# PhishDestroy domain threat record: btcbrondexv242.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/btcbrondexv242.com/ Machine-readable companion: https://phishdestroy.io/domain/btcbrondexv242.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 17:10:22 UTC - Last availability or vendor check: 2026-10-23 17:10:22 UTC - Stored record updated: 2026-10-23 18:30:16 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date (registry RDAP, btcbrondexv242.com): 2026-05-20 15:09:26 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a169bc-3bc6-742a-b51a-184f467b563f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/btcbrondexv242.com - Certificate Transparency search: https://crt.sh/?q=%25.btcbrondexv242.com - Web Archive lookup: https://web.archive.org/web/*/https://btcbrondexv242.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed btcbrondexv242.com as a suspicious domain based on its trusted‑auto rule, which accepted the report on 2026-10-23. The recorded page title reads "Frictionless Integration & Intelligent Insights | BTC‑Brondex v24.2" and an HTTP 200 response was observed on the same date. How the scam works Domains that present themselves as crypto‑trading services often use professional‑looking branding to lure visitors into providing credentials, installing software, or interacting with fake interfaces. The listing does not confirm any specific technique on this site, only that the observed indicators match common patterns of suspicious financial‑related domains. Evidence VirusTotal scanned the domain on 2026-10-21 and reported 16 detections across 92 engines, including 13 malicious and 3 suspicious labels from vendors such as BitDefender, ESET, Fortinet and G‑Data. Google Safe Browsing checked on 2026-10-23 and did not flag the URL. OTX listed five pulses referencing the domain as of 2026-10-23, and Cloudflare Radar on 2026-10-23 marked the site as malicious with a malware category; urlscan.io recorded a malicious engine score of 98 on the same day while its overall verdict was non‑malicious. Infrastructure The domain was registered with Dynadot Inc on 2026-05-20, giving it an age of 156 days at first sighting. The recorded IP was 158.94.210.119, which was associated with Omegatech LTD in the Netherlands, and the TLS 1.3 certificate from Let’s Encrypt was valid from 2026-09-01 to 2026-11-30. Open ports observed included 22, 80 and 443, and DNS records listed standard A and NS entries. What to do Visitors should avoid entering any credentials, downloading files, or approving wallet actions on this site; if any information was submitted, change associated passwords immediately and monitor accounts for suspicious activity. Organizations can block the exact domain at the firewall and add it to threat‑intelligence feeds to prevent internal access. Security teams should review logs for connections to 158.94.210.119 and investigate any related alerts. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a169bc-3bc6-742a-b51a-184f467b563f/ Cloudflare Radar report: https://radar.cloudflare.com/scan/f8bb53dc-beb1-419d-980e-c55488b69ba0 URLQuery report: https://urlquery.net/report/97351607-8e49-4bb7-b79f-3bf74eca0970 Stored capture screenshot: https://i.ibb.co/hFW5tnzJ/03b22578dfd9.png Cloudflare Radar screenshot (2026-10-23T17:44:08Z): https://screenshots.phishdestroy.io/cf/f8bb53dc-beb1-419d-980e-c55488b69ba0.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/97351607-8e49-4bb7-b79f-3bf74eca0970.png VirusTotal report: https://www.virustotal.com/gui/domain/btcbrondexv242.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=btcbrondexv242.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 17:46:22 UTC ## Stored page captures - Primary capture: https://i.ibb.co/hFW5tnzJ/03b22578dfd9.png Captured: 2026-10-23 17:10:22 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a169bc-3bc6-742a-b51a-184f467b563f.png Captured: 2026-10-23 17:10:22 UTC Source report: https://urlscan.io/result/01a169bc-3bc6-742a-b51a-184f467b563f/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f8bb53dc-beb1-419d-980e-c55488b69ba0.png Captured: 2026-10-23 17:44:08 UTC Source report: https://radar.cloudflare.com/scan/f8bb53dc-beb1-419d-980e-c55488b69ba0 SHA-256: e9772c83e988d192c0388d06896715e33e2f51e9b61d2ef0009d8a41011d2e74 - URLQuery: https://screenshots.phishdestroy.io/uq/97351607-8e49-4bb7-b79f-3bf74eca0970.png Source report: https://urlquery.net/report/97351607-8e49-4bb7-b79f-3bf74eca0970 SHA-256: aeb897600b35ceaa41409c2f471140fcdbd8bc0e9824bc36c6f1c73663c0055f ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T17:45:19Z", "uuid": "01a169bc-3bc6-742a-b51a-184f467b563f", "scanned_at": "2026-10-23T17:08:34Z", "final_url": "https://btcbrondexv242.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://btcbrondexv242.com/", "from": "http://btcbrondexv242.com/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "8786e91a55ece71e6da1298de35055ce261bcf2c35275a600f59b9ed7cadff6b", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput", "navToggle", "navWrapper", "langToggle", "langDropdown" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "btcbrondexv242.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "btcbrondexv242.com", "protocol": "TLS 1.3", "valid_to": "2026-11-30T02:44:53Z", "valid_from": "2026-09-01T02:44:54Z" }, "domain_age_days": 156, "apex_age_days": 156, "tls_age_days": 52, "tls_valid_days": 89, "requests": 8, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T17:45:20Z", "uuid": "f8bb53dc-beb1-419d-980e-c55488b69ba0", "scanned_at": "2026-10-23T17:44:08Z", "final_url": "https://btcbrondexv242.com/", "status": 200, "history": [ { "url": "https://btcbrondexv242.com/", "status": 200 } ], "dom_hash": "1864966199160ca02675f275f8e81d1dc718d12d4ed2fdd424b194bd46171020", "doc_hash": "f386221ef55ec81753564ca3b52a3eae118977f5faa23a811c7d704021b3b023", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "Scam", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "btcbrondexv242.com", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-05-20T15:09:26Z", "updated": "2026-08-13T12:43:31Z", "expires": "2027-05-20T15:09:26Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T17:43:47Z", "analysis_at": "2026-10-21T12:05:23Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 13, "suspicious": 3, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "malware", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "registrar": "Dynadot Inc", "created": "2026-05-20T15:09:26Z", "expires": "2027-05-20T15:09:26Z", "updated": "2026-08-13T12:43:31Z", "first_seen": "2026-05-20T15:28:57Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.btcbrondexv242.com", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-21T12:10:47Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "btcbrondexv242.com" ], "issuer": "Let's Encrypt / YE2", "serial": "623b3ec4e70269f3bdb6ae5873b34910a62", "sha256": "f3b9e95885b7af41477bb4b115d1f8f98640f16da2cd386282d0a85778659bb7", "subject": "btcbrondexv242.com", "valid_to": "2026-11-30T02:44:53Z", "valid_from": "2026-09-01T02:44:54Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-05-20T15:09:26Z", "updated": "2026-08-13T12:43:31Z", "expires": "2027-05-20T15:09:26Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-05-20T15:09:26Z", "last changed": "2026-09-01T01:06:07Z", "registration": "2026-05-20T15:09:26Z", "registrar expiration": "2027-05-20T15:09:26Z", "last update of RDAP database": "2026-10-16T07:08:23Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T17:45:34Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "btcbrondexv242.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T17:12:14Z", "first": "2026-10-23T17:12:14Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 23038 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://btcbrondexv242.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Frictionless Integration & Intelligent Insights | BTC-Brondex v24.2", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "For ambitious teams seeking seamless global operations: BTC-Brondex v24.2 offers an AI-powered trading platform built for borderless growth, smarter decisions, and continuous evolution.", "canonicalUrl": "https://btcbrondexv242.com/" }, "trackers": { "requests": 28, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 4 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 318, "tls": 75, "wait": 87, "connect": 66, "download": 145 }, "response_ms": 691 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 86032, "co2_grams": 0.0031, "cleaner_than": 25 }, "dns_server": { "ns": [ { "ip": "162.159.24.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.26.92", "host": "ns1.dyna-ns.net" } ], "zone": "btcbrondexv242.com" }, "cookies": { "cookies": [ { "name": "cf-c", "http_only": true, "same_site": "Lax" }, { "name": "__cf_clicked" }, { "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "btcbrondexv242.com" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.btcbrondexv242.com\", \"serial\": 2026083101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://btcbrondexv242.com" ] }, "linked_pages": { "internal_count": 29 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-05-20T15:09:26Z", "updated": "2026-08-13T12:43:31Z", "expires": "2027-05-20T15:09:26Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```