Growbit247.org 虚假投资/收入网站

在线根域返回 HTTP 200，当前首页标识为 Grow Bit 24/7。login、注册、密码 reset 和条款路径也返回 HTTP 200。因此，根页面与 dashboard 均作为实时内容审查，而非从 blacklist 或档案推断。

• HTTP 状态 https://growbit247.org/ returned HTTP 200 with the title Grow Bit 24/7.
• HTTP 状态 https://growbit247.org/dashboard/login.php returned HTTP 200.
• HTTP 状态 https://growbit247.org/dashboard/register.php returned HTTP 200.
• HTTP 状态 https://growbit247.org/dashboard/tandc.php and /dashboard/reset-password.php returned HTTP 200.

在线首页将服务描述为全球多重监管的 forex 与加密货币经纪商，宣传开户、投资、trading、加密货币入金和出金、衍生品及 CFDs，并声称全球持牌和受监管，展示大量账户、交易和成交量指标。

• 页面元素 Headline: Multi-regulated Global Forex and Crypto Broker.
• 页面元素 Claim: Globally Licensed & Regulated.
• 页面元素 The homepage promoted account registration, login, investing, trading, deposits, withdrawals, cryptocurrency payments, derivatives, and CFDs.
• 页面元素 The page displayed $76+ billion monthly volume, 1.6+ million registered accounts, and 48+ million annual trades.

在线首页显示看似近期客户出金的弹窗。其内联 JavaScript 实际从固定数组随机选择人物、国家和金额，再拼接成该人物刚刚提取该金额的说法。因此，这些信息由客户端生成，没有交易数据源。

• 分析师观察 The page defined fixed listPerson, listCountries, and listPlans arrays; listPlans included $500.95, $1550.55, $10500.35, $10700.75, and other exact amounts.
• 分析师观察 The script used Math.random() independently to select one person, one country, and one amount from those arrays.
• 分析师观察 The script concatenated the random values into the message: person from country just withdrew amount.
• 页面元素 The withdrawal pop-up had no server-provided transaction identifier, account reference, timestamp, or transaction data source.

经纪商展示混用了多个无关身份：联系链接使用 growbit247.com，社交元数据使用 grwobit.com，联系 widget 使用 newdawnpips.online 和菲律宾 WhatsApp；经纪商图片来自 Indonez 的 Profit 演示。大型交易指标明确归于 Profit Inc，而非 Grow Bit 24/7。

• 页面元素 The navigation contact address was [email protected] while the reviewed host was growbit247.org.
• 页面元素 Open Graph metadata used grwobit.com and https://grwobit.com/img/logo.png.
• 分析师观察 The live contact widget configured WhatsApp +639638109314 and email [email protected].
• 页面元素 Multiple graphics loaded from https://www.indonez.com/html-demo/Profit/.
• 页面元素 The page qualified its headline metrics as data based on year-to-date Profit Inc activity, last updated at the end of Q2 2020.

在线 dashboard 提供 login、注册和密码 reset 表单。注册要求姓名、用户名、国家、货币、email、WhatsApp、密码及确认；login 要求 email 和密码；reset 要求 email。未提交任何表单，也未创建账户。

• 分析师观察 Registration posted to /dashboard/register.php and requested first name, last name, username, country, currency, email, WhatsApp number, password, and password confirmation.
• 分析师观察 Login posted email and password to /dashboard/login.php.
• 分析师观察 Password reset posted an email address to /dashboard/reset-password.php.
• 分析师观察 No registration, login, password reset, personal-data submission, deposit, withdrawal, or transaction was performed.

在线条款描述 Bitcoin 转账，而非身份明确的受监管经纪关系。客户对目的地信息负责，转错目的地不予补偿；过期订单可按 Bitcoin-至-Thai-Baht 汇率重算；适用 Georgia 法律及 Atlanta 附近法院。条款没有列出运营法律实体。

• 页面元素 The terms said account details shown in the order summary would be the final transfer destination.
• 页面元素 The terms said funds transferred to an unintended destination would not be reimbursed and no additional funds would be transferred.
• 页面元素 For expired orders, the company reserved the right to recalculate the Bitcoin to Thai Baht exchange rate.
• 页面元素 The terms selected the laws of the State of Georgia and courts located in or near Atlanta, Georgia.
• 页面元素 No operating legal entity was named in the reviewed terms.

尽管声称全球持牌，所审查公开页面没有列出法律运营实体、牌照编号、监管机构、受监管司法辖区或可核验办公室。风险文字提到 Product Disclosure Statement 和 Financial Services Guide，但导航没有提供两份文件。

• 页面元素 The reviewed public pages did not name a legal operator, licence identifier, regulator, regulated jurisdiction, or verifiable office.
• 页面元素 Risk text mentioned a Product Disclosure Statement and Financial Services Guide, but the reviewed navigation linked neither document.
• 分析师观察 No first-party licence evidence was located on the reviewed homepage, about page, dashboard registration page, or terms page.

公共历史表明该经纪商界面跨多个部署存在。Wayback 保存了 2024 年 9 月至 2026 年 4 月七条成功记录；urlscan.io 收录了 2023 年 6 月和 2026 年 4 月根域扫描，但无结论。OTX 没有 pulse，精确 sandbox 与威胁情报搜索也没有具体样本。索引不完整不能证明安全。

• 分析师观察 Wayback preserved seven successful apex, about-page, or static-asset records from 2024-09-05 through 2026-04-14.
• 分析师观察 urlscan.io indexed successful apex scans on 2023-06-22 and 2026-04-23 without a recorded urlscan verdict.
• 分析师观察 OTX returned zero threat pulses, and the current public OpenPhish feed had no exact growbit247.org entry.
• 分析师观察 Indexed exact-host searches exposed no exact object in ANY.RUN, Hybrid Analysis, Joe Sandbox, URLhaus, ThreatFox, PhishTank, OpenPhish, or Triage.

所审查实时和历史界面未自动提供 executable 或 archive、已确认的无关凭据接收端、exploit、malware 文件、payload URL、payload hash 或可观察执行轨迹。结论针对精确欺骗性金融展示，而非 malware 分发或仅凭 blacklist 标签。

• 分析师观察 No automatic executable or archive delivery, exploit, malware file, payload URL, payload hash, or malware execution trace was reproduced.
• 分析师观察 The classification basis is the live client-generated withdrawal claims and the financial identity contradictions on exact reviewed pages.
• 分析师观察 A domain-level blacklist category was not treated as evidence that a particular URL or file executed harmful code.