# PhishDestroy domain threat record: btcaurafov5.digital Content language: English Canonical HTML report: https://phishdestroy.io/domain/btcaurafov5.digital/ Machine-readable companion: https://phishdestroy.io/domain/btcaurafov5.digital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 17:32:27 UTC - Last availability or vendor check: 2026-10-23 17:32:27 UTC - Stored record updated: 2026-10-23 20:38:00 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: ups ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, btcaurafov5.digital): 2026-06-14 08:59:57 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a169d0-6205-7512-9a68-d2c2bc5ff8d1/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/btcaurafov5.digital - Certificate Transparency search: https://crt.sh/?q=%25.btcaurafov5.digital - Web Archive lookup: https://web.archive.org/web/*/https://btcaurafov5.digital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a169d0-6205-7512-9a68-d2c2bc5ff8d1.png Captured: 2026-10-23 17:32:27 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a169d0-6205-7512-9a68-d2c2bc5ff8d1.png Captured: 2026-10-23 17:32:27 UTC Source report: https://urlscan.io/result/01a169d0-6205-7512-9a68-d2c2bc5ff8d1/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ba8ee209-c119-4021-a058-cb66bfb40d94.png Captured: 2026-10-23 17:33:09 UTC Source report: https://radar.cloudflare.com/scan/ba8ee209-c119-4021-a058-cb66bfb40d94 SHA-256: 17bd0186f6272be42a48b03a5aefafc213abafd34b0bebfc91d0d6ec9ac13651 - URLQuery: https://screenshots.phishdestroy.io/uq/3bf451ae-c269-474c-8033-0b3cadd99260.png Source report: https://urlquery.net/report/3bf451ae-c269-474c-8033-0b3cadd99260 SHA-256: a07482c495014d2aeac559ff0718494c9c054e0e8121c6d3ee2b7fbbc878ad81 - URLScan ยท 2026-10-23: https://screenshots.phishdestroy.io/us/01a169b9-884f-73fb-83e6-0608c2008083.png Captured: 2026-10-23 17:05:39 UTC Source report: https://urlscan.io/result/01a169b9-884f-73fb-83e6-0608c2008083/ SHA-256: 1ef5c7ace27bbd56aa62c59c8180ae28c275cce77d50cf212d8ec61991440fb3 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T17:33:25Z", "uuid": "01a169d0-6205-7512-9a68-d2c2bc5ff8d1", "scanned_at": "2026-10-23T17:30:39Z", "final_url": "https://btcaurafov5.digital/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://btcaurafov5.digital/", "from": "http://btcaurafov5.digital/", "status": 307 } ], "ip": "172.67.141.29", "domains": [ "challenges.cloudflare.com", "fonts.googleapis.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "cdn.jsdelivr.net", "static.cloudflareinsights.com", "static.cloudflare.com" ], "ips": [ "104.18.95.41", "142.250.195.131", "104.18.94.41", "104.17.208.5", "172.217.25.170", "104.17.25.14", "172.67.141.29" ], "asns": [ "13335", "15169" ], "countries": [ "US" ], "doc_hash": "5be8e236b4ba0c65973043219d4237ee20a5fce4ac0f290d5deda8082f7516bc", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_ajks0", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "btcaurafov5.digital" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "btcaurafov5.digital", "protocol": "QUIC", "valid_to": "2027-01-08T14:42:32Z", "valid_from": "2026-10-10T13:42:35Z" }, "domain_age_days": 131, "apex_age_days": 131, "tls_age_days": 13, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; img-src 'self' data: blob:; default-src 'self'; frame-src http", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T17:33:35Z", "uuid": "ba8ee209-c119-4021-a058-cb66bfb40d94", "scanned_at": "2026-10-23T17:33:09Z", "final_url": "https://btcaurafov5.digital/", "status": 200, "history": [ { "url": "https://btcaurafov5.digital/", "status": 200 } ], "dom_hash": "1a15595a1cb87b52d3c045e499f955a3bb477f9bd738596df186af1af3d63df2", "doc_hash": "8d74ce421298821835e60a843a317d8fc13e7a2b7af8cdd12cccb32dd28dacff", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "btcaurafov5.digital", "type": "A", "value": "188.114.97.0" }, { "name": "btcaurafov5.digital", "type": "A", "value": "188.114.96.0" }, { "name": "btcaurafov5.digital", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "btcaurafov5.digital", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "188.114.97.0", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T20:37:46Z", "analysis_at": "2026-10-22T16:06:03Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 1, "suspicious": 0, "undetected": 36 }, "detections": { "SOCRadar": "phishing" }, "reputation": 0, "tags": [ "dga" ], "first_seen": "2026-06-14T09:44:27Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::6815:2eb3" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "anna.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.46.179" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:8d1d" }, { "ttl": 21600, "type": "NS", "value": "anna.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "drew.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.141.29" } ], "dns_at": "2026-10-22T16:11:33Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "btcaurafov5.digital" ], "issuer": "Google Trust Services / WE1", "serial": "40cf55cd20045a230e9cfe0e21c744b6", "sha256": "878c6bea718b0cab5dfba72265506e5aeac6de01749f45107f6a90e26852df31", "subject": "btcaurafov5.digital", "valid_to": "2027-01-08T14:42:32Z", "valid_from": "2026-10-10T13:42:35Z" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-08-22T03:37:41Z", "registration": "2026-06-14T08:59:57Z", "registrar expiration": "2027-06-14T08:59:57Z", "last update of RDAP database": "2026-10-15T21:17:29Z" }, "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T17:33:49Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "btcaurafov5.digital" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*", "Amazonbot", "Applebot-Extended", "Bytespider", "CCBot" ], "present": true, "sitemaps": [ "https://btcaurafov5.digital/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "title": "BTC Aurafo V5 | a premium AI trading | Official Website", "robots": "index, follow", "description": "BTC Aurafo V5 delivers premier AI-assisted automation for execution pipelines, risk governance, and intelligent tooling crafted around automated trading systems.", "canonicalUrl": "https://btcaurafov5.digital/" }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 6 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 46, "wait": 115, "connect": 10, "download": 16 }, "response_ms": 189 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 147554, "co2_grams": 0.0054, "cleaner_than": 14 }, "dns_server": { "ns": [ { "ip": "108.162.192.102", "host": "anna.ns.cloudflare.com" }, { "ip": "108.162.193.160", "host": "drew.ns.cloudflare.com" } ], "zone": "btcaurafov5.digital" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3120::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "btcaurafov5.digital" }, "dns": { "A": [ "188.114.97.3", "188.114.96.3" ], "NS": [ "anna.ns.cloudflare.com", "drew.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"anna.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418085483, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::3", "2a06:98c1:3120::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=15552000; includeSubDomains; preload", "message": "HSTS max-age is 15552000, below the 31536000 minimum." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenge", "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::3", "family": 6 }, "redirects": { "chain": [ "https://btcaurafov5.digital" ] }, "linked_pages": { "internal_count": 39 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; img-src 'self' data: blob:; default-src 'self'; frame-src https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.co", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```