# PhishDestroy domain threat record: goldbitcore.pro

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/goldbitcore.pro/
Machine-readable companion: https://phishdestroy.io/domain/goldbitcore.pro/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:34:53 UTC
- Stored record updated: 2026-10-28 01:00:18 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.23.19
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-09 09:51:16 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17083-0003-706c-bf5c-d066018cd104/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/goldbitcore.pro
- Certificate Transparency search: https://crt.sh/?q=%25.goldbitcore.pro
- Web Archive lookup: https://web.archive.org/web/*/https://goldbitcore.pro/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added goldbitcore.pro to its internal blocklist on 2026-10-28 after the domain was first observed by our system on the same day. The recorded page title advertises an “AI Trading Platform” and the HTTP response returned code 200 at the time of capture. The listing carries a generic suspicious label and does not constitute proof of fraud or malware.

How the scam works
Websites that receive a suspicious classification often present false investment or trading offers to lure visitors into disclosing credentials or sending funds. No concrete malicious behavior was observed on the captured page, so the risk is described at the category level of deceptive financial sites.

Evidence
VirusTotal scanned the domain on 2026-10-27 and reported 18 detections from 92 engines, including 15 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-28 and did not flag the site. urlscan.io captured the page on 2026-10-25; its machine‑learning engine scored it 97 % malicious, though the overall verdict was non‑malicious. Cloudflare Radar on 2026-10-28 marked the domain as malicious with a malware category. OTX listed one pulse on 2026-10-28. PhishDestroy’s internal blocklist contains the domain, while external blocklists showed no matches on the check date.

Infrastructure
The domain was registered on 2026-04-09 through Spaceship, Inc., giving it an age of about 198 days at the time of observation. The recorded IP addresses were 104.21.23.19 and 172.67.208.106, both belonging to Cloudflare, Inc. in the United States. The TLS certificate observed was issued by Google Trust Services on 2026-10-07 and was valid until 2027-01-05. No DNSSEC records were present.

What to do
Avoid entering any credentials, private keys or financial information on the site. If such data has already been submitted, change associated passwords and monitor accounts for unauthorized activity. Network defenders should block goldbitcore.pro at firewalls or proxies and log any access attempts. Report any suspicious interactions to PhishDestroy for further analysis.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17083-0003-706c-bf5c-d066018cd104/
Cloudflare Radar report: https://radar.cloudflare.com/scan/785fb3a5-0ff2-4b54-8587-d0c62f66eaec
Stored capture screenshot: https://urlscan.io/screenshots/01a17083-0003-706c-bf5c-d066018cd104.png
Cloudflare Radar screenshot (2026-10-27T23:36:13Z): https://screenshots.phishdestroy.io/cf/785fb3a5-0ff2-4b54-8587-d0c62f66eaec.png
URLScan screenshot (2026-07-21T11:31:40Z): https://screenshots.phishdestroy.io/us/019f8472-0cf1-718c-b1b1-c9bf2b17489e.png
URLScan capture report: https://urlscan.io/result/019f8472-0cf1-718c-b1b1-c9bf2b17489e/
URLScan screenshot (2026-07-22T08:06:52Z): https://screenshots.phishdestroy.io/us/019f88dc-d21f-7634-82b6-e99e098d8ae1.png
URLScan capture report: https://urlscan.io/result/019f88dc-d21f-7634-82b6-e99e098d8ae1/
URLScan screenshot (2026-10-27T23:35:37Z): https://screenshots.phishdestroy.io/us/01a17fb7-fcd0-73d9-8157-c20b9db5c0de.png
URLScan capture report: https://urlscan.io/result/01a17fb7-fcd0-73d9-8157-c20b9db5c0de/
VirusTotal report: https://www.virustotal.com/gui/domain/goldbitcore.pro
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=goldbitcore.pro
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 23:38:51 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17083-0003-706c-bf5c-d066018cd104.png
  Captured: 2026-10-27 23:34:53 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17083-0003-706c-bf5c-d066018cd104.png
  Source report: https://urlscan.io/result/01a17083-0003-706c-bf5c-d066018cd104/
- URLScan · 2026-07-21: https://screenshots.phishdestroy.io/us/019f8472-0cf1-718c-b1b1-c9bf2b17489e.png
  Captured: 2026-07-21 11:31:40 UTC
  Source report: https://urlscan.io/result/019f8472-0cf1-718c-b1b1-c9bf2b17489e/
  SHA-256: 9eec285ceaa2fd9dd6439f8450ba0db6e1d654042a091aa4256ddfcf58291deb
- URLScan · 2026-07-22: https://screenshots.phishdestroy.io/us/019f88dc-d21f-7634-82b6-e99e098d8ae1.png
  Captured: 2026-07-22 08:06:52 UTC
  Source report: https://urlscan.io/result/019f88dc-d21f-7634-82b6-e99e098d8ae1/
  SHA-256: 6cdb684a5686d38db2202324bcead58115f28721274058330e208be03d22262c
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17fb7-fcd0-73d9-8157-c20b9db5c0de.png
  Captured: 2026-10-27 23:35:37 UTC
  Source report: https://urlscan.io/result/01a17fb7-fcd0-73d9-8157-c20b9db5c0de/
  SHA-256: e5aecb1bef336f6c5a3ced1198289707491d5ca68057fe7a6b14c45f4c41f284
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/785fb3a5-0ff2-4b54-8587-d0c62f66eaec.png
  Captured: 2026-10-27 23:36:13 UTC
  Source report: https://radar.cloudflare.com/scan/785fb3a5-0ff2-4b54-8587-d0c62f66eaec
  SHA-256: ddb2c77b3d1a60ea90e2832dc6461ce69d3f771162e5d4b4fcf502dee6b420ea

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:38:12Z",
        "uuid": "01a17083-0003-706c-bf5c-d066018cd104",
        "scanned_at": "2026-10-25T00:43:25Z",
        "final_url": "https://goldbitcore.pro/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://goldbitcore.pro/",
                "from": "http://goldbitcore.pro/",
                "status": 307
            }
        ],
        "ip": "172.67.208.106",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "2606:4700::6811:d005",
            "2a00:1450:4001:c1f::5f",
            "104.17.24.14",
            "172.67.208.106"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "039833c84429bf0aaaa4c79c31911053f2ffa4fa137a9691ae5be923b8e92dfa",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_npducr1",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "storage_keys": [
            "_v3a26",
            "disclaimerAccepted"
        ],
        "tls": {
            "san": [
                "goldbitcore.pro"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "goldbitcore.pro",
            "protocol": "QUIC",
            "valid_to": "2027-01-05T14:08:09Z",
            "valid_from": "2026-10-07T13:08:13Z"
        },
        "domain_age_days": 198,
        "apex_age_days": 198,
        "tls_age_days": 17,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; script-src",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:38:15Z",
        "uuid": "785fb3a5-0ff2-4b54-8587-d0c62f66eaec",
        "scanned_at": "2026-10-27T23:36:13Z",
        "final_url": "https://goldbitcore.pro/",
        "status": 200,
        "history": [
            {
                "url": "https://goldbitcore.pro/",
                "status": 200
            }
        ],
        "dom_hash": "cc1a0935b7423607b87a064172dda5d5e492957283bcea974bc18a5a406fd366",
        "doc_hash": "e145f415c839f78bfb1b9edd661df46fed19befa79ba195ca741adacdc959885",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "goldbitcore.pro",
                "type": "A",
                "value": "104.21.23.19"
            },
            {
                "name": "goldbitcore.pro",
                "type": "A",
                "value": "172.67.208.106"
            },
            {
                "name": "goldbitcore.pro",
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:d06a"
            },
            {
                "name": "goldbitcore.pro",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:1713"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.9",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T23:35:53Z",
        "analysis_at": "2026-10-27T15:13:33Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 15,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-04-09T00:00:00Z",
        "updated": "2026-04-09T00:00:00Z",
        "first_seen": "2026-04-09T13:02:31Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.23.19"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "damian.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "damian.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:d06a"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:1713"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.208.106"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "keyla.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-27T15:19:09Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "goldbitcore.pro"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "546ac3dce753a76f13f1a18200104927",
            "sha256": "56148e50a0c0c015939f6eda21606551c1a69a133504b326f724ecd3ce17c121",
            "subject": "goldbitcore.pro",
            "valid_to": "2027-01-05T14:08:09Z",
            "valid_from": "2026-10-07T13:08:13Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-08-20T20:13:31Z",
                "registration": "2026-04-09T11:51:16Z",
                "registrar expiration": "2027-04-09T11:51:16Z",
                "last update of RDAP database": "2026-10-27T15:19:09Z"
            },
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:38:32Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "goldbitcore.pro"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T23:35:37Z",
            "first": "2026-10-27T23:35:37Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 42196
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true,
            "sitemaps": [
                "https://goldbitcore.pro/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://goldbitcore.pro/",
            "title": "Gold bitcore | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Gold bitcore | AI-Driven Trading Automation Platform",
            "ogSiteName": "Gold bitcore",
            "themeColor": "#0a2040",
            "description": "Gold bitcore delivers a premium, AI-powered trading automation suite with intelligent workflows, secure governance, and actionable insights for modern markets.",
            "twitterCard": "summary",
            "canonicalUrl": "https://goldbitcore.pro/",
            "ogDescription": "Gold bitcore delivers a premium overview of automated trading bots, AI-assisted decisioning, and governance-ready insights, designed for professional traders."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 35,
                "tls": 16,
                "wait": 85,
                "connect": 12,
                "download": 61
            },
            "response_ms": 209
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 141430,
            "co2_grams": 0.0052,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.50",
                    "host": "damian.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.34.170",
                    "host": "keyla.ns.cloudflare.com"
                }
            ],
            "zone": "goldbitcore.pro"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3033::ac43:d06a",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "San Francisco",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "goldbitcore.pro"
        },
        "dns": {
            "A": [
                "172.67.208.106",
                "104.21.23.19"
            ],
            "NS": [
                "damian.ns.cloudflare.com",
                "keyla.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"damian.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418084750, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3037::6815:1713",
                "2606:4700:3033::ac43:d06a"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3033::ac43:d06a",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://goldbitcore.pro"
            ]
        },
        "linked_pages": {
            "internal_count": 39
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```