# PhishDestroy domain threat record: bitcoinrocket.nl

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bitcoinrocket.nl/
Machine-readable companion: https://phishdestroy.io/domain/bitcoinrocket.nl/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 05:18:33 UTC
- Last availability or vendor check: 2026-10-23 05:38:22 UTC
- Stored record updated: 2026-10-23 07:00:03 UTC
- VirusTotal detections in the stored snapshot: 20/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Bitcoin

## Stored infrastructure

- Observed IP address: 185.98.60.138
- Registrar in stored WHOIS data: Internet Domain Service BS Corp.
- Registrar country in stored WHOIS data: BS
- Last stored HTTP status: 200
- Registration date (registry RDAP, bitcoinrocket.nl): 2023-04-18 13:30:44 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16742-9d30-74f7-bf36-e48d936b2bff/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bitcoinrocket.nl
- Certificate Transparency search: https://crt.sh/?q=%25.bitcoinrocket.nl
- Web Archive lookup: https://web.archive.org/web/*/https://bitcoinrocket.nl/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bitcoinrocket.nl to its internal blocklist on 2026-10-23 after an intake review highlighted 16 malicious detections on VirusTotal. The recorded page title reads "Bitcoin Rocket ™ | De officiële en bijgewerkte website 2025 🥇" and the site returned HTTP 200 on the same date. Google Safe Browsing reported no threat at the time of checking. No external blocklists listed the domain on that day.

How the scam works
The domain is listed because multiple security vendors label it as phishing or malware, a common indicator of sites that may attempt to trick users. No concrete malicious behavior was observed on the captured page, so the risk is inferred from aggregated detections rather than specific on‑site actions.

Evidence
VirusTotal scanned the domain on 2026-10-19 and reported 20 detections from 92 engines, including 16 malicious and 4 suspicious classifications from vendors such as BitDefender, ESET and Kaspersky. Google Safe Browsing checked on 2026-10-23 and returned a non‑flagged result. urlscan.io captured the site on 2026-07-30; its overall verdict was clean but its engine flagged the page as malicious with a score of 78. Cloudflare Radar scanned on 2026-10-23 and labeled the domain malicious, citing malware and phishing categories. OTX listed one pulse referencing the domain on the same day, and PhishDestroy’s internal blocklist marks the domain as blocked while external blocklists showed zero hits on the check date.

Infrastructure
The domain was registered on 2023-04-18 through Internet Domain Service BS Corp. and used the nameservers ns1.cryptodns.co and ns2.cryptodns.co. The recorded hosting IP was 185.98.60.138, which the observation identified as belonging to Ideal Hosting Teknoloji A.S. in Turkey. A Let's Encrypt TLS certificate covering *.bitcoinrocket.nl was issued on 2026-09-18 and was valid until 2026-12-17; DNSSEC was not enabled.

What to do
Visitors should avoid entering any cryptocurrency credentials, personal data or downloading files from this site; if credentials were submitted, change passwords on affected services and monitor accounts for unauthorized activity. Network defenders should block bitcoinrocket.nl, review DNS and proxy logs for connections to this exact address, and apply the PhishDestroy blocklist to relevant security controls. No wallet approvals are known to have been granted, so revocation is only needed if a user previously authorized transactions on this domain.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019fb1fd-a84e-747e-9b74-4a38ac15dbb6/
Cloudflare Radar report: https://radar.cloudflare.com/scan/dafbed4a-2f5f-41e8-9095-86413195b5f9
Stored capture screenshot: https://urlscan.io/screenshots/019fb1fd-a84e-747e-9b74-4a38ac15dbb6.png
Cloudflare Radar screenshot (2026-10-23T05:33:11Z): https://screenshots.phishdestroy.io/cf/dafbed4a-2f5f-41e8-9095-86413195b5f9.png
URLScan screenshot (2026-07-29T12:30:30Z): https://screenshots.phishdestroy.io/us/019fadda-c3f1-764b-ad14-3be78a00f15a.png
URLScan capture report: https://urlscan.io/result/019fadda-c3f1-764b-ad14-3be78a00f15a/
URLScan screenshot (2026-10-23T05:36:36Z): https://screenshots.phishdestroy.io/us/01a16742-9d30-74f7-bf36-e48d936b2bff.png
URLScan capture report: https://urlscan.io/result/01a16742-9d30-74f7-bf36-e48d936b2bff/
VirusTotal report: https://www.virustotal.com/gui/domain/bitcoinrocket.nl
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bitcoinrocket.nl
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 05:37:29 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16742-9d30-74f7-bf36-e48d936b2bff.png
  Captured: 2026-10-23 05:38:22 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a16742-9d30-74f7-bf36-e48d936b2bff.png
  Captured: 2026-10-23 05:38:22 UTC
  Source report: https://urlscan.io/result/01a16742-9d30-74f7-bf36-e48d936b2bff/
- URLScan capture 2: https://urlscan.io/screenshots/019fb1fd-a84e-747e-9b74-4a38ac15dbb6.png
  Captured: 2026-10-23 05:18:33 UTC
  Source report: https://urlscan.io/result/01a16742-9d30-74f7-bf36-e48d936b2bff/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/dafbed4a-2f5f-41e8-9095-86413195b5f9.png
  Captured: 2026-10-23 05:33:11 UTC
  Source report: https://radar.cloudflare.com/scan/dafbed4a-2f5f-41e8-9095-86413195b5f9
  SHA-256: 38d9bcecaf854d7076962effb33444c8a37c911d8841ad94e26ff8b6f2f88ecc
- URLQuery: https://screenshots.phishdestroy.io/uq/033e6daf-a114-4ecb-9376-cf998e640eec.png
  Source report: https://urlquery.net/report/033e6daf-a114-4ecb-9376-cf998e640eec
  SHA-256: 6632fe6f157b543ec7406038cfd739832cc1bc26e309788a8e6b321323d42883
- URLScan · 2026-07-29: https://screenshots.phishdestroy.io/us/019fadda-c3f1-764b-ad14-3be78a00f15a.png
  Captured: 2026-07-29 12:30:30 UTC
  Source report: https://urlscan.io/result/019fadda-c3f1-764b-ad14-3be78a00f15a/
  SHA-256: 51143c7524cebad446b6a3b717253ec114684ea5fa41631fa5b43ebb76b39e4b
- URLScan · 2026-07-30: https://screenshots.phishdestroy.io/us/019fb1fd-a84e-747e-9b74-4a38ac15dbb6.png
  Captured: 2026-07-30 07:47:08 UTC
  Source report: https://urlscan.io/result/019fb1fd-a84e-747e-9b74-4a38ac15dbb6/
  SHA-256: 51143c7524cebad446b6a3b717253ec114684ea5fa41631fa5b43ebb76b39e4b

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T06:13:06Z",
        "uuid": "01a16742-9d30-74f7-bf36-e48d936b2bff",
        "scanned_at": "2026-10-23T05:36:36Z",
        "final_url": "https://bitcoinrocket.nl/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bitcoinrocket.nl/",
                "from": "http://bitcoinrocket.nl/",
                "status": 307
            }
        ],
        "ip": "185.98.60.138",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "172.217.25.163",
            "142.250.183.42",
            "185.98.60.138"
        ],
        "asns": [
            "15169",
            "201064"
        ],
        "countries": [
            "US",
            "TR"
        ],
        "doc_hash": "fd0a338e6abccecf4514174126f3ca3ba37f7707fea68108c7ffe083feb99acf",
        "script_hashes": [
            "b1dc3a468eb8949e17762628c68205ee4ffad52ec1cdbe48e3456bf96c1c9603",
            "81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113"
        ],
        "globals": [
            "__VUE__",
            "modal",
            "btn"
        ],
        "cookies": [
            "lang_fx"
        ],
        "tls": {
            "san": [
                "*.bitcoinrocket.nl",
                "bitcoinrocket.nl"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "bitcoinrocket.nl",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-17T16:21:09Z",
            "valid_from": "2026-09-18T16:21:10Z"
        },
        "domain_age_days": 1282,
        "apex_age_days": 1282,
        "tls_age_days": 34,
        "tls_valid_days": 89,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 78,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx/1.30.1",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T05:36:35Z",
        "uuid": "dafbed4a-2f5f-41e8-9095-86413195b5f9",
        "scanned_at": "2026-10-23T05:33:11Z",
        "final_url": "https://bitcoinrocket.nl/",
        "status": 200,
        "history": [
            {
                "url": "https://bitcoinrocket.nl/",
                "status": 200
            }
        ],
        "dom_hash": "2b35782aa2ac97aa710437cdac77172e6b289bdd94ea50fb032c030016390e85",
        "doc_hash": "fd0a338e6abccecf4514174126f3ca3ba37f7707fea68108c7ffe083feb99acf",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bitcoinrocket.nl",
                "type": "A",
                "value": "185.98.60.138"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.98.60.138",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Internet Domain Service BS Corp.",
            "created": "2023-04-18T13:30:44Z",
            "updated": "2026-05-20T13:57:02Z",
            "nameservers": [
                "ns1.cryptodns.co",
                "ns2.cryptodns.co"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T05:32:02Z",
        "analysis_at": "2026-10-19T11:55:32Z",
        "stats": {
            "timeout": 0,
            "harmless": 40,
            "malicious": 16,
            "suspicious": 4,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Emsisoft": "malware",
            "Fortinet": "phishing",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "created": "2023-04-18T00:00:00Z",
        "updated": "2026-05-20T00:00:00Z",
        "first_seen": "2023-11-16T13:01:15Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.cryptodns.co"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "admin.cryptodns.co",
                "value": "ns1.cryptodns.co"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.cryptodns.co"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.98.60.138"
            }
        ],
        "dns_at": "2026-10-19T12:00:50Z",
        "jarm": "1dd40d40d00040d00042d43d000000831b6af40378e2dd35eeac4e9311926e",
        "cert": {
            "san": [
                "*.bitcoinrocket.nl",
                "bitcoinrocket.nl"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6520a55f682f0b5020017ccdcd577cde5d8",
            "sha256": "7fe3c29e628afe2c0969425d05aa8681f126eb058e993e2d5e5d91611e6e426b",
            "subject": "bitcoinrocket.nl",
            "valid_to": "2026-12-17T16:21:09Z",
            "valid_from": "2026-09-18T16:21:10Z"
        },
        "whois": {
            "created": "2023-04-18T00:00:00Z",
            "updated": "2026-05-20T00:00:00Z",
            "dnssec": "no"
        },
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "last changed": "2026-05-20T13:57:02Z",
                "registration": "2023-04-18T13:30:44Z",
                "last update of RDAP database": "2026-10-16T00:18:36Z"
            },
            "registrar": "Internet Domain Service BS Corp.",
            "registrar_iana_id": "0000"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T05:36:50Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bitcoinrocket.nl"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T05:23:24Z",
            "first": "2023-08-21T03:31:26Z",
            "changes": 19,
            "days_archived": 20,
            "scans_per_day": 0.02,
            "avg_page_bytes": 13010
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://bitcoinrocket.nl/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 4
        },
        "social_tags": {
            "title": "Bitcoin Rocket ™ | De officiële en bijgewerkte website 2025 🥇",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "description": "Ontdek de razendsnelle wereld van Bitcoin bij Bitcoin Rocket - Jouw gids voor betrouwbare crypto-informatie en handelservaringen.",
            "twitterCard": "summary",
            "canonicalUrl": "https://bitcoinrocket.nl/"
        },
        "trackers": {
            "requests": 15,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 49,
                "tls": 26,
                "wait": 43,
                "connect": 18,
                "download": 22
            },
            "response_ms": 158
        },
        "tls_connection": {
            "alpn": "http/1.1",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                53,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 62547,
            "co2_grams": 0.0023,
            "cleaner_than": 32
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "185.98.60.138",
                    "host": "ns1.cryptodns.co"
                },
                {
                    "ip": "185.98.60.138",
                    "host": "ns2.cryptodns.co"
                }
            ],
            "zone": "bitcoinrocket.nl"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "lang_fx"
                }
            ]
        },
        "location": {
            "ip": "185.98.60.138",
            "asn": "201064",
            "org": "Ideal Hosting Teknoloji A.S.",
            "city": "Mahmutbey",
            "country": "TR"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "bitcoinrocket.nl"
        },
        "dns": {
            "A": [
                "185.98.60.138"
            ],
            "NS": [
                "ns2.cryptodns.co",
                "ns1.cryptodns.co"
            ],
            "SOA": "{\"nsname\": \"ns1.cryptodns.co\", \"hostmaster\": \"admin.cryptodns.co\", \"serial\": 2026052113, \"refresh\": 3600, \"retry\": 1800, \"expire\": 604800, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.98.60.138",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://bitcoinrocket.nl"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Vue.js",
                "Nginx",
                "Google Font API"
            ]
        },
        "linked_pages": {
            "internal_count": 6
        },
        "whois": {
            "registrar": "Internet Domain Service BS Corp. Ocean Centre, Montagu Foreshore, East Bay Street PO BOX SS-19084 Nassau Bahamas SIDN BV",
            "created": "2023-04-18T00:00:00Z",
            "updated": "2026-05-20T00:00:00Z",
            "status": [
                "active"
            ],
            "nameservers": [
                "ns1.cryptodns.co",
                "ns2.cryptodns.co"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx/1.30.1",
                "content-type": "text/html"
            }
        }
    }
}
```