# PhishDestroy domain threat record: brentfordcorebit-app.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/brentfordcorebit-app.com/
Machine-readable companion: https://phishdestroy.io/domain/brentfordcorebit-app.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 14:48:09 UTC
- Last availability or vendor check: 2026-10-23 14:48:09 UTC
- Stored record updated: 2026-10-23 18:30:19 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.56.121
- Registrar in stored WHOIS data: MainReg Inc.
- Last stored HTTP status: 200
- Registration date (registry RDAP, brentfordcorebit-app.com): 2025-10-27 10:20:02 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16939-f05e-7479-8dca-e7e0dfdc2e9b/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/brentfordcorebit-app.com
- Certificate Transparency search: https://crt.sh/?q=%25.brentfordcorebit-app.com
- Web Archive lookup: https://web.archive.org/web/*/https://brentfordcorebit-app.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated assessment classifies brentfordcorebit-app.com as a fake crypto exchange. The recorded page title reads “Brentford Core Bit | AI Trading Platform | Official Website”. The domain was first seen by PhishDestroy on 2026-10-23. On that date the site returned an HTTP 200 response.

How the scam works
Fake crypto exchanges mimic legitimate trading platforms and often advertise AI‑driven profits to lure users into depositing cryptocurrency or granting wallet permissions. Victims who send funds or approve transactions typically lose their assets because no real trading or withdrawal service exists.

Evidence
VirusTotal scanned the domain on 2026-10-21 and reported 15 detections from 92 engines, including 14 malicious and 1 suspicious verdicts from vendors such as ESET, BitDefender and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-23 and did not flag the site. URLScan’s analysis on 2026-10-23 gave a malicious engine score of 98 while its overall verdict was non‑malicious. Cloudflare Radar flagged the domain as malicious under the malware category on 2026-10-23. PhishDestroy’s internal blocklist includes the domain; no external blocklists reported it. OTX listed five pulses referencing the domain as of 2026-10-23.

Infrastructure
The domain was registered with MainReg Inc. on 2025-10-27 and is hosted at the recorded IP 185.62.56.121, belonging to Snel.com B.V. in the Netherlands. TLS is provided by a ZeroSSL ECC DV SSL CA 2 certificate valid from 2026-09-01 to 2026-11-30. Nameservers are johnny.ns.cloudflare.com and nola.ns.cloudflare.com.

What to do
Visitors should avoid entering credentials, wallet addresses or approving transactions on this site; if any such data were submitted, change associated passwords and revoke any granted wallet permissions. Users who provided cryptocurrency should move remaining funds to a new, secure wallet and monitor for unauthorized activity. Defenders should add brentfordcorebit-app.com to blocklists, log any connections to the domain, and apply the same restriction to future look‑alike URLs.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16939-f05e-7479-8dca-e7e0dfdc2e9b/
Cloudflare Radar report: https://radar.cloudflare.com/scan/bcb92885-522b-4dc8-b7e5-a90c480871b0
URLQuery report: https://urlquery.net/report/6d7b1137-945e-4d1d-898b-b80fe638c08b
Stored capture screenshot: https://urlscan.io/screenshots/01a16939-f05e-7479-8dca-e7e0dfdc2e9b.png
Cloudflare Radar screenshot (2026-10-23T15:22:14Z): https://screenshots.phishdestroy.io/cf/bcb92885-522b-4dc8-b7e5-a90c480871b0.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/6d7b1137-945e-4d1d-898b-b80fe638c08b.png
URLScan screenshot (2026-10-23T14:32:49Z): https://screenshots.phishdestroy.io/us/01a1692c-104c-74ad-b7a7-e5a8b14c0a99.png
URLScan capture report: https://urlscan.io/result/01a1692c-104c-74ad-b7a7-e5a8b14c0a99/
URLScan screenshot (2026-10-23T14:42:14Z): https://screenshots.phishdestroy.io/us/01a16936-3929-70df-a67e-b263c02695af.png
URLScan capture report: https://urlscan.io/result/01a16936-3929-70df-a67e-b263c02695af/
VirusTotal report: https://www.virustotal.com/gui/domain/brentfordcorebit-app.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=brentfordcorebit-app.com
Revoke token approvals: https://revoke.cash/
Report crypto fraud (Chainabuse): https://www.chainabuse.com/report
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 16:22:55 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16939-f05e-7479-8dca-e7e0dfdc2e9b.png
  Captured: 2026-10-23 14:48:09 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a16939-f05e-7479-8dca-e7e0dfdc2e9b.png
  Captured: 2026-10-23 14:48:09 UTC
  Source report: https://urlscan.io/result/01a16939-f05e-7479-8dca-e7e0dfdc2e9b/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/bcb92885-522b-4dc8-b7e5-a90c480871b0.png
  Captured: 2026-10-23 15:22:14 UTC
  Source report: https://radar.cloudflare.com/scan/bcb92885-522b-4dc8-b7e5-a90c480871b0
  SHA-256: 361f11ee5a2028b7ec42df4cd31487634b225c93c311eb6eddae8ba7e9dc6c0e
- URLQuery: https://screenshots.phishdestroy.io/uq/6d7b1137-945e-4d1d-898b-b80fe638c08b.png
  Source report: https://urlquery.net/report/6d7b1137-945e-4d1d-898b-b80fe638c08b
  SHA-256: fef21530ac6ccb38ca226810383b22f2dc9ed5c8a9396f1b013fa6785da1dd7e
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a1692c-104c-74ad-b7a7-e5a8b14c0a99.png
  Captured: 2026-10-23 14:32:49 UTC
  Source report: https://urlscan.io/result/01a1692c-104c-74ad-b7a7-e5a8b14c0a99/
  SHA-256: aceafe19b68cbd7d444c332ef3a7c3de4f5a3d7f54d05b2ad3cedae37d1f88f4
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16936-3929-70df-a67e-b263c02695af.png
  Captured: 2026-10-23 14:42:14 UTC
  Source report: https://urlscan.io/result/01a16936-3929-70df-a67e-b263c02695af/
  SHA-256: c4c71189e0f393e4c3d8beeef7f8c5194fb028df3667b7f11102decbbb63207d

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T15:23:06Z",
        "uuid": "01a16939-f05e-7479-8dca-e7e0dfdc2e9b",
        "scanned_at": "2026-10-23T14:46:17Z",
        "final_url": "https://brentfordcorebit-app.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://brentfordcorebit-app.com/",
                "from": "http://brentfordcorebit-app.com/",
                "status": 307
            }
        ],
        "ip": "185.62.56.121",
        "domains": [
            "cdn.jsdelivr.net",
            "challenges.cloudflare.com",
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "www.cloudflare.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "104.18.94.41",
            "142.251.20.94",
            "104.18.95.41",
            "104.16.124.96",
            "104.17.208.5",
            "104.17.25.14",
            "192.178.183.95",
            "185.62.56.121"
        ],
        "asns": [
            "13335",
            "15169",
            "62370"
        ],
        "countries": [
            "US",
            "NL"
        ],
        "doc_hash": "9cc8b10c3b6dc43bba5842765726c65d7fe87a12b1b1102c8c39927e8561bfd1",
        "script_hashes": [
            "856932845d232d527393dada82bedcfbf94fa88098416ba440beb53186576ae8"
        ],
        "globals": [
            "toggleTermsPopup",
            "intlTelInput",
            "__TS_SITEKEY",
            "__tsGet",
            "__tsReset",
            "__tsNeedsClick",
            "__tsShow",
            "__lgBS",
            "__visitorCountry",
            "ClientJS",
            "turnstile"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "brentfordcorebit-app.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "brentfordcorebit-app.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-30T23:59:59Z",
            "valid_from": "2026-09-01T00:00:00Z"
        },
        "domain_age_days": 360,
        "apex_age_days": 360,
        "tls_age_days": 52,
        "tls_valid_days": 90,
        "requests": 22,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T15:23:13Z",
        "uuid": "bcb92885-522b-4dc8-b7e5-a90c480871b0",
        "scanned_at": "2026-10-23T15:22:14Z",
        "final_url": "https://brentfordcorebit-app.com/",
        "status": 200,
        "history": [
            {
                "url": "https://brentfordcorebit-app.com/",
                "status": 200
            }
        ],
        "dom_hash": "d4c08fd14c10edd0b8a201b3b01535c1f421bb066aa6ee45ca054f9146bf231f",
        "doc_hash": "9cc8b10c3b6dc43bba5842765726c65d7fe87a12b1b1102c8c39927e8561bfd1",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "brentfordcorebit-app.com",
                "type": "A",
                "value": "185.62.56.121"
            }
        ],
        "dnssec_valid": false,
        "ip": "185.62.56.121",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2025-10-27T10:20:02Z",
            "updated": "2026-01-19T16:08:29Z",
            "expires": "2026-10-27T10:20:02Z",
            "nameservers": [
                "johnny.ns.cloudflare.com",
                "nola.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T16:22:09Z",
        "analysis_at": "2026-10-21T13:57:21Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 14,
            "suspicious": 1,
            "undetected": 33
        },
        "detections": {
            "ESET": "phishing",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2025-10-27T00:00:00Z",
        "updated": "2025-10-27T00:00:00Z",
        "first_seen": "2025-10-28T22:48:25Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "johnny.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "johnny.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.56.121"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nola.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-21T14:03:05Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "brentfordcorebit-app.com"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "4c4212b493015cd783694b5ae668c2d4",
            "sha256": "d22903e6fbdef963b3a1495b30cd6404f1875f7b0151073fdf52480a51891b4a",
            "subject": "brentfordcorebit-app.com",
            "valid_to": "2026-11-30T23:59:59Z",
            "valid_from": "2026-09-01T00:00:00Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "last changed": "2026-01-19T00:00:00Z",
                "registration": "2025-10-27T00:00:00Z",
                "registrar expiration": "2026-10-27T00:00:00Z",
                "last update of RDAP database": "2026-10-21T14:03:00Z"
            },
            "registrar": "MainReg Inc.",
            "registrar_iana_id": "1917"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T15:24:37Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "brentfordcorebit-app.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T14:49:30Z",
            "first": "2026-10-23T14:49:30Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 13342
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://brentfordcorebit-app.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://brentfordcorebit-app.com/",
            "title": "Brentford Core Bit | AI Trading Platform | Official Website",
            "ogType": "website",
            "ogTitle": "Brentford Core Bit | Premium AI trading workflow cockpit",
            "ogSiteName": "Brentford Core Bit",
            "themeColor": "#000000",
            "description": "Brentford Core Bit unveils a premium AI trading cockpit featuring intelligent automation, execution controls, and risk-centric configurations for active market participants.",
            "twitterCard": "summary",
            "canonicalUrl": "https://brentfordcorebit-app.com/",
            "ogDescription": "Brentford Core Bit delivers a premium trading workflow with AI-powered guidance, automated bots, execution controls, and risk-focused setup for active market participants."
        },
        "trackers": {
            "requests": 19,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 29,
                "wait": 20,
                "connect": 14,
                "download": 23
            },
            "response_ms": 87
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 51360,
            "co2_grams": 0.0019,
            "cleaner_than": 36
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.58.212",
                    "host": "nola.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.186",
                    "host": "johnny.ns.cloudflare.com"
                }
            ],
            "zone": "brentfordcorebit-app.com"
        },
        "location": {
            "ip": "185.62.56.121",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "brentfordcorebit-app.com"
        },
        "dns": {
            "A": [
                "185.62.56.121"
            ],
            "NS": [
                "johnny.ns.cloudflare.com",
                "nola.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"johnny.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417732836, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.56.121",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://brentfordcorebit-app.com"
            ]
        },
        "linked_pages": {
            "internal_count": 14
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2025-10-27T10:20:02Z",
            "updated": "2026-01-19T16:08:29Z",
            "expires": "2026-10-27T10:20:02Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "johnny.ns.cloudflare.com",
                "nola.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```