# PhishDestroy domain threat record: gatebtc-xau.xyz

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gatebtc-xau.xyz/
Machine-readable companion: https://phishdestroy.io/domain/gatebtc-xau.xyz/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 16:38:34 UTC
- Last availability or vendor check: 2026-10-28 12:13:24 UTC
- Stored record updated: 2026-10-28 12:13:24 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: GLOBAL ASSET DOMAINS INC
- Registrar country in stored WHOIS data: HK,CN
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-14 06:57:03 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17e4a-b7ee-762e-9bd8-14f0307da9bb/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gatebtc-xau.xyz
- Certificate Transparency search: https://crt.sh/?q=%25.gatebtc-xau.xyz
- Web Archive lookup: https://web.archive.org/web/*/https://gatebtc-xau.xyz/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the site as malicious because it presents itself as a trusted trading platform called GateBTC‑XAU, a pattern typical of fraudulent investment schemes. The recorded page title reads “GateBTC‑XAUGateBTC‑XAU: Your trusted trading platform,” reinforcing that claim. PhishDestroy first observed the domain on 2026-10-27 and recorded an HTTP 200 response at that time.

How the scam works
Fake crypto trading sites mimic legitimate exchanges, display professional branding, and lure visitors into depositing funds or granting wallet access. Once victims transfer assets or approve transactions, the operators disappear with the funds, leaving no recourse for recovery.

Evidence
VirusTotal reported one suspicious detection from 92 engines, with Forcepoint ThreatSeeker labeling the domain as spam on 2026-10-27. Google Safe Browsing did not flag the site on the same date. Two urlscan captures show a clean overall verdict on 2026-10-26 and a high‑score malicious engine flag (score 99) on 2026-10-27, though the overall verdict remained non‑malicious. External blocklists MetaMask and SEAL listed the domain, OTX recorded two pulses referencing it, and PhishDestroy’s internal blocklist also contains the domain.

Infrastructure
The domain was registered with GLOBAL ASSET DOMAINS INC on 2026-07-14, giving it an age of 105 days at first sighting. Hosting records show the site resolved to 188.114.96.3 and used Cloudflare’s CDN, with a TLS certificate issued by Google Trust Services valid until 2026-12-10. Network observations list ASNs 45102 and 13335, and the recorded IP location was London, GB.

What to do
Do not enter credentials, wallet keys, or funds on this site; if any were submitted, change associated passwords and monitor accounts for unauthorized activity. Users should report the domain to their wallet providers and remain vigilant for suspicious transactions. Defenders should block gatebtc-xau.xyz at DNS or proxy level, log any connections to the recorded IPs, and add the domain to internal blocklists to prevent future access.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17e4a-b7ee-762e-9bd8-14f0307da9bb/
Cloudflare Radar report: https://radar.cloudflare.com/scan/a10cac2f-85f8-40ac-905e-8e8cacf99047
Stored capture screenshot: https://i.ibb.co/szJsczW/005da9aefacd.png
Cloudflare Radar screenshot (2026-10-27T16:42:57Z): https://screenshots.phishdestroy.io/cf/a10cac2f-85f8-40ac-905e-8e8cacf99047.png
VirusTotal report: https://www.virustotal.com/gui/domain/gatebtc-xau.xyz
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gatebtc-xau.xyz
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 17:18:37 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/szJsczW/005da9aefacd.png
  Captured: 2026-10-27 16:57:11 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a17e4a-b7ee-762e-9bd8-14f0307da9bb.png
  Captured: 2026-10-27 16:57:11 UTC
  Source report: https://urlscan.io/result/01a17e4a-b7ee-762e-9bd8-14f0307da9bb/
- URLScan capture 2: https://screenshots.phishdestroy.io/01a179d6-478f-732a-852f-df1c55bfd654.png
  Captured: 2026-10-27 16:38:34 UTC
  Source report: https://urlscan.io/result/01a17e4a-b7ee-762e-9bd8-14f0307da9bb/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a10cac2f-85f8-40ac-905e-8e8cacf99047.png
  Captured: 2026-10-27 16:42:57 UTC
  Source report: https://radar.cloudflare.com/scan/a10cac2f-85f8-40ac-905e-8e8cacf99047
  SHA-256: 2e4b1b0036168cf4865724afda30d9905be1e123976867491278ffd01f086ce3

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T17:12:44Z",
        "uuid": "01a17e4a-b7ee-762e-9bd8-14f0307da9bb",
        "scanned_at": "2026-10-27T16:56:37Z",
        "final_url": "https://gatebtc-xau.xyz/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gatebtc-xau.xyz/",
                "from": "http://gatebtc-xau.xyz/",
                "status": 307
            }
        ],
        "ip": "188.114.96.3",
        "domains": [
            "h2703.oss-cn-hongkong.aliyuncs.com"
        ],
        "ips": [
            "47.79.65.170",
            "188.114.96.3"
        ],
        "asns": [
            "45102",
            "13335"
        ],
        "countries": [
            "HK"
        ],
        "doc_hash": "39e04e41bc7708213f7d6adc1ce66faa4e7b84c7dc6f6f43571931e963ed2a82",
        "script_hashes": [
            "49b781ab266ba1449eaface6e88271e06cb278a5960ef6163e52bf3f1fd77e6d",
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142",
            "2bf7914db77b9d66a73989abac63e20ac8b36d4cd6b6723bf7e4414f988cf891",
            "cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151",
            "735746c506f187a982a157594c68ce58b584301ee328dee0d1495793fac809c0",
            "548d9191f8a384b2134d630fbb6aaa56c6f2f1cb7c97ea6f07c63288b57e511b",
            "c6fab06440cf69fe19df461596f88c0d618d98359352848b9e63afde76d23638",
            "17244a554ef776efbf0940ea4976fe2b19936b8617c6f6cc6aacb7718835aa34",
            "c33ee0a8f6b4f3d24ac5ad7ecc608e9dc7223d5380318bd3590d3cedf451c735",
            "e7bc7e8659b0ab2379726b464f0615f9bddf74f419b9eba2210e3ac7c57ce5f1"
        ],
        "globals": [
            "__cfQR",
            "addLink",
            "addMeta",
            "__cfRLUnblockHandlers",
            "TradingView",
            "lib",
            "rem",
            "dpr",
            "__VUE_INSTANCE_SETTERS__",
            "__VUE_SSR_SETTERS__",
            "__INTLIFY_PROD_DEVTOOLS__",
            "__INTLIFY_JIT_COMPILATION__",
            "__INTLIFY_DROP_MESSAGE_COMPILER__",
            "__VUE_I18N_FULL_INSTALL__",
            "__VUE_I18N_LEGACY_API__",
            "setImmediate",
            "clearImmediate",
            "PubSub",
            "__config",
            "__theme",
            "__VUE__",
            "__vite_is_modern_browser"
        ],
        "storage_keys": [
            "alading_THEME",
            "fromPath",
            "main",
            "alading_LANGUAGE"
        ],
        "tls": {
            "san": [
                "gatebtc-xau.xyz",
                "*.gatebtc-xau.xyz"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gatebtc-xau.xyz",
            "protocol": "QUIC",
            "valid_to": "2026-12-10T11:54:57Z",
            "valid_from": "2026-09-11T10:56:19Z"
        },
        "domain_age_days": 105,
        "apex_age_days": 105,
        "tls_age_days": 46,
        "tls_valid_days": 90,
        "requests": 64,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T16:48:37Z",
        "uuid": "a10cac2f-85f8-40ac-905e-8e8cacf99047",
        "scanned_at": "2026-10-27T16:42:57Z",
        "final_url": "https://gatebtc-xau.xyz/",
        "status": 200,
        "history": [
            {
                "url": "https://gatebtc-xau.xyz/",
                "status": 200
            }
        ],
        "dom_hash": "41427f65f81e1be964b5f71cb1c0c0f3af447e5abfe926fac1f770271c4f9d40",
        "doc_hash": "d318b6e0920ea86cf95980e71386f4ebb9eb43fff49a89daed6a9c984b0bf464",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gatebtc-xau.xyz",
                "type": "A",
                "value": "172.67.200.64"
            },
            {
                "name": "gatebtc-xau.xyz",
                "type": "A",
                "value": "104.21.58.47"
            },
            {
                "name": "gatebtc-xau.xyz",
                "type": "AAAA",
                "value": "2606:4700:3034::6815:3a2f"
            },
            {
                "name": "gatebtc-xau.xyz",
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:c840"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.16",
        "whois": {
            "registrar": "GLOBAL ASSET DOMAINS INC.",
            "created": "2026-07-14T08:57:03Z",
            "updated": "2026-07-19T08:57:20Z",
            "expires": "2027-07-14T23:59:59Z",
            "nameservers": [
                "jerome.ns.cloudflare.com",
                "maleah.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T17:14:18Z",
        "analysis_at": "2026-10-12T08:50:28Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 1,
            "undetected": 36
        },
        "detections": {
            "Forcepoint ThreatSeeker": "spam"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "alphaMountain.ai": "Suspicious (alphaMountain.ai)"
        },
        "registrar": "GLOBAL ASSET DOMAINS INC",
        "created": "2026-07-14T08:57:03Z",
        "expires": "2027-07-14T23:59:59Z",
        "updated": "2026-09-08T08:59:56Z",
        "first_seen": "2026-07-14T09:39:34Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.200.64"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jerome.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "maleah.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "jerome.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:c840"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.58.47"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:3a2f"
            }
        ],
        "dns_at": "2026-10-12T09:29:06Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "gatebtc-xau.xyz",
                "*.gatebtc-xau.xyz"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "e838a4ec5b75c8bb132a4a95dd7bea93",
            "sha256": "8a03cc625f49f22b1675f1bf532ce5c2d78a263f4564347c77eb2957d0087875",
            "subject": "gatebtc-xau.xyz",
            "valid_to": "2026-12-10T11:54:57Z",
            "valid_from": "2026-09-11T10:56:19Z"
        },
        "whois": {
            "registrar": "GLOBAL ASSET DOMAINS INC",
            "registrar_iana_id": "4313",
            "registrar_url": "http://www.gadomains.com",
            "created": "2026-07-14T08:57:03Z",
            "updated": "2026-07-19T08:57:20Z",
            "expires": "2027-07-14T23:59:59Z",
            "status": [
                "clientTransferProhibited",
                "serverTransferProhibited"
            ],
            "nameservers": [
                "jerome.ns.cloudflare.com",
                "maleah.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T16:48:58Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gatebtc-xau.xyz"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-27T16:41:00Z",
            "first": "2026-10-27T16:41:00Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 3512
        },
        "social_tags": {
            "ogUrl": "https://gatebtc-xau.top/",
            "title": "GateBTC-XAUGateBTC-XAU: Your trusted trading platform",
            "ogType": "website",
            "robots": "all",
            "ogImage": "https://gatebtc-xau.top/logo.png",
            "ogTitle": "FxPro US: Your trusted trading platform",
            "keywords": "GateBTC-XAU",
            "ogSiteName": "GateBTC-XAU",
            "themeColor": "#ffffff",
            "description": "GateBTC-XAU",
            "twitterCard": "summary_large_image",
            "ogDescription": "GateBTC-XAU"
        },
        "trackers": {
            "requests": 8
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 6,
                "tls": 18,
                "wait": 416,
                "connect": 24,
                "download": 0
            },
            "response_ms": 464
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 6858,
            "co2_grams": 0.0003,
            "cleaner_than": 80
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.193.181",
                    "host": "jerome.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.118",
                    "host": "maleah.ns.cloudflare.com"
                }
            ],
            "zone": "gatebtc-xau.xyz"
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gatebtc-xau.xyz"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "maleah.ns.cloudflare.com",
                "jerome.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"jerome.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414883254, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gatebtc-xau.xyz"
            ]
        },
        "whois": {
            "registrar": "GLOBAL ASSET DOMAINS INC.",
            "created": "2026-07-14T08:57:03Z",
            "updated": "2026-07-19T08:57:20Z",
            "expires": "2027-07-14T23:59:59Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "jerome.ns.cloudflare.com",
                "maleah.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```