# PhishDestroy domain threat record: btcpurelogbtccentrix.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/btcpurelogbtccentrix.com/ Machine-readable companion: https://phishdestroy.io/domain/btcpurelogbtccentrix.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 17:18:55 UTC - Last availability or vendor check: 2026-10-23 17:18:55 UTC - Stored record updated: 2026-10-23 18:30:16 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-06-12 20:25:55 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a169c3-fe06-7283-a623-8597f4fc7126/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/btcpurelogbtccentrix.com - Certificate Transparency search: https://crt.sh/?q=%25.btcpurelogbtccentrix.com - Web Archive lookup: https://web.archive.org/web/*/https://btcpurelogbtccentrix.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed btcpurelogbtccentrix.com as a suspicious domain based on automated risk scoring and external detections. The recorded page title was “BTC-PureLog / BTC-Centrix: Algorithmic Trading Platform”. The domain was first seen by PhishDestroy on 2026-10-23 and returned an HTTP 200 response on that date. The recorded title, HTTP status and TLS certificate are historical observations and do not prove current availability. How the scam works No specific malicious mechanism was observed on the page, but the combination of malware, phishing and scam tags suggests the site could be used to lure visitors into providing credentials, financial details, or to download malicious payloads. Fake‑exchange pages often promise high‑frequency trading or AI‑driven profits to induce deposits, but without concrete evidence we cannot confirm that behavior here. Evidence VirusTotal scanned the domain on 2026-10-19 and reported 15 detections from 92 engines, including malicious labels from alphaMountain.ai and BitDefender and phishing or suspicious tags from several vendors. Google Safe Browsing checked on 2026-10-23 and did not flag the URL. OTX listed four pulses referencing the domain as of 2026-10-23. PhishDestroy’s internal blocklist marked the domain as blocked on 2026-10-23. Urlscan.io captured the site on 2026-10-23, where its engine verdict scored it malicious with a 99 % confidence score, while its overall community verdict was non‑malicious. Cloudflare Radar also flagged the URL as malicious with a malware category on the same day. Infrastructure The domain was registered with Dynadot Inc on 2026-06-12, giving it an age of 132 days at the time of observation. It was recorded to resolve to IP 158.94.210.119, which was listed as belonging to Omegatech LTD in the Netherlands. The site used a Let's Encrypt TLS certificate valid from 2026-08-28 to 2026-11-26 and responded on ports 22, 80 and 443. What to do Visitors should avoid entering any login credentials, personal data or financial information on this site and should change passwords if they suspect they may have been entered. Organizations should block the domain at the firewall, monitor DNS logs for queries to btcpurelogbtccentrix.com, and treat any related traffic as potentially malicious. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a169c3-fe06-7283-a623-8597f4fc7126/ Cloudflare Radar report: https://radar.cloudflare.com/scan/b505196a-dec1-488b-a92a-21cb34250d63 URLQuery report: https://urlquery.net/report/58d12c7b-69a4-4b15-bc30-68231192968f Stored capture screenshot: https://urlscan.io/screenshots/01a169c3-fe06-7283-a623-8597f4fc7126.png Cloudflare Radar screenshot (2026-10-23T17:53:22Z): https://screenshots.phishdestroy.io/cf/b505196a-dec1-488b-a92a-21cb34250d63.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/58d12c7b-69a4-4b15-bc30-68231192968f.png URLScan screenshot (2026-08-30T03:30:40Z): https://screenshots.phishdestroy.io/us/01a050b8-096e-71f4-8747-2088cd85ff23.png URLScan capture report: https://urlscan.io/result/01a050b8-096e-71f4-8747-2088cd85ff23/ URLScan screenshot (2026-08-30T10:32:47Z): https://screenshots.phishdestroy.io/us/01a0523a-7e0e-7555-971f-2f7a6f0552f4.png URLScan capture report: https://urlscan.io/result/01a0523a-7e0e-7555-971f-2f7a6f0552f4/ URLScan screenshot (2026-08-31T11:39:43Z): https://screenshots.phishdestroy.io/us/01a0579e-2499-72b8-ac1e-f4f36cb06c0a.png URLScan capture report: https://urlscan.io/result/01a0579e-2499-72b8-ac1e-f4f36cb06c0a/ URLScan screenshot (2026-10-23T17:25:42Z): https://screenshots.phishdestroy.io/us/01a169cb-efdc-741a-9422-e8acbab99727.png URLScan capture report: https://urlscan.io/result/01a169cb-efdc-741a-9422-e8acbab99727/ VirusTotal report: https://www.virustotal.com/gui/domain/btcpurelogbtccentrix.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=btcpurelogbtccentrix.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 17:56:07 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a169c3-fe06-7283-a623-8597f4fc7126.png Captured: 2026-10-23 17:18:55 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a169c3-fe06-7283-a623-8597f4fc7126.png Captured: 2026-10-23 17:18:55 UTC Source report: https://urlscan.io/result/01a169c3-fe06-7283-a623-8597f4fc7126/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b505196a-dec1-488b-a92a-21cb34250d63.png Captured: 2026-10-23 17:53:22 UTC Source report: https://radar.cloudflare.com/scan/b505196a-dec1-488b-a92a-21cb34250d63 SHA-256: 61824f8bea21317137bd4cafad86149b755791442b0f9f04390c1311e8846b50 - URLQuery: https://screenshots.phishdestroy.io/uq/58d12c7b-69a4-4b15-bc30-68231192968f.png Source report: https://urlquery.net/report/58d12c7b-69a4-4b15-bc30-68231192968f SHA-256: 1cbc028572c2dd41b98ba6aa97772a35483b52452001067c194be6d4e315d81b - URLScan · 2026-08-30: https://screenshots.phishdestroy.io/us/01a050b8-096e-71f4-8747-2088cd85ff23.png Captured: 2026-08-30 03:30:40 UTC Source report: https://urlscan.io/result/01a050b8-096e-71f4-8747-2088cd85ff23/ SHA-256: 20b277391219bbc0d4a452697b0eeed72ee46a7289612da3b9bce29dfaed316b - URLScan · 2026-08-30: https://screenshots.phishdestroy.io/us/01a0523a-7e0e-7555-971f-2f7a6f0552f4.png Captured: 2026-08-30 10:32:47 UTC Source report: https://urlscan.io/result/01a0523a-7e0e-7555-971f-2f7a6f0552f4/ SHA-256: 3c7358a5ed59630123789ce279ff57fe28566b5a24e9c9cc3dda3aefea5d5cc9 - URLScan · 2026-08-31: https://screenshots.phishdestroy.io/us/01a0579e-2499-72b8-ac1e-f4f36cb06c0a.png Captured: 2026-08-31 11:39:43 UTC Source report: https://urlscan.io/result/01a0579e-2499-72b8-ac1e-f4f36cb06c0a/ SHA-256: 3c7358a5ed59630123789ce279ff57fe28566b5a24e9c9cc3dda3aefea5d5cc9 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a169cb-efdc-741a-9422-e8acbab99727.png Captured: 2026-10-23 17:25:42 UTC Source report: https://urlscan.io/result/01a169cb-efdc-741a-9422-e8acbab99727/ SHA-256: 65a24e440b293a8c4094a39c37c70b966ff017facb047245264acafa84ae827e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T17:55:13Z", "uuid": "01a169c3-fe06-7283-a623-8597f4fc7126", "scanned_at": "2026-10-23T17:17:00Z", "final_url": "https://btcpurelogbtccentrix.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://btcpurelogbtccentrix.com/", "from": "http://btcpurelogbtccentrix.com/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "5eeb2924731c00d7194a98778e8057e6308d56e1b12f7b5ab44a0e3662e41642", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "handleResize", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput", "navToggle", "navWrapper", "mobileLangGrid", "langToggle", "langDropdown" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "btcpurelogbtccentrix.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "btcpurelogbtccentrix.com", "protocol": "TLS 1.3", "valid_to": "2026-11-26T12:55:50Z", "valid_from": "2026-08-28T12:55:51Z" }, "domain_age_days": 132, "apex_age_days": 132, "tls_age_days": 56, "tls_valid_days": 89, "requests": 5, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T17:55:16Z", "uuid": "b505196a-dec1-488b-a92a-21cb34250d63", "scanned_at": "2026-10-23T17:53:22Z", "final_url": "https://btcpurelogbtccentrix.com/", "status": 200, "history": [ { "url": "https://btcpurelogbtccentrix.com/", "status": 200 } ], "dom_hash": "21e0b1417b46b239e1bb4ea336569f9b959ede0a756861626b29cae66f95d6eb", "doc_hash": "3d60202e97464bc5fc911c51f147b53845ac0d59565668c1b701a324ac92f58e", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Scam", "Security threats", "Malware", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "btcpurelogbtccentrix.com", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-06-12T22:25:55Z", "updated": "2026-08-13T12:24:43Z", "expires": "2027-06-12T22:25:55Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T17:52:43Z", "analysis_at": "2026-10-19T15:46:26Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 11, "suspicious": 4, "undetected": 33 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Fortinet": "spam", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "registrar": "Dynadot Inc", "created": "2026-06-12T22:25:55Z", "expires": "2027-06-12T22:25:55Z", "updated": "2026-08-13T12:24:43Z", "first_seen": "2026-06-12T23:08:45Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.btcpurelogbtccentrix.com", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-19T15:51:43Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "btcpurelogbtccentrix.com" ], "issuer": "Let's Encrypt / YE1", "serial": "6a28f3bbf44ab1c84a4cbdf4931bee1332f", "sha256": "cc9869a6af72874bd0822fd85914583bc1cff16e5723b2d20e1213e8c8ee0f4a", "subject": "btcpurelogbtccentrix.com", "valid_to": "2026-11-26T12:55:50Z", "valid_from": "2026-08-28T12:55:51Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-06-12T22:25:55Z", "updated": "2026-08-13T12:24:43Z", "expires": "2027-06-12T22:25:55Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-12T22:25:55Z", "last changed": "2026-08-28T08:24:18Z", "registration": "2026-06-12T22:25:55Z", "registrar expiration": "2027-06-12T22:25:55Z", "last update of RDAP database": "2026-10-16T07:15:19Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T17:55:31Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "btcpurelogbtccentrix.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T17:19:14Z", "first": "2026-10-12T05:36:16Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.09, "avg_page_bytes": 19177 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://btcpurelogbtccentrix.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "BTC-PureLog / BTC-Centrix: Algorithmic Trading Platform", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Execute trades with institutional-grade precision. BTC-PureLog / BTC-Centrix delivers an AI-powered trading system across 194+ global markets with empirically validated, real-time performance.", "canonicalUrl": "https://btcpurelogbtccentrix.com/" }, "trackers": { "requests": 55, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 4 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 533, "tls": 76, "wait": 141, "connect": 66, "download": 196 }, "response_ms": 1012 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 104328, "co2_grams": 0.0038, "cleaner_than": 21 }, "dns_server": { "ns": [ { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.26.92", "host": "ns1.dyna-ns.net" } ], "zone": "btcpurelogbtccentrix.com" }, "cookies": { "cookies": [ { "name": "cf-c", "http_only": true, "same_site": "Lax" }, { "name": "__cf_clicked" }, { "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "btcpurelogbtccentrix.com" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.btcpurelogbtccentrix.com\", \"serial\": 2026082801, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://btcpurelogbtccentrix.com" ] }, "subdomains": { "count": 1, "subdomains": [ "www.btcpurelogbtccentrix.com" ] }, "linked_pages": { "internal_count": 31 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-06-12T22:25:55Z", "updated": "2026-08-13T12:24:43Z", "expires": "2027-06-12T22:25:55Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```