# PhishDestroy domain threat record: bitgptapp.club Content language: English Canonical HTML report: https://phishdestroy.io/domain/bitgptapp.club/ Machine-readable companion: https://phishdestroy.io/domain/bitgptapp.club/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 05:45:17 UTC - Last availability or vendor check: 2026-10-23 05:45:17 UTC - Stored record updated: 2026-10-23 06:30:30 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.57.28 - Registrar in stored WHOIS data: Spaceship, Inc. - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date (registry RDAP, bitgptapp.club): 2026-03-26 11:33:32 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16748-f432-771e-8a06-54f560918e92/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bitgptapp.club - Certificate Transparency search: https://crt.sh/?q=%25.bitgptapp.club - Web Archive lookup: https://web.archive.org/web/*/https://bitgptapp.club/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed bitgptapp.club as a suspicious domain based on multiple security detections. The domain was first seen by PhishDestroy on 2026-10-23, returning HTTP 200 and displaying the recorded title “Bit gpt app | AI Trading Platform | Official Website”. How the scam works The classification reflects a generic phishing or malware risk indicated by security engines, but no concrete malicious payload or credential‑harvesting form was observed on the captured page. Such listings warn that the site could be used to lure users into disclosing information or downloading unwanted software. Evidence VirusTotal scanned the domain on 2026-10-19 (retrieved 2026-10-23) and marked it malicious by 14 vendors and suspicious by 4, for a total of 18 detections out of 92 engines. Google Safe Browsing checked on 2026-10-23 and reported no warning. Cloudflare Radar scan captured on 2026-10-23 labeled the site as phishing and malware. urlscan.io captured the site on 2026-10-23; its engine analysis gave a malicious score of 99 and tagged it as malicious, while the overall verdict was neutral. OTX listed five pulses referencing the domain as of 2026-10-23, and PhishDestroy’s internal blocklist marked the domain as malicious on the same day; no external blocklists flagged it at that time. Infrastructure The domain was registered on 2026-03-26 through Spaceship, Inc., with client and server transfer prohibited. The domain resolved to the recorded IP 185.62.57.28, which was associated with the Snel.com B.V. network in the Netherlands and was served through Cloudflare nameservers. The TLS certificate issued by ZeroSSL ECC DV was valid from 2026-09-18 to 2026-12-17, and DNSSEC was not enabled. What to do Visitors should avoid entering any credentials, personal data, or downloading files from bitgptapp.club; if they have already submitted information, they should change affected passwords and monitor accounts for unusual activity. Organizations should block the exact domain in web filters and add it to intrusion‑detection signatures. Security teams should log any access attempts to the domain and review related traffic for signs of credential harvesting or malware delivery. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16748-f432-771e-8a06-54f560918e92/ Cloudflare Radar report: https://radar.cloudflare.com/scan/83d411f7-4413-4212-803f-aece2047c463 URLQuery report: https://urlquery.net/report/1fbd93ff-2992-44f1-a476-8fd1a25a3b4a Stored capture screenshot: https://urlscan.io/screenshots/01a16748-f432-771e-8a06-54f560918e92.png Cloudflare Radar screenshot (2026-10-23T06:19:23Z): https://screenshots.phishdestroy.io/cf/83d411f7-4413-4212-803f-aece2047c463.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/1fbd93ff-2992-44f1-a476-8fd1a25a3b4a.png URLScan screenshot (2026-10-23T05:41:51Z): https://screenshots.phishdestroy.io/us/01a16747-7f04-748a-9c83-ab3a443ae9ea.png URLScan capture report: https://urlscan.io/result/01a16747-7f04-748a-9c83-ab3a443ae9ea/ VirusTotal report: https://www.virustotal.com/gui/domain/bitgptapp.club Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bitgptapp.club Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 06:22:25 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16748-f432-771e-8a06-54f560918e92.png Captured: 2026-10-23 05:45:17 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16748-f432-771e-8a06-54f560918e92.png Captured: 2026-10-23 05:45:17 UTC Source report: https://urlscan.io/result/01a16748-f432-771e-8a06-54f560918e92/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/83d411f7-4413-4212-803f-aece2047c463.png Captured: 2026-10-23 06:19:23 UTC Source report: https://radar.cloudflare.com/scan/83d411f7-4413-4212-803f-aece2047c463 SHA-256: e9b5c2726b989983f746b9c9df8e35014455939aaa47aa67d722b6ec2c3d4f39 - URLQuery: https://screenshots.phishdestroy.io/uq/1fbd93ff-2992-44f1-a476-8fd1a25a3b4a.png Source report: https://urlquery.net/report/1fbd93ff-2992-44f1-a476-8fd1a25a3b4a SHA-256: c3b1d97d5e4b29a853fad2996525549b0e02286f56a6897e84c86f08a8af7a90 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16747-7f04-748a-9c83-ab3a443ae9ea.png Captured: 2026-10-23 05:41:51 UTC Source report: https://urlscan.io/result/01a16747-7f04-748a-9c83-ab3a443ae9ea/ SHA-256: 99b08f2e153b9e047ebc1e912dd8aab30edf5b86e23a81c515d0d6cc5ba85464 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T06:13:02Z", "uuid": "01a16748-f432-771e-8a06-54f560918e92", "scanned_at": "2026-10-23T05:43:31Z", "final_url": "https://bitgptapp.club/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bitgptapp.club/", "from": "http://bitgptapp.club/", "status": 307 } ], "ip": "185.62.57.28", "ptr": "static-28-57-62-185.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.16.124.96", "209.85.144.94", "151.101.1.229", "104.17.24.14", "172.217.222.95", "185.62.57.28" ], "asns": [ "13335", "15169", "54113", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "c04a0779629862586c0c8fe6752fc41b9cd7a4969b885439cb1b0ad24ee2558c", "script_hashes": [ "c45d9d6eb1c6932a81fc9d72ffcda756d74c63780280a077302f43bbe553941c" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "bitgptapp.club" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "bitgptapp.club", "protocol": "TLS 1.3", "valid_to": "2026-12-17T23:59:59Z", "valid_from": "2026-09-18T00:00:00Z" }, "domain_age_days": 209, "apex_age_days": 209, "tls_age_days": 35, "tls_valid_days": 90, "requests": 22, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T06:21:06Z", "uuid": "83d411f7-4413-4212-803f-aece2047c463", "scanned_at": "2026-10-23T06:19:23Z", "final_url": "https://bitgptapp.club/", "status": 200, "history": [ { "url": "https://bitgptapp.club/", "status": 200 } ], "dom_hash": "0c30e0b5d84afe68dcc887db94e37f6fb39ea67e907cd47f49c579cf8d0ff481", "doc_hash": "c04a0779629862586c0c8fe6752fc41b9cd7a4969b885439cb1b0ad24ee2558c", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bitgptapp.club", "type": "A", "value": "185.62.57.28" } ], "dnssec_valid": false, "ip": "185.62.57.28", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Spaceship, Inc.", "created": "2026-03-26T11:33:32Z", "updated": "2026-05-25T11:33:37Z", "expires": "2027-03-26T11:33:32Z", "nameservers": [ "june.ns.cloudflare.com", "ethan.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T06:18:29Z", "analysis_at": "2026-10-19T11:00:30Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 14, "suspicious": 4, "undetected": 30 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "suspicious", "Bfore.Ai PreCrime": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "categories": { "alphaMountain.ai": "Information Technology, Suspicious (alphaMountain.ai)" }, "created": "2026-03-26T00:00:00Z", "updated": "2026-03-27T00:00:00Z", "first_seen": "2026-03-27T08:36:38Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "ethan.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "june.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "ethan.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.28" } ], "dns_at": "2026-10-19T11:05:48Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "bitgptapp.club" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "1369cb6b25947f27def8b35db7066aba", "sha256": "3e31c1477f13b60fa1ec77ba9567e25e37f8d876bfe1212c157b2553a6e42a09", "subject": "bitgptapp.club", "valid_to": "2026-12-17T23:59:59Z", "valid_from": "2026-09-18T00:00:00Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited", "server transfer prohibited" ], "events": { "last changed": "2026-08-20T17:18:28Z", "registration": "2026-03-26T11:33:32Z", "registrar expiration": "2027-03-26T11:33:32Z", "last update of RDAP database": "2026-10-19T11:05:48Z" }, "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T06:21:20Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bitgptapp.club" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T05:46:23Z", "first": "2026-10-12T06:03:35Z", "changes": 1, "days_archived": 3, "scans_per_day": 0.18, "avg_page_bytes": 9050 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://bitgptapp.club/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "ogUrl": "https://bitgptapp.club/", "title": "Bit gpt app | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "BitGPT Pro | AI-Driven Automated Trading Bots Overview", "ogSiteName": "BitGPT Pro", "themeColor": "#000000", "description": "BitGPT Pro delivers a premium overview of AI-driven automated trading systems, showing automated bots, workflow orchestration, and risk governance with clear feature insight and actionable guidance.", "twitterCard": "summary", "canonicalUrl": "https://bitgptapp.club/", "ogDescription": "BitGPT Pro delivers a premium overview of AI-driven automated trading systems, showing automated bots, workflow orchestration, and risk governance with clear feature insight and actionable guidance." }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 15, "tls": 28, "wait": 26, "connect": 27, "download": 51 }, "response_ms": 147 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 49762, "co2_grams": 0.0018, "cleaner_than": 37 }, "dns_server": { "ns": [ { "ip": "173.245.58.176", "host": "june.ns.cloudflare.com" }, { "ip": "162.159.44.232", "host": "ethan.ns.cloudflare.com" } ], "zone": "bitgptapp.club" }, "location": { "ip": "185.62.57.28", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "bitgptapp.club" }, "dns": { "A": [ "185.62.57.28" ], "NS": [ "june.ns.cloudflare.com", "ethan.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"ethan.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417711168, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.28", "family": 4 }, "redirects": { "chain": [ "https://bitgptapp.club" ] }, "linked_pages": { "internal_count": 49 }, "whois": { "registrar": "Spaceship, Inc.", "created": "2026-03-26T11:33:32Z", "updated": "2026-05-25T11:33:37Z", "expires": "2027-03-26T11:33:32Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "june.ns.cloudflare.com", "ethan.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```