# PhishDestroy domain threat record: bpdae.org

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bpdae.org/
Machine-readable companion: https://phishdestroy.io/domain/bpdae.org/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 16:20:41 UTC
- Last availability or vendor check: 2026-10-26 16:47:52 UTC
- Stored record updated: 2026-10-26 19:30:32 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Gname.com Pte. Ltd.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-24 01:30:18 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1791b-7d1c-727a-9716-d7e1c54e9ab9/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bpdae.org
- Certificate Transparency search: https://crt.sh/?q=%25.bpdae.org
- Web Archive lookup: https://web.archive.org/web/*/https://bpdae.org/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot from 2026-10-26 shows a dark trading dashboard branded "BP DAE", with a Bitcoin chart banner, BTC/USDT, ETH/USDT and TRX/USDT price rows, category tabs for Tiền điện tử, Kim loại and Ngoại tệ, and a Vietnamese announcement strip. PhishDestroy listed the domain after an admin report on 2026-10-26, its first-seen date, two days after registration on 2026-10-24.

How the scam works
The page presented live-looking market figures, a member bonus notice and online support cues to nudge visitors toward funding an account on an unregulated trading venue. As a category risk, such layouts are built to capture deposits and personal details from people drawn in by promised returns.

Evidence
The screenshot itself shows the trading interface, Vietnamese-language lures and price tickers. urlscan recorded the page on 2026-10-26 with an ML score of 95 flagged malicious, while its overall verdict stayed not malicious, and a separate urlscan capture was judged clean; an HTTP to HTTPS 307 redirect was logged. VirusTotal was not flagged, Google Safe Browsing was not flagged, and 0 external blocklists matched, yet PhishDestroy's internal list flagged it and OTX held 2 pulses on 2026-10-26. Cloudflare Radar reported a phishing classification plus new-domain risk flags, and scans logged 65 requests with 58 tracker requests.

Infrastructure
Registration records dated 2026-10-24 name Gname.com Pte. Ltd. as registrar, with Cloudflare nameservers and an unsigned DNSSEC configuration. Hosting traffic passed through Cloudflare, a Cloudflare WAF was noted, and TLS used a Let's Encrypt certificate issued under YE2, valid from 2026-10-24 to 2027-01-22, so no operator identity follows from these shared services.

What to do
If you entered credentials on bpdae.org, change that password on the genuine service you used and enable 2FA, and treat any investment funds sent there as at risk; contact your financial institution where relevant. Defenders should block bpdae.org, alert users who received links to it, and monitor for newly registered lookalike domains.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1791b-7d1c-727a-9716-d7e1c54e9ab9/
Cloudflare Radar report: https://radar.cloudflare.com/scan/d14f979a-b6f5-4d46-ba8b-ff07969ad949
URLQuery report: https://urlquery.net/report/1179fce8-9c34-4e92-a869-7eeda214e704
Stored capture screenshot: https://i.ibb.co/zh2hB280/c2e2680f59ac.png
Cloudflare Radar screenshot (2026-10-26T16:29:51Z): https://screenshots.phishdestroy.io/cf/d14f979a-b6f5-4d46-ba8b-ff07969ad949.png
VirusTotal report: https://www.virustotal.com/gui/domain/bpdae.org
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bpdae.org
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 17:46:20 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/zh2hB280/c2e2680f59ac.png
  Captured: 2026-10-26 16:47:52 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a1791b-7d1c-727a-9716-d7e1c54e9ab9.png
  Captured: 2026-10-26 16:47:52 UTC
  Source report: https://urlscan.io/result/01a1791b-7d1c-727a-9716-d7e1c54e9ab9/
- URLScan capture 2: https://screenshots.phishdestroy.io/01a17714-a116-700d-8fc2-c905c1119835.png
  Captured: 2026-10-26 16:20:41 UTC
  Source report: https://urlscan.io/result/01a1791b-7d1c-727a-9716-d7e1c54e9ab9/
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17914-e529-7353-9f0f-0bedbc6dbbd5.png
  Captured: 2026-10-26 16:39:44 UTC
  Source report: https://urlscan.io/result/01a17914-e529-7353-9f0f-0bedbc6dbbd5/
  SHA-256: 334506f086e2005ea8f86522efc7c2627de0080a8e2962f241e6a14a148f1176
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/d14f979a-b6f5-4d46-ba8b-ff07969ad949.png
  Captured: 2026-10-26 16:29:51 UTC
  Source report: https://radar.cloudflare.com/scan/d14f979a-b6f5-4d46-ba8b-ff07969ad949
  SHA-256: 5ff179b4e32e8e248fc81b34f7b1bd2c10e5bbefd855d19788347eb99c5069a2
- URLQuery: https://screenshots.phishdestroy.io/uq/1179fce8-9c34-4e92-a869-7eeda214e704.png
  Source report: https://urlquery.net/report/1179fce8-9c34-4e92-a869-7eeda214e704
  SHA-256: 25daa68b351da5098c07f99ef1dce4bed15199063116994e2956aeb7b2b4b40a
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17714-a116-700d-8fc2-c905c1119835.png
  Captured: 2026-10-26 07:21:45 UTC
  Source report: https://urlscan.io/result/01a17714-a116-700d-8fc2-c905c1119835/
  SHA-256: e81a779af5ceb54751081cdb490bdaf77b43670b75b80bd912813d8fcf071699

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T17:04:26Z",
        "uuid": "01a1791b-7d1c-727a-9716-d7e1c54e9ab9",
        "scanned_at": "2026-10-26T16:46:56Z",
        "final_url": "https://bpdae.org/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bpdae.org/",
                "from": "http://bpdae.org/",
                "status": 307
            }
        ],
        "ip": "104.21.95.96",
        "domains": [
            "weiyuim123.oss-cn-hongkong.aliyuncs.com",
            "hkex-taizi.oss-cn-hongkong.aliyuncs.com",
            "cdn.jsdelivr.net",
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "47.79.64.212",
            "151.101.1.229",
            "47.79.64.187",
            "104.16.80.73",
            "104.21.95.96"
        ],
        "asns": [
            "45102",
            "54113",
            "13335"
        ],
        "countries": [
            "HK",
            "US"
        ],
        "doc_hash": "cc956783476244c94d9a88ffd96662dac63cd10aa650ee2c97ca7b7596d235d3",
        "script_hashes": [
            "cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151",
            "3ffa0a8767a2a1dcb28683e793dfdf7e38d4e4f53fdf9d9a17d7efb583a4aa25",
            "e470071bb71d21a87c0fc147bb6bc075af8f6b6f4c3e78da40c7daec5166b0d8",
            "46a35575467893793ddb71dee0aeea4d2458b9cdeb8b476fdcb961aac7868a67",
            "c038814703553ddbea3dcd0ed58489c6560a189bae5cff7c05d5178c25745a8c",
            "3c22e6230bcc8f97470e9864443d5499ebe772788b00100b2918a8d94f861f13",
            "12546cc048723b265ce108a24b3f65da528c182499c62a09df80435592db394d",
            "f49ae8fc24c3a2e2dec0ddf35327b867127250b4084ae4e031c3a4c44c50889f",
            "d27c9e64574a7739b676d9da3c4d6504a0c6233f05f9f71e64ca2df960f29b72",
            "911d2069a09f45c2881d09225d0e4eaa54572d893c3711282d8a12a7bc8b36ca"
        ],
        "globals": [
            "TradingView",
            "addLink",
            "addMeta",
            "lib",
            "rem",
            "dpr",
            "__VUE_INSTANCE_SETTERS__",
            "__VUE_SSR_SETTERS__",
            "__INTLIFY_PROD_DEVTOOLS__",
            "__INTLIFY_JIT_COMPILATION__",
            "__INTLIFY_DROP_MESSAGE_COMPILER__",
            "__VUE_I18N_FULL_INSTALL__",
            "__VUE_I18N_LEGACY_API__",
            "setImmediate",
            "clearImmediate",
            "PubSub",
            "__config",
            "__theme",
            "__VUE__",
            "__vite_is_modern_browser",
            "__cfBeacon"
        ],
        "storage_keys": [
            "undefined_THEME",
            "main",
            "undefined_LANGUAGE"
        ],
        "tls": {
            "san": [
                "*.bpdae.org",
                "bpdae.org"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "bpdae.org",
            "protocol": "QUIC",
            "valid_to": "2027-01-22T07:22:31Z",
            "valid_from": "2026-10-24T07:22:32Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 65,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 95,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T16:33:14Z",
        "uuid": "d14f979a-b6f5-4d46-ba8b-ff07969ad949",
        "scanned_at": "2026-10-26T16:29:51Z",
        "final_url": "https://bpdae.org/",
        "status": 200,
        "history": [
            {
                "url": "https://bpdae.org/",
                "status": 200
            }
        ],
        "dom_hash": "cc7279f77827124dc7e3b8da09a927d84a753d90669df1c9b57916e338223d6d",
        "doc_hash": "cc956783476244c94d9a88ffd96662dac63cd10aa650ee2c97ca7b7596d235d3",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "New Domains",
            "Security Risks",
            "Newly Seen Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bpdae.org",
                "type": "A",
                "value": "104.21.95.96"
            },
            {
                "name": "bpdae.org",
                "type": "A",
                "value": "172.67.144.23"
            },
            {
                "name": "bpdae.org",
                "type": "AAAA",
                "value": "2606:4700:3034::6815:5f60"
            },
            {
                "name": "bpdae.org",
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:9017"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.95.96",
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "created": "2026-10-24T03:30:18Z",
            "updated": "2026-10-24T08:12:42Z",
            "expires": "2027-10-24T03:30:18Z",
            "nameservers": [
                "erin.ns.cloudflare.com",
                "felicity.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T17:01:23Z",
        "analysis_at": "2026-10-25T07:01:51Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 38
        },
        "reputation": 0,
        "registrar": "Gname.com Pte. Ltd.",
        "created": "2026-10-24T03:30:18Z",
        "expires": "2027-10-24T03:30:18Z",
        "updated": "2026-10-24T08:12:42Z",
        "first_seen": "2026-10-24T08:25:41Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:5f60"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:9017"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "erin.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.144.23"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "felicity.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "erin.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.95.96"
            }
        ],
        "dns_at": "2026-10-25T07:02:11Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.bpdae.org",
                "bpdae.org"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "548aab88cfd3539835b7cbb1951ec073e49",
            "sha256": "5828a33952c724d1ff113eadebd9bd4e3a88254eeea7917fac15e79de2b13c9e",
            "subject": "bpdae.org",
            "valid_to": "2027-01-22T07:22:31Z",
            "valid_from": "2026-10-24T07:22:32Z"
        },
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "registrar_iana_id": "1923",
            "registrar_url": "http://whois.gname.com",
            "created": "2026-10-24T03:30:18Z",
            "updated": "2026-10-24T08:12:42Z",
            "expires": "2027-10-24T03:30:18Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "erin.ns.cloudflare.com",
                "felicity.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-24T03:30:18Z",
                "registration": "2026-10-24T03:30:18Z",
                "last update of RDAP database": "2026-10-24T08:12:44Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T16:34:49Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bpdae.org"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T16:31:52Z",
            "first": "2026-10-26T16:31:52Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 3781
        },
        "social_tags": {
            "title": "BPDAEFBS20",
            "robots": "all",
            "ogImage": "/platform/dev/logo_144.png?2.0.1792852533490",
            "ogTitle": "BPDAE",
            "keywords": "undefined",
            "themeColor": "#ffffff",
            "description": "undefined",
            "ogDescription": "undefined"
        },
        "trackers": {
            "requests": 58,
            "trackers": [
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 42,
                "wait": 484,
                "connect": 16,
                "download": 0
            },
            "response_ms": 544
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 7508,
            "co2_grams": 0.0003,
            "cleaner_than": 78
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.212",
                    "host": "felicity.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.113",
                    "host": "erin.ns.cloudflare.com"
                }
            ],
            "zone": "bpdae.org"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "bpdae.org"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "felicity.ns.cloudflare.com",
                "erin.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"erin.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418418543, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://bpdae.org"
            ]
        },
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "created": "2026-10-24T03:30:18Z",
            "updated": "2026-10-24T08:12:42Z",
            "expires": "2027-10-24T03:30:18Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp",
                "addPeriod https://icann.org/epp"
            ],
            "nameservers": [
                "erin.ns.cloudflare.com",
                "felicity.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```