pro 归类为“钓鱼”(风险:关键,100/100),首次检测于 2026-10-22。VirusTotal:18/92 个引擎标记。请将该网站视为不安全。
不安全。请勿在 bayancapital.pro 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
fonzie.ns.cloudflare.comkira.ns.cloudflare.com位置信息描述的是 IP 网络。
c8a8aa7de9fb40fc3467d3d4a0dece5aa28f2535fb5718d280f25c8d0274902cbayancapital.pro已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
Google PageSpeed Insights — 移动端性能审核: bayancapital.pro · checked Oct 22, 2026
由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。
http://bayancapital.pro/https://bayancapital.pro/Content-Encoding: gzipContent-Type: text/html; charset=utf-8summaryh3=":443"; ma=2592000gziptext/html; charset=utf-8Thu, 22 Oct 2026 20:54:38 GMT"dm9jl7ljnbzz13ke-gzip"Tue, 20 Oct 2026 09:02:18 GMTno-referrer-when-downgradechunkedAccept-Encoding由采集器保留的数值;较长的值可能在采集时被截短。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
未知→live_content
content_served
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
bayancapital.pro
PD-20261022-CDC88B Recipient: abuse@netim.net Registrar: Netim SARL (France) Policy Violations: “Strict abuse policy classifying phishing, malware, fraud and botnet activity as illegal domain use; registrar may suspend or terminate affected domains.” Applicable Laws: French Penal Code Art.323-1+; EU Directive 2013/40/EU
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
bayancapital.pro)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。