# PhishDestroy domain threat record: bitprimegold.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/bitprimegold.com/ Machine-readable companion: https://phishdestroy.io/domain/bitprimegold.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 08:30:16 UTC - Last availability or vendor check: 2026-10-25 12:05:06 UTC - Stored record updated: 2026-10-25 23:21:41 UTC - VirusTotal detections in the stored snapshot: 12/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: revolut ## Stored infrastructure - Observed IP address: 185.98.60.138 - Registrar in stored WHOIS data: Internet Domain Service BS Corp. - Registrar country in stored WHOIS data: BS - Last stored HTTP status: 200 - Registration date (registry RDAP, bitprimegold.com): 2022-05-06 12:12:40 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a167e3-e3f0-740f-a5e8-e2a76a5189d1/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bitprimegold.com - Certificate Transparency search: https://crt.sh/?q=%25.bitprimegold.com - Web Archive lookup: https://web.archive.org/web/*/https://bitprimegold.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added bitprimegold.com to its internal blocklist on 2026-10-23 after an intake review highlighted twelve malicious detections on VirusTotal. The recorded page title reads “Immediate Pump ™ | The Official & Updated Website 2025 🥇”. An HTTP request on 2026-10-23 returned a 200 status code. How the scam works The detections indicate the site could be used for phishing or malware distribution, a common tactic where deceptive branding lures visitors into revealing credentials or downloading harmful content. No specific malicious behavior was observed on the fetched page, so the exact mechanism remains unconfirmed. Evidence VirusTotal analysis on 2026-10-19 (retrieved 2026-10-23) marked the domain as malicious by twelve of ninety‑two engines. Google Safe Browsing checked on 2026-10-23 reported no threat. urlscan.io captured the site on 2026-10-23; its engine score was 89 (malicious) while the overall verdict was non‑malicious. Cloudflare Radar scanned on 2026-10-23 and classified the domain as malware and phishing. OTX listed six pulses referencing the domain as of 2026-10-23. PhishDestroy’s internal list marks the domain as blocked, and external blocklists showed zero matches on the same date. Infrastructure The domain was registered on 2022-05-06 through Internet Domain Service BS Corp, with nameservers ns1.cryptodns.co and ns2.cryptodns.co. Hosting records show the site resolved to IP 185.98.60.138, owned by Ideal Hosting Teknoloji A.S. in Turkey. The TLS certificate from Let’s Encrypt was valid from 2026-09-18 to 2026-12-17. What to do If you entered any credentials on bitprimegold.com, change those passwords immediately and monitor the associated accounts for suspicious activity. Network defenders should block the domain, review logs for traffic to it, and consider adding it to their threat‑blocking policies. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a167e3-e3f0-740f-a5e8-e2a76a5189d1/ Cloudflare Radar report: https://radar.cloudflare.com/scan/50ff3cc2-d36d-4095-ad4e-6572f23ae666 URLQuery report: https://urlquery.net/report/7dee9078-2673-49d2-8f6e-8673c463b9df Stored capture screenshot: https://urlscan.io/screenshots/01a167e3-e3f0-740f-a5e8-e2a76a5189d1.png Cloudflare Radar screenshot (2026-10-23T08:32:23Z): https://screenshots.phishdestroy.io/cf/50ff3cc2-d36d-4095-ad4e-6572f23ae666.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/7dee9078-2673-49d2-8f6e-8673c463b9df.png URLScan screenshot (2026-07-30T07:45:28Z): https://screenshots.phishdestroy.io/us/019fb1fc-1bba-70dd-a938-d3d5f039775c.png URLScan capture report: https://urlscan.io/result/019fb1fc-1bba-70dd-a938-d3d5f039775c/ URLScan screenshot (2026-07-30T07:47:27Z): https://screenshots.phishdestroy.io/us/019fb1fd-f863-73ad-a58e-2ecabfe26bc1.png URLScan capture report: https://urlscan.io/result/019fb1fd-f863-73ad-a58e-2ecabfe26bc1/ URLScan screenshot (2026-07-31T08:12:47Z): https://screenshots.phishdestroy.io/us/019fb73b-871d-764a-a82a-1d58ba373572.png URLScan capture report: https://urlscan.io/result/019fb73b-871d-764a-a82a-1d58ba373572/ URLScan screenshot (2026-10-23T08:37:31Z): https://screenshots.phishdestroy.io/us/01a167e8-4e60-75ba-83c2-45828e6b66ca.png URLScan capture report: https://urlscan.io/result/01a167e8-4e60-75ba-83c2-45828e6b66ca/ VirusTotal report: https://www.virustotal.com/gui/domain/bitprimegold.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bitprimegold.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 09:07:08 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a167e3-e3f0-740f-a5e8-e2a76a5189d1.png Captured: 2026-10-23 08:34:31 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a167e3-e3f0-740f-a5e8-e2a76a5189d1.png Captured: 2026-10-23 08:34:31 UTC Source report: https://urlscan.io/result/01a167e3-e3f0-740f-a5e8-e2a76a5189d1/ - URLScan capture 2: https://urlscan.io/screenshots/019fb73b-871d-764a-a82a-1d58ba373572.png Captured: 2026-10-23 08:30:16 UTC Source report: https://urlscan.io/result/01a167e3-e3f0-740f-a5e8-e2a76a5189d1/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/50ff3cc2-d36d-4095-ad4e-6572f23ae666.png Captured: 2026-10-23 08:32:23 UTC Source report: https://radar.cloudflare.com/scan/50ff3cc2-d36d-4095-ad4e-6572f23ae666 SHA-256: b73acd1299bf3bce4d79a2f5df367b78eba2fc89175ae310a9792c486ca3ec95 - URLQuery: https://screenshots.phishdestroy.io/uq/7dee9078-2673-49d2-8f6e-8673c463b9df.png Source report: https://urlquery.net/report/7dee9078-2673-49d2-8f6e-8673c463b9df SHA-256: 09fae18b881dfb1993d86bb10747fbc8c305b2241e872ab483bb7794f10e16b0 - URLScan · 2026-07-30: https://screenshots.phishdestroy.io/us/019fb1fc-1bba-70dd-a938-d3d5f039775c.png Captured: 2026-07-30 07:45:28 UTC Source report: https://urlscan.io/result/019fb1fc-1bba-70dd-a938-d3d5f039775c/ SHA-256: 1b6d41cbec43219a9f2e27f2062b92535271be3861f82e4fd37bfc0d0bec0e1b - URLScan · 2026-07-30: https://screenshots.phishdestroy.io/us/019fb1fd-f863-73ad-a58e-2ecabfe26bc1.png Captured: 2026-07-30 07:47:27 UTC Source report: https://urlscan.io/result/019fb1fd-f863-73ad-a58e-2ecabfe26bc1/ SHA-256: 1b6d41cbec43219a9f2e27f2062b92535271be3861f82e4fd37bfc0d0bec0e1b - URLScan · 2026-07-31: https://screenshots.phishdestroy.io/us/019fb73b-871d-764a-a82a-1d58ba373572.png Captured: 2026-07-31 08:12:47 UTC Source report: https://urlscan.io/result/019fb73b-871d-764a-a82a-1d58ba373572/ SHA-256: 1b6d41cbec43219a9f2e27f2062b92535271be3861f82e4fd37bfc0d0bec0e1b - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a167e8-4e60-75ba-83c2-45828e6b66ca.png Captured: 2026-10-23 08:37:31 UTC Source report: https://urlscan.io/result/01a167e8-4e60-75ba-83c2-45828e6b66ca/ SHA-256: 1b6d41cbec43219a9f2e27f2062b92535271be3861f82e4fd37bfc0d0bec0e1b ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T08:36:00Z", "uuid": "01a167e3-e3f0-740f-a5e8-e2a76a5189d1", "scanned_at": "2026-10-23T08:32:43Z", "final_url": "https://bitprimegold.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bitprimegold.com/", "from": "http://bitprimegold.com/", "status": 307 } ], "ip": "185.98.60.138", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "173.194.45.94", "142.251.167.95", "185.98.60.138" ], "asns": [ "15169", "201064" ], "countries": [ "US", "TR" ], "doc_hash": "cc8d2949bdc93d93680671fc7877a6cd45434244582c4e16a676e35b40ec3dfc", "script_hashes": [ "b1dc3a468eb8949e17762628c68205ee4ffad52ec1cdbe48e3456bf96c1c9603", "81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113" ], "globals": [ "__VUE__", "switcher", "switcherButton", "modal", "btn" ], "cookies": [ "lang_fx" ], "tls": { "san": [ "*.bitprimegold.com", "bitprimegold.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bitprimegold.com", "protocol": "TLS 1.3", "valid_to": "2026-12-17T16:35:49Z", "valid_from": "2026-09-18T16:35:50Z" }, "domain_age_days": 1627, "apex_age_days": 1627, "tls_age_days": 34, "tls_valid_days": 89, "requests": 53, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 89, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx/1.30.1", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T08:36:03Z", "uuid": "50ff3cc2-d36d-4095-ad4e-6572f23ae666", "scanned_at": "2026-10-23T08:32:23Z", "final_url": "https://bitprimegold.com/", "status": 200, "history": [ { "url": "https://bitprimegold.com/", "status": 200 } ], "dom_hash": "a0b3fbb00eb1ab440b80ac0fba4b53c66b66fa1e3cd39ac272b3e219a5c70002", "doc_hash": "cc8d2949bdc93d93680671fc7877a6cd45434244582c4e16a676e35b40ec3dfc", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bitprimegold.com", "type": "A", "value": "185.98.60.138" } ], "dnssec_valid": false, "ip": "185.98.60.138", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Internet Domain Service BS Corp", "created": "2022-05-06T12:12:40Z", "updated": "2026-05-20T13:59:48Z", "expires": "2027-05-06T12:12:40Z", "nameservers": [ "ns1.cryptodns.co", "ns2.cryptodns.co" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T09:02:56Z", "analysis_at": "2026-10-19T12:26:51Z", "stats": { "timeout": 0, "harmless": 47, "malicious": 12, "suspicious": 0, "undetected": 33 }, "detections": { "ESET": "phishing", "VIPRE": "malware", "Lionic": "phishing", "Webroot": "malicious", "Emsisoft": "malware", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "popularity": { "Alexa": 368876, "Statvoo": 368876 }, "registrar": "Internet Domain Service BS Corp", "created": "2022-05-06T12:12:40Z", "expires": "2027-05-06T12:12:40Z", "updated": "2026-05-20T13:59:48Z", "first_seen": "2024-02-05T16:10:39Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns2.cryptodns.co" }, { "ttl": 300, "type": "A", "value": "185.98.60.138" }, { "ttl": 300, "type": "NS", "value": "ns1.cryptodns.co" }, { "ttl": 300, "type": "SOA", "rname": "admin.cryptodns.co", "value": "ns1.cryptodns.co" } ], "dns_at": "2026-10-19T12:32:41Z", "jarm": "1dd40d40d00040d00042d43d000000831b6af40378e2dd35eeac4e9311926e", "cert": { "san": [ "*.bitprimegold.com", "bitprimegold.com" ], "issuer": "Let's Encrypt / YE2", "serial": "6537ccc9f9404bbffbf8cdd7e5c5db13b0d", "sha256": "3b9844be52bf64070fff71dfce8ef806e8731dbc8f5d0a68fce883894513fc56", "subject": "bitprimegold.com", "valid_to": "2026-12-17T16:35:49Z", "valid_from": "2026-09-18T16:35:50Z" }, "whois": { "registrar": "Internet Domain Service BS Corp", "registrar_iana_id": "2487", "registrar_url": "http://www.internet.bs", "created": "2022-05-06T12:12:40Z", "updated": "2026-05-20T13:59:48Z", "expires": "2027-05-06T12:12:40Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.cryptodns.co", "ns2.cryptodns.co" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-05-06T12:12:40Z", "last changed": "2026-05-20T13:59:48Z", "registration": "2022-05-06T12:12:40Z", "registrar expiration": "2027-05-06T12:12:40Z", "last update of RDAP database": "2026-10-16T23:26:23Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T08:36:26Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bitprimegold.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-17T09:38:26Z", "first": "2022-05-27T13:57:22Z", "changes": 46, "days_archived": 55, "scans_per_day": 0.03, "avg_page_bytes": -24136284 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://bitprimegold.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 128 }, "social_tags": { "title": "Immediate Pump ™ | The Official & Updated Website 2025 🥇", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "description": "Learn valuable insights and strategies for online trading with Immediate Pump, your guide to smart investment choices.", "twitterCard": "summary", "canonicalUrl": "https://bitprimegold.com/" }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 24, "tls": 25, "wait": 59, "connect": 18, "download": 36 }, "response_ms": 162 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 53, 80, 443 ] }, "carbon": { "bytes": 67622, "co2_grams": 0.0025, "cleaner_than": 30 }, "dns_server": { "ns": [ { "ip": "185.98.60.138", "host": "ns2.cryptodns.co" }, { "ip": "185.98.60.138", "host": "ns1.cryptodns.co" } ], "zone": "bitprimegold.com" }, "location": { "ip": "185.98.60.138", "asn": "201064", "org": "Ideal Hosting Teknoloji A.S.", "country": "TR" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bitprimegold.com" }, "dns": { "A": [ "185.98.60.138" ], "NS": [ "ns1.cryptodns.co", "ns2.cryptodns.co" ], "SOA": "{\"nsname\": \"ns1.cryptodns.co\", \"hostmaster\": \"admin.cryptodns.co\", \"serial\": 2026052113, \"refresh\": 3600, \"retry\": 1800, \"expire\": 604800, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.98.60.138", "family": 4 }, "redirects": { "chain": [ "https://bitprimegold.com" ] }, "linked_pages": { "internal_count": 37 }, "whois": { "registrar": "Internet Domain Service BS Corp", "created": "2022-05-06T12:12:40Z", "updated": "2026-05-20T13:59:48Z", "expires": "2027-05-06T12:12:40Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.cryptodns.co", "ns2.cryptodns.co" ] }, "headers": { "headers": { "server": "nginx/1.30.1", "content-type": "text/html" } } } } ```