# primebitprofit.org Profit Spike Pro account signup page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/primebitprofit.org/ Machine-readable companion: https://phishdestroy.io/domain/primebitprofit.org/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Unverified - First observed by PhishDestroy: 2026-11-02 04:06:44 UTC - Selected availability observation: 2026-11-09T02:54:26Z - Stored record updated: 2026-11-09 03:25:12 UTC - VirusTotal detections in the stored snapshot: 19/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): revolut ## Stored infrastructure - Observed IP address: 185.98.60.138 - Registrar in stored WHOIS data: Internet Domain Service BS Corp - Registration date in stored WHOIS data: 2022-03-11 10:18:25 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19a6e-45d3-715f-a46a-0845aa2b7d98/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/primebitprofit.org - Certificate Transparency search: https://crt.sh/?q=%25.primebitprofit.org - Web Archive lookup: https://web.archive.org/web/*/https://primebitprofit.org/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records the Profit Spike Pro signup page captured on primebitprofit.org, where visitors are invited to create an account. The captured page presents itself as the official Profit Spike Pro website, with a purple wordmark in the header and a hero image of a glowing brain surrounded by financial and cryptocurrency icons. Its central interaction is a "Create an account" form asking for first name, last name, email and telephone number, submitted through an orange LEARN MORE button. Fine print below the button states that submitting confirms acceptance of the privacy policy and terms, consents to marketing by email, SMS and telephone, and notes that all trading carries risk. The stored VirusTotal domain result reports 19 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "suspicious". Package revision: ddaa083dd9eed517158dc5327fb784be7b00806ed1bf12c6a3166920461d1674 Text generated (not scan time): 2026-11-02 05:38:12 Reviewed evidence snapshot: {"domain":"primebitprofit.org","screenshot_available":true,"page_title":"Profit Spike Pro ™ | The Official & Updated Website 2025 🥇","original_meta_description":"Learn essential strategies and tools for successful online trading. Profit Spike Pro offers valuable insights to enhance your trading skills.","metadata_observed_on":"2026-11-02","virustotal":{"detections":19,"engines":92,"malicious":16,"suspicious":3,"retrieved_date":"2026-11-02","analysis_date":"2026-10-30","flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Emsisoft","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"malware","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Emsisoft":"malware","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-02T04:37:18Z","final_host":"primebitprofit.org","captured_on":"2026-11-02"},"plain_text_contract":1,"page_paragraph_target_words":94,"virustotal_public_summary":"The stored VirusTotal domain result reports 19 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"suspicious\".","page_paragraph_target_characters":517} Source facts (timestamps as stored): {"record_id":1738631,"first_recorded_at":"2026-11-02 05:06:44","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":19,"denominator":92,"malicious":16,"suspicious":3,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"malware","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Emsisoft":"malware","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-30T09:22:27Z","checked_at":null,"fetched_at":"2026-11-02T04:37:13Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":19,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CRDF","CyRadar","DNS8","ESET","Emsisoft","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-30 09:22:27","checked_at":"2026-11-02 05:37:14","fetched_at":"2026-11-02 04:37:14","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"malware","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Emsisoft":"malware","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Emsisoft","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":42,"malicious":16,"suspicious":3,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 12:01:56"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-02 08:30:18"},"availability":{"state":"unknown","label_key":"availability.unverified","detail_key":"detail.no_response","params":[],"source":"current_http_probe","record_id":1738631,"scope":"checked_url","observed_at":"2026-11-09T02:54:26Z","http_status":null,"http_observed_at":"2026-11-09T02:54:26Z","stored_http_code":0,"stored_http_observed_at":"2026-11-09T02:54:26Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unreachable","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19a6e-45d3-715f-a46a-0845aa2b7d98.png Captured: 2026-11-02 04:04:56 UTC Source report: https://urlscan.io/result/01a19a6e-45d3-715f-a46a-0845aa2b7d98/ SHA-256: cc5d01e7c0b53ead5fb096c6f4d7d8dd90696bd0c0ce122cb3ac1c8ad1b91654 - URLScan · 2026-07-15: https://screenshots.phishdestroy.io/us/019f6786-db51-73df-bbc5-db3f9dc53ed9.png Captured: 2026-07-15 20:45:32 UTC Source report: https://urlscan.io/result/019f6786-db51-73df-bbc5-db3f9dc53ed9/ SHA-256: 8aa12816297c346855e2b7a1df0c8dd85e9614e6d7cba8e8f349eb8a53ae7143 - URLScan · 2026-07-30: https://screenshots.phishdestroy.io/us/019fb20d-a4c3-7728-a382-74d89547b1a0.png Captured: 2026-07-30 08:04:34 UTC Source report: https://urlscan.io/result/019fb20d-a4c3-7728-a382-74d89547b1a0/ SHA-256: 8aa12816297c346855e2b7a1df0c8dd85e9614e6d7cba8e8f349eb8a53ae7143 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9c1105c6-6456-488c-a1e3-81c3cf37e20c.png Captured: 2026-11-02 04:37:18 UTC Source report: https://radar.cloudflare.com/scan/9c1105c6-6456-488c-a1e3-81c3cf37e20c SHA-256: d8ca3a4e307d41e9a0edf00640399687fe1bdc22a1a7bb047b32501568401e6d ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-02T04:11:54Z", "uuid": "01a19a6e-45d3-715f-a46a-0845aa2b7d98", "scanned_at": "2026-11-02T04:04:56Z", "final_url": "https://primebitprofit.org/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://primebitprofit.org/", "from": "http://primebitprofit.org/", "status": 307 }, { "to": "http://primebitprofit.org/", "from": "https://primebitprofit.org/", "status": 307 }, { "to": "https://primebitprofit.org/", "from": "http://primebitprofit.org/", "status": 301 } ], "ip": "185.98.60.138", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.250.154.94", "142.251.20.95", "185.98.60.138" ], "asns": [ "15169", "201064" ], "countries": [ "US", "TR" ], "doc_hash": "260ce3b07f9522f0cbafb6342f9a58ec7718662151b81b85f9659dc2c0dd002f", "script_hashes": [ "b1dc3a468eb8949e17762628c68205ee4ffad52ec1cdbe48e3456bf96c1c9603", "81a17cfaf5731292df919a903727b86550d2a57e1ad29893dc693ef9c2013113" ], "globals": [ "__VUE__", "switcher", "switcherButton", "modal", "btn" ], "cookies": [ "lang_fx" ], "tls": { "san": [ "*.primebitprofit.org", "primebitprofit.org" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "primebitprofit.org", "protocol": "TLS 1.3", "valid_to": "2026-12-17T17:54:17Z", "valid_from": "2026-09-18T17:54:18Z" }, "domain_age_days": 1686, "apex_age_days": 1686, "tls_age_days": 44, "tls_valid_days": 89, "requests": 52, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 88, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx/1.30.1", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-11-02T04:37:41Z", "uuid": "9c1105c6-6456-488c-a1e3-81c3cf37e20c", "scanned_at": "2026-11-02T04:37:18Z", "final_url": "https://primebitprofit.org/", "status": 200, "history": [ { "url": "https://primebitprofit.org/", "status": 200 } ], "dom_hash": "f6dd9b70d59ecf35511c420c11ebf385d7fa4759e5c985e0b8b7a2bd04cd9eb6", "doc_hash": "260ce3b07f9522f0cbafb6342f9a58ec7718662151b81b85f9659dc2c0dd002f", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "primebitprofit.org", "type": "A", "value": "185.98.60.138" } ], "dnssec_valid": false, "ip": "127.0.1.6", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Internet Domain Service BS Corp", "created": "2022-03-11T11:18:25Z", "updated": "2026-08-12T00:12:13Z", "expires": "2027-03-11T11:18:25Z", "nameservers": [ "ns1.cryptodns.co", "ns2.cryptodns.co" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-02T04:37:13Z", "analysis_at": "2026-10-30T09:22:27Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 16, "suspicious": 3, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Emsisoft": "malware", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2022-03-11T00:00:00Z", "updated": "2026-03-11T00:00:00Z", "first_seen": "2024-03-05T05:29:52Z", "dns": [ { "ttl": 300, "type": "A", "value": "185.98.60.138" }, { "ttl": 300, "type": "SOA", "rname": "admin.cryptodns.co", "value": "ns1.cryptodns.co" }, { "ttl": 300, "type": "NS", "value": "ns1.cryptodns.co" }, { "ttl": 300, "type": "NS", "value": "ns2.cryptodns.co" } ], "dns_at": "2026-10-30T09:27:46Z", "jarm": "1dd40d40d00040d00042d43d000000831b6af40378e2dd35eeac4e9311926e", "cert": { "san": [ "*.primebitprofit.org", "primebitprofit.org" ], "issuer": "Let's Encrypt / YE2", "serial": "55d35a34593e905ab00558561292493f8d6", "sha256": "b7576a5772344379673c44c3a37917900efa2e71b4605864948126b8dc935b12", "subject": "primebitprofit.org", "valid_to": "2026-12-17T17:54:17Z", "valid_from": "2026-09-18T17:54:18Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-03-11T11:18:25Z", "last changed": "2026-05-20T13:53:57Z", "registration": "2022-03-11T11:18:25Z", "registrar expiration": "2027-03-11T11:18:25Z", "last update of RDAP database": "2026-10-30T08:16:41Z" }, "registrar": "Internet Domain Service BS Corp.", "registrar_iana_id": "2487" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-02T04:37:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "primebitprofit.org" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-11-02T04:08:39Z", "first": "2023-02-23T18:46:12Z", "changes": 31, "days_archived": 42, "scans_per_day": 0.03, "avg_page_bytes": 8025 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://primebitprofit.org/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 128 }, "social_tags": { "title": "Profit Spike Pro ™ | The Official & Updated Website 2025 🥇", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "description": "Learn essential strategies and tools for successful online trading. Profit Spike Pro offers valuable insights to enhance your trading skills.", "twitterCard": "summary", "canonicalUrl": "https://primebitprofit.org/" }, "trackers": { "requests": 47, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 75, "tls": 101, "wait": 33, "connect": 26, "download": 13 }, "response_ms": 248 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 53, 80, 443 ] }, "carbon": { "bytes": 67331, "co2_grams": 0.0025, "cleaner_than": 30 }, "dns_server": { "ns": [ { "ip": "185.98.60.138", "host": "ns1.cryptodns.co" }, { "ip": "185.98.60.138", "host": "ns2.cryptodns.co" } ], "zone": "primebitprofit.org" }, "cookies": { "cookies": [ { "name": "lang_fx" } ] }, "location": { "ip": "185.98.60.138", "asn": "201064", "org": "Ideal Hosting Teknoloji A.S.", "city": "Mahmutbey", "country": "TR" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "primebitprofit.org" }, "dns": { "A": [ "185.98.60.138" ], "NS": [ "ns1.cryptodns.co", "ns2.cryptodns.co" ], "SOA": "{\"nsname\": \"ns1.cryptodns.co\", \"hostmaster\": \"admin.cryptodns.co\", \"serial\": 2026052113, \"refresh\": 3600, \"retry\": 1800, \"expire\": 604800, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.98.60.138", "family": 4 }, "redirects": { "chain": [ "https://primebitprofit.org" ] }, "subdomains": { "count": 1, "subdomains": [ "www.primebitprofit.org" ] }, "linked_pages": { "internal_count": 37 }, "whois": { "registrar": "Internet Domain Service BS Corp", "created": "2022-03-11T11:18:25Z", "updated": "2026-08-12T00:12:13Z", "expires": "2027-03-11T11:18:25Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.cryptodns.co", "ns2.cryptodns.co" ] }, "headers": { "headers": { "server": "nginx/1.30.1", "content-type": "text/html" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/9c1105c6-6456-488c-a1e3-81c3cf37e20c.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/9c1105c6-6456-488c-a1e3-81c3cf37e20c","captured_at":"2026-11-02T04:37:18Z","sha256":"d8ca3a4e307d41e9a0edf00640399687fe1bdc22a1a7bb047b32501568401e6d","model_image_sha256":"499da396df8d9512a0fde4a46e4cc519896560d1841b7f3cf51df6b56782b1ca","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/primebitprofit.org/records.json?source=content&format=json ## Dated availability observation No conclusive current response is stored ```json { "state": "unknown", "label_key": "availability.unverified", "detail_key": "detail.no_response", "params": [], "source": "current_http_probe", "record_id": 1738631, "scope": "checked_url", "observed_at": "2026-11-09T02:54:26Z", "http_status": null, "http_observed_at": "2026-11-09T02:54:26Z", "stored_http_code": 0, "stored_http_observed_at": "2026-11-09T02:54:26Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unreachable", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```