# PhishDestroy domain threat record: btcsaldorio920.shop Content language: English Canonical HTML report: https://phishdestroy.io/domain/btcsaldorio920.shop/ Machine-readable companion: https://phishdestroy.io/domain/btcsaldorio920.shop/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 17:37:03 UTC - Last availability or vendor check: 2026-10-23 17:37:03 UTC - Stored record updated: 2026-10-23 18:30:15 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.57.28 - Registrar in stored WHOIS data: Dynadot Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-04 09:48:23 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a169d4-9368-77b8-85c5-58c99c3673fd/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/btcsaldorio920.shop - Certificate Transparency search: https://crt.sh/?q=%25.btcsaldorio920.shop - Web Archive lookup: https://web.archive.org/web/*/https://btcsaldorio920.shop/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added btcsaldorio920.shop to its internal blocklist on 2026-10-23 after an intake marked it as a trusted report. The recorded page title is “BTC Saldorio 920 | AI Trading Platform | Official Website”. On the same day the site responded with HTTP 200. No external blocklists reported the domain as malicious at the time of checking. How the scam works The available detections do not confirm a specific fraud technique; they only indicate that the domain is considered suspicious by multiple security engines. Such domains are often used for phishing, fake‑exchange offers, or credential harvesting, but no concrete behavior was observed on this page to attribute a particular scheme. Evidence VirusTotal scanned the domain on 2026-10-19 and again on 2026-10-23, reporting 16 detections from 92 engines – 13 malicious and 3 suspicious, including vendors BitDefender, ESET, Fortinet and others. Google Safe Browsing checked on 2026-10-23 and did not flag the site. OTX listed five pulses as of 2026-10-23. Cloudflare Radar flagged the domain as phishing and malware on 2026-10-23. urlscan.io recorded a malicious engine score of 99 on 2026-10-23, though its overall verdict was non‑malicious. PhishDestroy’s internal list marks the domain as blocked, while external blocklists showed zero hits on the same date. Infrastructure The domain is 172 days old and uses a TLS certificate issued by ZeroSSL on 2026-09-19, valid until 2026-12-18. The recorded IP was 185.62.57.28, which was associated with Snel.com B.V. in the Netherlands and was fronted by Cloudflare DNS (adele.ns.cloudflare.com, felipe.ns.cloudflare.com). DNSSEC was not enabled. What to do Do not submit login credentials, private keys, or cryptocurrency information to this site. If any credentials were entered, change them immediately and monitor associated accounts for unauthorized activity. Network defenders should block traffic to btcsaldorio920.shop and review logs for any connections to the recorded IP address. Continue to monitor the domain for changes in its security posture. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a169d4-9368-77b8-85c5-58c99c3673fd/ Cloudflare Radar report: https://radar.cloudflare.com/scan/fbee138f-f200-4c9c-bad5-e14073db1cc8 URLQuery report: https://urlquery.net/report/67452d4b-0fac-46a2-98dd-a1859e34ba37 Stored capture screenshot: https://urlscan.io/screenshots/01a169d4-9368-77b8-85c5-58c99c3673fd.png Cloudflare Radar screenshot (2026-10-23T18:14:11Z): https://screenshots.phishdestroy.io/cf/fbee138f-f200-4c9c-bad5-e14073db1cc8.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/67452d4b-0fac-46a2-98dd-a1859e34ba37.png URLScan screenshot (2026-10-23T17:18:29Z): https://screenshots.phishdestroy.io/us/01a169c5-4549-709f-ab78-786088c17488.png URLScan capture report: https://urlscan.io/result/01a169c5-4549-709f-ab78-786088c17488/ URLScan screenshot (2026-10-23T17:24:10Z): https://screenshots.phishdestroy.io/us/01a169ca-7907-7013-96c5-275b7ca9acb0.png URLScan capture report: https://urlscan.io/result/01a169ca-7907-7013-96c5-275b7ca9acb0/ VirusTotal report: https://www.virustotal.com/gui/domain/btcsaldorio920.shop Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=btcsaldorio920.shop Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 18:16:17 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a169d4-9368-77b8-85c5-58c99c3673fd.png Captured: 2026-10-23 17:37:03 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a169d4-9368-77b8-85c5-58c99c3673fd.png Captured: 2026-10-23 17:37:03 UTC Source report: https://urlscan.io/result/01a169d4-9368-77b8-85c5-58c99c3673fd/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/fbee138f-f200-4c9c-bad5-e14073db1cc8.png Captured: 2026-10-23 18:14:11 UTC Source report: https://radar.cloudflare.com/scan/fbee138f-f200-4c9c-bad5-e14073db1cc8 SHA-256: 5fdd65ee555d14e65be58477cd515a99dabe9c680579edd3ea232002dceabbb2 - URLQuery: https://screenshots.phishdestroy.io/uq/67452d4b-0fac-46a2-98dd-a1859e34ba37.png Source report: https://urlquery.net/report/67452d4b-0fac-46a2-98dd-a1859e34ba37 SHA-256: 80f3aacdb2737b486b9e1448873c2bfb5b7c2cdb942876ac92d28f1db32c9c21 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a169c5-4549-709f-ab78-786088c17488.png Captured: 2026-10-23 17:18:29 UTC Source report: https://urlscan.io/result/01a169c5-4549-709f-ab78-786088c17488/ SHA-256: d514ee20dd10b2b039761eeb348b62a479912bac51965e2194ba1a279a8edd94 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a169ca-7907-7013-96c5-275b7ca9acb0.png Captured: 2026-10-23 17:24:10 UTC Source report: https://urlscan.io/result/01a169ca-7907-7013-96c5-275b7ca9acb0/ SHA-256: 4025cf712b0052fa4f98423ce3f5bf9674037a3958afb4c1eee7e5e2d7085559 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T18:04:08Z", "uuid": "01a169d4-9368-77b8-85c5-58c99c3673fd", "scanned_at": "2026-10-23T17:35:14Z", "final_url": "https://btcsaldorio920.shop/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://btcsaldorio920.shop/", "from": "http://btcsaldorio920.shop/", "status": 307 } ], "ip": "185.62.57.28", "ptr": "static-28-57-62-185.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.18.95.41", "104.16.124.96", "142.251.222.227", "104.17.208.5", "104.17.25.14", "142.250.195.234", "185.62.57.28" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "59da96e8d2ded21c694e2b2c8329b3b8337595ec32575c03928dc4e3918fc2ef", "script_hashes": [ "7d944ddaa86b97a8db143f6459cb2330169d5c6ecf9d96121bee62b669d30ccd" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "btcsaldorio920.shop" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "btcsaldorio920.shop", "protocol": "TLS 1.3", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "domain_age_days": 172, "apex_age_days": 172, "tls_age_days": 34, "tls_valid_days": 90, "requests": 26, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T18:14:50Z", "uuid": "fbee138f-f200-4c9c-bad5-e14073db1cc8", "scanned_at": "2026-10-23T18:14:11Z", "final_url": "https://btcsaldorio920.shop/", "status": 200, "history": [ { "url": "https://btcsaldorio920.shop/", "status": 200 } ], "dom_hash": "6c64a9453197dfe2e38da44df975c469da686f34841c7dda23a6cbee9b55ad7f", "doc_hash": "59da96e8d2ded21c694e2b2c8329b3b8337595ec32575c03928dc4e3918fc2ef", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "btcsaldorio920.shop", "type": "A", "value": "185.62.57.28" } ], "dnssec_valid": false, "ip": "185.62.57.28", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T18:13:49Z", "analysis_at": "2026-10-19T11:00:46Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "categories": { "alphaMountain.ai": "Information Technology, Phishing (alphaMountain.ai)" }, "first_seen": "2026-05-04T13:00:18Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "adele.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "adele.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "felipe.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.28" } ], "dns_at": "2026-10-19T11:06:07Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "btcsaldorio920.shop" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "a9200729134ae1e1ba39b3a5eb314b9b", "sha256": "3646175536275abbb204d70d2b030462de94f218516f3c2458aab2e0a0ebfba5", "subject": "btcsaldorio920.shop", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T18:15:21Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "btcsaldorio920.shop" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T17:40:27Z", "first": "2026-10-23T17:40:27Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 13293 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://btcsaldorio920.shop/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://btcsaldorio920.shop/", "title": "BTC Saldorio 920 | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "BTC Saldorio 920 | AI Trading Automation & Bot Controls", "ogSiteName": "BTC Saldorio 920", "themeColor": "#0d1118", "description": "BTC Saldorio 920 delivers premium automation for trading workflows, featuring AI-guided trading insights, bot orchestration, and enterprise-grade tools for precise execution.", "twitterCard": "summary", "canonicalUrl": "https://btcsaldorio920.shop/", "ogDescription": "BTC Saldorio 920 delivers premium automation for trading workflows, featuring AI-guided trading insights, bot orchestration, and enterprise-grade tools for precise execution." }, "trackers": { "requests": 24, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 45, "tls": 23, "wait": 18, "connect": 20, "download": 51 }, "response_ms": 157 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 47384, "co2_grams": 0.0017, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "108.162.195.116", "host": "felipe.ns.cloudflare.com" }, { "ip": "108.162.194.156", "host": "adele.ns.cloudflare.com" } ], "zone": "btcsaldorio920.shop" }, "location": { "ip": "185.62.57.28", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "btcsaldorio920.shop" }, "dns": { "A": [ "185.62.57.28" ], "NS": [ "felipe.ns.cloudflare.com", "adele.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"adele.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415117582, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.28", "family": 4 }, "redirects": { "chain": [ "https://btcsaldorio920.shop" ] }, "linked_pages": { "internal_count": 11 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```