What Gridinsoft observed on Bitalpha-ai.org
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260824210908-2270f5cd
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
The current public apex and www alias serve a same-domain BTC/USD reference converter without credential collection, wallet connection, payments, account registration, automatic downloads, or unrelated redirects. Historical trading lead-generation content and current external blacklist labels are relevant reputation context, but they do not reproduce a current phishing or malware object. The current Phishing classification is therefore unsupported for the reviewed public scope.
Analyst findings
Review 5 documented observations View evidence
The submitted host is the registrable apex itself, so there is no separate parent domain below .org. The apex returned HTTP 200 over HTTPS, and www.bitalpha-ai.org followed only same-domain redirects to the apex and returned identical content.
-
HTTP status
200 -
Final URL
https://bitalpha-ai.org/ - DNS fact bitalpha-ai.org and www.bitalpha-ai.org resolved to the same Cloudflare-hosted service during the review.
- Certificate fact The presented certificate covered bitalpha-ai.org and *.bitalpha-ai.org and was valid at the review time.
The current public site is a BTC/USD reference converter. Its two numeric fields perform client-side calculations, the form cannot submit, and the reviewed script requests only the same-origin get-rate.php JSON endpoint for a CoinGecko market rate.
- Page element The only current form contains numeric BTC and USD inputs and declares onsubmit=return false.
- Public artifact URL https://bitalpha-ai.org/get-rate.php
- Analyst observation No password, wallet connection, seed phrase, private key, payment, account-registration, file-upload, or personal-data submission control was present in the reviewed current pages.
- Analyst observation The reviewed JavaScript did not send the entered amounts to an external destination.
The homepage, About Us, and Privacy Policy pages remained on the reviewed domain. Historical account and language paths tested in the current deployment returned HTTP 404, and no automatic download or unrelated redirect was observed.
- Public artifact URL https://bitalpha-ai.org/about-us/
- Public artifact URL https://bitalpha-ai.org/privacy-policy/
- Analyst observation The current /login/, /contact/, /register/, and /es/ paths returned HTTP 404.
- Analyst observation No executable, archive, wallet file, browser extension, automatic download, or unrelated redirect was identified in the reviewed current public flow.
Public archive snapshots from July 2022 through February 2026 show a materially different BitAlpha AI trading lead-generation site with name, email, and phone registration fields and third-party data-sharing language. Current registry data records a new registration on 2026-07-23, and those archived registration paths are not present in the current deployment.
- Public artifact URL https://web.archive.org/web/20220924034654id_/https://bitalpha-ai.org/
- Public artifact URL https://web.archive.org/web/20260206012234id_/https://bitalpha-ai.org/
- Page element The archived pages described a trading service and contained registration fields for name, email, and phone plus third-party data-sharing language.
- DNS fact Current RDAP records the domain registration date as 2026-07-23 through Gname 048 Inc.
- Analyst observation The historical content explains legacy reputation records but is not evidence that the same forms or trading flow are active in the current public deployment.
The current review did not identify a specific phishing receiver, credential-collection URL, malware file, executable payload, harmful download URL, or file hash on the submitted host or its www alias.
- Analyst observation The remaining external results are broad domain blacklist categories and did not provide a current object-level sample that reproduced on the reviewed site.
Scope and limitations
- The review covers the public apex, www alias, linked public pages, current scripts, and representative historical paths at the recorded time; it does not certify future content changes or undisclosed unlinked paths.
- No customer-supplied file, payload, hash, or harmful path beyond the submitted root URL was available for exact-object analysis.
- The Safe verdict applies to the current public web scope and does not erase or reinterpret the archived trading operation or independently controlled historical regulatory records.
Help protect others by sharing this page on social media! The more people who know about bitalpha-ai.org, the fewer chances they have to deceive someone else. Help others evaluate bitalpha-ai.org by sharing this page on social media!