# PhishDestroy domain threat record: bitcine.cc Content language: English Canonical HTML report: https://phishdestroy.io/domain/bitcine.cc/ Machine-readable companion: https://phishdestroy.io/domain/bitcine.cc/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 05:30:52 UTC - Last availability or vendor check: 2026-10-23 11:24:12 UTC - Stored record updated: 2026-10-23 18:20:47 UTC - VirusTotal detections in the stored snapshot: 13/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Bitcoin ## Stored infrastructure - Observed IP address: 172.67.208.170 - Registrar in stored WHOIS data: Porkbun LLC - Last stored HTTP status: 200 - Registration date (registry RDAP, bitcine.cc): 2025-01-18 09:02:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1673b-be00-717f-9802-79e5a6e9919a/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bitcine.cc - Certificate Transparency search: https://crt.sh/?q=%25.bitcine.cc - Web Archive lookup: https://web.archive.org/web/*/https://bitcine.cc/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed bitcine.cc as a suspicious domain based on multiple security vendor detections. A captured page recorded the title “Bitcine” and described free streaming of TV shows and movies. The domain first appeared in PhishDestroy’s records on 2026-10-23 and returned an HTTP 200 response on that date. Google Safe Browsing did not flag the URL, and no external blocklists reported it as malicious at the time of checking. How the scam works The classification reflects a generic phishing risk, where attackers host pages that mimic legitimate services to trick users into entering personal data or credentials. No specific credential‑stealing form or wallet interaction was observed on the captured page, so the risk is assessed at the category level rather than a confirmed technique. Evidence VirusTotal scanned the domain on 2026-10-15 and recorded 13 malicious detections out of 92 engines, including BitDefender, ESET, Fortinet and others. Google Safe Browsing checked the URL on 2026-10-23 and reported no threat. URLScan captured the site on 2026-10-23, where its engine verdict marked the page malicious with a high confidence score, though the overall verdict was neutral. Cloudflare Radar also flagged the domain as phishing on 2026-10-23, assigning a malicious verdict and phishing category. OTX listed six pulses referencing the domain, and PhishDestroy’s internal blocklist marked it as malicious while external blocklists showed zero hits. Infrastructure The domain was registered with Porkbun LLC on 2025-01-18 and is set to expire on 2027-01-18. Hosting is provided through Cloudflare, with recorded IP addresses 172.67.208.170 and 104.21.93.103, and the site uses a TLS certificate issued by Google Trust Services valid from 2026-09-05 to 2026-12-04. DNSSEC is not enabled for the domain. What to do Visitors should avoid entering any credentials, personal information, or downloading files from bitcine.cc; if any data was submitted, change associated passwords immediately. Organizations should block the exact domain at network perimeters and monitor logs for connections to the recorded IP addresses. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1673b-be00-717f-9802-79e5a6e9919a/ Cloudflare Radar report: https://radar.cloudflare.com/scan/54acd0a8-5910-414d-88f9-156f7e0d7616 URLQuery report: https://urlquery.net/report/1e854b51-00d3-4139-afe9-4e59654a43b0 Stored capture screenshot: https://urlscan.io/screenshots/01a1673b-be00-717f-9802-79e5a6e9919a.png Cloudflare Radar screenshot (2026-10-23T06:07:36Z): https://screenshots.phishdestroy.io/cf/54acd0a8-5910-414d-88f9-156f7e0d7616.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/1e854b51-00d3-4139-afe9-4e59654a43b0.png VirusTotal report: https://www.virustotal.com/gui/domain/bitcine.cc Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bitcine.cc Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 06:09:51 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1673b-be00-717f-9802-79e5a6e9919a.png Captured: 2026-10-23 05:30:52 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1673b-be00-717f-9802-79e5a6e9919a.png Captured: 2026-10-23 05:30:52 UTC Source report: https://urlscan.io/result/01a1673b-be00-717f-9802-79e5a6e9919a/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/54acd0a8-5910-414d-88f9-156f7e0d7616.png Captured: 2026-10-23 06:07:36 UTC Source report: https://radar.cloudflare.com/scan/54acd0a8-5910-414d-88f9-156f7e0d7616 SHA-256: 3938adb98bdd5319dab44a5a9ba545363c7328bf781f0b873ee603576210efff - URLQuery: https://screenshots.phishdestroy.io/uq/1e854b51-00d3-4139-afe9-4e59654a43b0.png Source report: https://urlquery.net/report/1e854b51-00d3-4139-afe9-4e59654a43b0 SHA-256: ae082accf386e95147e73f40fc26c9b1c6e953c4b84d8114fb6fbc9209917be4 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T06:08:02Z", "uuid": "01a1673b-be00-717f-9802-79e5a6e9919a", "scanned_at": "2026-10-23T05:28:59Z", "final_url": "https://bitcine.cc/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bitcine.cc/", "from": "http://bitcine.cc/", "status": 307 } ], "ip": "104.21.93.103", "domains": [ "image.tmdb.org", "s4.histats.com", "pro.fontawesome.com", "s10.histats.com", "p.mrktmtrcs.net", "t.dtscout.com", "e.dtscout.com", "moviepire.co", "fonts.gstatic.com", "fonts.googleapis.com", "pl28636255.effectivegatecpm.com", "guitarinterim.com" ], "ips": [ "104.26.15.100", "104.26.10.2", "138.199.36.7", "149.56.240.127", "188.114.97.3", "104.20.8.131", "142.251.20.94", "172.64.147.188", "142.251.127.95", "104.21.93.103" ], "asns": [ "13335", "60068", "16276", "15169" ], "countries": [ "DE", "CA", "US" ], "link_domains": [ "t.me", "www.histats.com" ], "social": [ "https://t.me/hdoboxapk2", "https://t.me/HdoBoxApk2" ], "doc_hash": "364e8c563b7744e1bb47b0ca181081bc8a0628bd0ecc791cef48e3b9f3bb2ef9", "script_hashes": [ "0f0d4ee9f9b8c70acb58e80585afb81118c4c7f0154445b6c43eab2ab2bd6267" ], "globals": [ "_Hasync", "__reactRouterVersion", "chfh", "chfh2", "_HST_cntval", "Histats", "_value_RETURN_BUILDER", "_HistatsCounterGraphics_511", "histats_canvascounters_base.js", "_HistatsCounterGraphics_511_setValues", "_dtspv", "UAParser" ], "cookies": [ "HstCfa4942452", "HstCmu4942452", "HstCnv4942452", "HstCns4942452", "HstCla4942452", "HstPn4942452", "HstPt4942452", "df" ], "storage_keys": [ "_dtspv", "mm" ], "tls": { "san": [ "bitcine.cc" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "bitcine.cc", "protocol": "QUIC", "valid_to": "2026-12-04T13:16:13Z", "valid_from": "2026-09-05T12:16:18Z" }, "domain_age_days": 642, "apex_age_days": 642, "tls_age_days": 47, "tls_valid_days": 90, "requests": 74, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 95, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T06:08:05Z", "uuid": "54acd0a8-5910-414d-88f9-156f7e0d7616", "scanned_at": "2026-10-23T06:07:36Z", "final_url": "https://bitcine.cc/", "status": 200, "history": [ { "url": "https://bitcine.cc/", "status": 200 } ], "dom_hash": "617832b096ffc8166acf766bc2b5162a6c157064866f555c54df4fdb458b962f", "doc_hash": "cf58724bcdeb8e7e12336b8d05b8ce36192f17bd214626faca70cfcf5d467259", "phishing_v2": [ "phishing" ], "domain_risks": [ "Phishing", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bitcine.cc", "type": "A", "value": "172.67.208.170" }, { "name": "bitcine.cc", "type": "A", "value": "104.21.93.103" }, { "name": "bitcine.cc", "type": "AAAA", "value": "2606:4700:3035::6815:5d67" }, { "name": "bitcine.cc", "type": "AAAA", "value": "2606:4700:3033::ac43:d0aa" } ], "dnssec_valid": false, "ip": "172.67.208.170", "verdict": { "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] }, "whois": { "registrar": "Porkbun LLC", "created": "2025-01-18T09:02:00Z", "updated": "2025-12-02T11:32:42Z", "expires": "2027-01-18T09:02:00Z", "nameservers": [ "janet.ns.cloudflare.com", "trey.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T06:06:56Z", "analysis_at": "2026-10-15T12:16:19Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 13, "suspicious": 0, "undetected": 34 }, "detections": { "ESET": "phishing", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "Seclookup": "malicious", "Gridinsoft": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "Porkbun LLC", "created": "2025-01-18T09:02:00Z", "expires": "2027-01-18T09:02:00Z", "updated": "2025-12-02T11:32:42Z", "first_seen": "2025-01-18T09:25:26Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.93.103" }, { "ttl": 21600, "type": "NS", "value": "janet.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::ac43:d0aa" }, { "ttl": 300, "type": "TXT", "value": "google-site-verification=BVY13nQ287fcNXD2TjSmBL2kNqRRmJtiLE4CDjr6obY" }, { "ttl": 300, "type": "A", "value": "172.67.208.170" }, { "ttl": 300, "type": "TXT", "value": "yandex-verification: 04f5b2096deb732a" }, { "ttl": 21600, "type": "NS", "value": "trey.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "janet.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:5d67" } ], "dns_at": "2026-10-15T12:21:37Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "bitcine.cc" ], "issuer": "Google Trust Services / WE1", "serial": "a914c829e73ab9a136cc4c4fb6fc46c", "sha256": "ce41c7717f3c5bdd36fe69964e8fe6605168171f1925b5e3a55b8eee672f7c12", "subject": "bitcine.cc", "valid_to": "2026-12-04T13:16:13Z", "valid_from": "2026-09-05T12:16:18Z" }, "whois": { "registrar": "Porkbun LLC", "registrar_iana_id": "1861", "registrar_url": "http://porkbun.com", "created": "2025-01-18T09:02:00Z", "updated": "2025-12-02T11:32:42Z", "expires": "2027-01-18T09:02:00Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "janet.ns.cloudflare.com", "trey.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited", "delete prohibited" ], "events": { "expiration": "2027-01-18T09:02:00Z", "last changed": "2025-12-02T11:32:42Z", "registration": "2025-01-18T09:02:00Z", "registrar expiration": "2027-01-18T09:02:00Z", "last update of RDAP database": "2025-01-18T09:02:01Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T06:08:24Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bitcine.cc" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T05:32:58Z", "first": "2025-01-21T16:29:55Z", "changes": 26, "days_archived": 28, "scans_per_day": 0.04, "avg_page_bytes": 9850 }, "social_tags": { "ogUrl": "https://bitcine.cc/", "title": "Bitcine", "ogType": "website", "robots": "index,follow", "ogImage": "https://raw.githubusercontent.com/Vextotem/Mycss/main/bitcine.png", "ogTitle": "Bitcine", "keywords": "movies to watch series, free movies streaming, gratis, plus, torrent, free movies full, watch free movies, cinema, watch movies online free, seriados, legendado, dublados, bitcine, ver, hd, online, filmes, 4k, free movies download, himovies,", "description": "Watch Free TV Shows Online, Watch Free Movies Online", "canonicalUrl": "https://bitcine.cc/", "ogDescription": "Watch Free TV Shows Online, Watch Free Movies Online" }, "trackers": { "requests": 18, "trackers": [ { "name": "fontawesome.com", "company": "fontawesome.com", "category": "Hosting", "requests": 2 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Histats", "company": "Histats", "country": "US", "category": "Site Analytics", "requests": 6 } ] }, "mixed_content": { "no_sri": [ "https://guitarinterim.com/56/b8/15/56b8156f103b71d04c36471e226025a3.js", "https://pl28636255.effectivegatecpm.com/5a/86/fd/5a86fd240ea727cf3856d1e570635c53.js" ], "third_party_scripts": 2 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 14, "wait": 63, "connect": 9, "download": 0 }, "response_ms": 88 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 5485, "co2_grams": 0.0002, "cleaner_than": 85 }, "dns_server": { "ns": [ { "ip": "172.64.33.242", "host": "trey.ns.cloudflare.com" }, { "ip": "108.162.192.169", "host": "janet.ns.cloudflare.com" } ], "zone": "bitcine.cc" }, "cookies": { "cookies": [ { "name": "HstCfa4942452" }, { "name": "HstCmu4942452" }, { "name": "HstCnv4942452" }, { "name": "HstCns4942452" }, { "name": "HstCla4942452" }, { "name": "HstPn4942452" }, { "name": "HstPt4942452" } ] }, "location": { "ip": "2606:4700:3035::6815:5d67", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "bitcine.cc" }, "dns": { "A": [ "172.67.208.170", "104.21.93.103" ], "NS": [ "janet.ns.cloudflare.com", "trey.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"janet.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416928839, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "yandex-verification: 04f5b2096deb732a", "google-site-verification=BVY13nQ287fcNXD2TjSmBL2kNqRRmJtiLE4CDjr6obY" ], "AAAA": [ "2606:4700:3035::6815:5d67", "2606:4700:3033::ac43:d0aa" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3033::ac43:d0aa", "family": 6 }, "redirects": { "chain": [ "https://bitcine.cc" ] }, "subdomains": { "count": 1, "subdomains": [ "www.bitcine.cc" ] }, "tech_stack": { "technologies": [ "Histats", "Google Font API", "Cloudflare", "PWA", "Open Graph", "HTTP/3" ] }, "whois": { "registrar": "Porkbun LLC", "created": "2025-01-18T09:02:00Z", "updated": "2025-12-02T11:32:42Z", "expires": "2027-01-18T09:02:00Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "janet.ns.cloudflare.com", "trey.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } } } } ```