# PhishDestroy domain threat record: btc-vindici11.pro Content language: English Canonical HTML report: https://phishdestroy.io/domain/btc-vindici11.pro/ Machine-readable companion: https://phishdestroy.io/domain/btc-vindici11.pro/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 17:00:16 UTC - Last availability or vendor check: 2026-10-23 17:02:46 UTC - Stored record updated: 2026-10-23 19:37:04 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: signal ## Stored infrastructure - Observed IP address: 185.62.56.121 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, btc-vindici11.pro): 2026-04-23 07:26:38 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a169b5-2f16-737f-98f7-e9eeccbf3380/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/btc-vindici11.pro - Certificate Transparency search: https://crt.sh/?q=%25.btc-vindici11.pro - Web Archive lookup: https://web.archive.org/web/*/https://btc-vindici11.pro/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed btc-vindici11.pro as a suspicious domain based on automated security assessments. The recorded page title was "btc-vindici 11.4 | AI Trading Platform | Official Website". The domain was first seen by PhishDestroy on 2026-10-23, when an HTTP 200 response was recorded. How the scam works The available evidence does not show a concrete malicious mechanism, but the domain was flagged by multiple security engines for phishing and malware risk. Such flags typically indicate attempts to impersonate services or lure users into revealing credentials, though no credential‑phishing form or malicious payload was observed on the recorded page. Evidence VirusTotal scanned the domain on 2026-10-19 and reported 17 detections across 92 engines, including 14 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-23 returned no flag. OTX recorded five pulses referencing the domain as of 2026-10-23. Cloudflare Radar scanned on 2026-10-23 and marked the site malicious with phishing and malware categories. urlscan.io captured the site on 2026-10-23, assigning a high engine score of 98 but an overall non‑malicious verdict. PhishDestroy’s internal blocklist includes the domain, while external blocklists checked on 2026-10-23 showed zero hits. Infrastructure The domain was registered on 2026-04-23 through Spaceship, Inc. The recorded IP address was 185.62.56.121, associated with Snel.com B.V. in the Netherlands and served via Cloudflare DNS. TLS 1.3 was observed with a ZeroSSL ECC DV SSL certificate issued on 2026-09-18 and valid until 2026-12-17; DNSSEC was not enabled. Open ports 80 and 443 were observed, and the page loaded third‑party resources from CDNs such as jsDelivr and Google services. What to do Visitors should avoid entering any credentials, personal data, or downloading files from this site; if any information was submitted, change the associated passwords immediately. Security teams can block the domain and monitor outbound connections to 185.62.56.121, applying URL filtering based on the listed detections. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a169b5-2f16-737f-98f7-e9eeccbf3380/ Cloudflare Radar report: https://radar.cloudflare.com/scan/1c2a8404-933f-4d49-a1c8-cd12c60bb2e1 URLQuery report: https://urlquery.net/report/3212f107-7cdc-4b5d-8922-d791953f7177 Stored capture screenshot: https://urlscan.io/screenshots/01a169b5-2f16-737f-98f7-e9eeccbf3380.png Cloudflare Radar screenshot (2026-10-23T17:01:19Z): https://screenshots.phishdestroy.io/cf/1c2a8404-933f-4d49-a1c8-cd12c60bb2e1.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/3212f107-7cdc-4b5d-8922-d791953f7177.png URLScan screenshot (2026-09-19T19:56:19Z): https://screenshots.phishdestroy.io/us/01a0bb3d-a051-766d-b236-ed0df686abb9.png URLScan capture report: https://urlscan.io/result/01a0bb3d-a051-766d-b236-ed0df686abb9/ URLScan screenshot (2026-10-23T17:07:59Z): https://screenshots.phishdestroy.io/us/01a169ba-4a09-7561-a70b-4f8bc818eb6e.png URLScan capture report: https://urlscan.io/result/01a169ba-4a09-7561-a70b-4f8bc818eb6e/ VirusTotal report: https://www.virustotal.com/gui/domain/btc-vindici11.pro Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=btc-vindici11.pro Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 19:36:48 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a169b5-2f16-737f-98f7-e9eeccbf3380.png Captured: 2026-10-23 17:02:46 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a169b5-2f16-737f-98f7-e9eeccbf3380.png Captured: 2026-10-23 17:02:46 UTC Source report: https://urlscan.io/result/01a169b5-2f16-737f-98f7-e9eeccbf3380/ - URLScan capture 2: https://urlscan.io/screenshots/01a0bb3d-a051-766d-b236-ed0df686abb9.png Captured: 2026-10-23 17:00:16 UTC Source report: https://urlscan.io/result/01a169b5-2f16-737f-98f7-e9eeccbf3380/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1c2a8404-933f-4d49-a1c8-cd12c60bb2e1.png Captured: 2026-10-23 17:01:19 UTC Source report: https://radar.cloudflare.com/scan/1c2a8404-933f-4d49-a1c8-cd12c60bb2e1 SHA-256: a42d788f16a9676a50c1beaefe75bc4cfd7a489c8cb8b99054f72173be3be187 - URLQuery: https://screenshots.phishdestroy.io/uq/3212f107-7cdc-4b5d-8922-d791953f7177.png Source report: https://urlquery.net/report/3212f107-7cdc-4b5d-8922-d791953f7177 SHA-256: 08a4722420d93ae3d2227cb3863892c610605e9d3567b5173b75291a10baf37f - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0bb3d-a051-766d-b236-ed0df686abb9.png Captured: 2026-09-19 19:56:19 UTC Source report: https://urlscan.io/result/01a0bb3d-a051-766d-b236-ed0df686abb9/ SHA-256: 4f136019173bd5d6769f035f4056d8524300d8251d1063d14d164c001b5b7bb8 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a169ba-4a09-7561-a70b-4f8bc818eb6e.png Captured: 2026-10-23 17:07:59 UTC Source report: https://urlscan.io/result/01a169ba-4a09-7561-a70b-4f8bc818eb6e/ SHA-256: 37152a1fded90bc6fd622c5b162e8cde572a04b9648482fbde9bd281363a9951 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T17:02:49Z", "uuid": "01a169b5-2f16-737f-98f7-e9eeccbf3380", "scanned_at": "2026-10-23T17:00:57Z", "final_url": "https://btc-vindici11.pro/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://btc-vindici11.pro/", "from": "http://btc-vindici11.pro/", "status": 307 } ], "ip": "185.62.56.121", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.18.94.41", "104.18.95.41", "104.16.123.96", "142.251.20.94", "104.17.208.5", "192.178.183.95", "185.62.56.121" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "3bf2be198795cf18d9d51ba30f9821d40e801d4871bb71ac7a05b1911f47c83d", "script_hashes": [ "f768fff7313347fd61402bd7ccdbe24db97a1782a959ade3d9d1fa1414e7edab" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "__visitorCountry", "ClientJS", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "btc-vindici11.pro" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "btc-vindici11.pro", "protocol": "TLS 1.3", "valid_to": "2026-12-17T23:59:59Z", "valid_from": "2026-09-18T00:00:00Z" }, "domain_age_days": 183, "apex_age_days": 183, "tls_age_days": 35, "tls_valid_days": 90, "requests": 21, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T17:02:51Z", "uuid": "1c2a8404-933f-4d49-a1c8-cd12c60bb2e1", "scanned_at": "2026-10-23T17:01:19Z", "final_url": "https://btc-vindici11.pro/", "status": 200, "history": [ { "url": "https://btc-vindici11.pro/", "status": 200 } ], "dom_hash": "b894020eb99d7d05a7dbbeae76f6dc72dfa9650a57e82bc7b5bdad735434fab9", "doc_hash": "3bf2be198795cf18d9d51ba30f9821d40e801d4871bb71ac7a05b1911f47c83d", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "btc-vindici11.pro", "type": "A", "value": "185.62.56.121" } ], "dnssec_valid": false, "ip": "185.62.56.121", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T19:35:57Z", "analysis_at": "2026-10-19T11:56:11Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "created": "2026-04-23T00:00:00Z", "updated": "2026-04-23T00:00:00Z", "first_seen": "2026-04-23T09:05:43Z", "dns": [ { "ttl": 300, "type": "A", "value": "185.62.56.121" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "blair.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "coby.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "blair.ns.cloudflare.com" } ], "dns_at": "2026-10-19T12:02:01Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "btc-vindici11.pro" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "12fd84fde88b2e74980baa72537894d", "sha256": "4f39ccd00d99a3ef1246998863eb29075246e99748b5b72fe15a302e627da475", "subject": "btc-vindici11.pro", "valid_to": "2026-12-17T23:59:59Z", "valid_from": "2026-09-18T00:00:00Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-08-21T01:47:34Z", "registration": "2026-04-23T07:26:38Z", "registrar expiration": "2027-04-23T07:26:38Z", "last update of RDAP database": "2026-10-16T11:40:02Z" }, "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T17:03:12Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "btc-vindici11.pro" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T17:00:42Z", "first": "2026-10-10T01:08:08Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.07, "avg_page_bytes": 12208 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://btc-vindici11.pro/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "title": "btc-vindici 11.4 | AI Trading Platform | Official Website", "robots": "index, follow", "themeColor": "#061310", "description": "btc-vindici 11.4 delivers a premier AI-driven trading assistant suite, offering automated strategies, real-time risk controls, and multi-asset workflow orchestration.", "canonicalUrl": "https://btc-vindici11.pro/" }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 16, "tls": 37, "wait": 21, "connect": 22, "download": 12 }, "response_ms": 108 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 40927, "co2_grams": 0.0015, "cleaner_than": 41 }, "dns_server": { "ns": [ { "ip": "173.245.59.92", "host": "coby.ns.cloudflare.com" }, { "ip": "108.162.194.121", "host": "blair.ns.cloudflare.com" } ], "zone": "btc-vindici11.pro" }, "location": { "ip": "185.62.56.121", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "btc-vindici11.pro" }, "dns": { "A": [ "185.62.56.121" ], "NS": [ "blair.ns.cloudflare.com", "coby.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"blair.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417717256, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.121", "family": 4 }, "redirects": { "chain": [ "https://btc-vindici11.pro" ] }, "linked_pages": { "internal_count": 38 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```