# PhishDestroy domain threat record: certogestovanzaai.pro Content language: English Canonical HTML report: https://phishdestroy.io/domain/certogestovanzaai.pro/ Machine-readable companion: https://phishdestroy.io/domain/certogestovanzaai.pro/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 05:34:19 UTC - Last availability or vendor check: 2026-10-24 11:13:41 UTC - Stored record updated: 2026-10-24 18:21:38 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 185.62.57.48 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, certogestovanzaai.pro): 2026-07-12 08:26:06 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16c65-42fe-756f-b106-86996852e62e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/certogestovanzaai.pro - Certificate Transparency search: https://crt.sh/?q=%25.certogestovanzaai.pro - Web Archive lookup: https://web.archive.org/web/*/https://certogestovanzaai.pro/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy classified certogestovanzaai.pro as a suspicious domain based on multiple threat‑intel detections. The domain was first seen by PhishDestroy on 2026-10-24, 104 days after its registration on 2026-07-12. The recorded page title advertises an AI trading platform. An HTTP 200 response was recorded on 2026-10-24. How the scam works The listing relies on the presence of malicious or phishing labels from security scanners; such labels often indicate attempts to harvest credentials, deliver unwanted software, or deceive visitors. No specific malicious functionality or credential‑harvesting form was observed on the page itself. Evidence VirusTotal scanned the domain on 2026-10-22 (retrieved 2026-10-24) and reported 13 malicious and 4 suspicious detections from 92 engines, with vendors such as BitDefender, Fortinet and Kaspersky labeling it phishing or malicious. Google Safe Browsing checked on 2026-10-24 and did not flag the site. urlscan.io recorded a malicious engine score of 99 on 2026-10-24. Cloudflare Radar marked the domain as phishing and malware on 2026-10-24. OTX listed five pulses referencing the domain as of 2026-10-24. PhishDestroy’s internal blocklist includes the domain, while external blocklists (Spamhaus DBL, other resolvers) reported no listings on the same date. Infrastructure The domain was registered on 2026-07-12 through Spaceship, Inc. and resolves to IP 185.62.57.48, a server operated by Snel.com B.V. in the Netherlands. DNS is served by Cloudflare nameservers bruce.ns.cloudflare.com and audrey.ns.cloudflare.com. The site presented a ZeroSSL ECC DV certificate valid from 2026-08-31 to 2026-11-29, matching the domain name and using TLS 1.3 with forward secrecy. What to do Visitors should avoid entering any credentials or personal data on the site; if they have already done so, they should change affected passwords and monitor accounts for unusual activity. Defenders should block certogestovanzaai.pro at the network perimeter, review access logs for requests to 185.62.57.48, and apply the block to the exact domain name rather than broader infrastructure. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16c65-42fe-756f-b106-86996852e62e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/6e4151d0-a25c-4c37-8ee7-349da9046ed3 URLQuery report: https://urlquery.net/report/41e8e3fa-2e4a-47c5-b79b-679578d32db9 Stored capture screenshot: https://urlscan.io/screenshots/01a16c65-42fe-756f-b106-86996852e62e.png Cloudflare Radar screenshot (2026-10-24T05:34:50Z): https://screenshots.phishdestroy.io/cf/6e4151d0-a25c-4c37-8ee7-349da9046ed3.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/41e8e3fa-2e4a-47c5-b79b-679578d32db9.png URLScan screenshot (2026-10-24T05:41:34Z): https://screenshots.phishdestroy.io/us/01a16c6d-9497-75e9-80a5-c650d431f0b6.png URLScan capture report: https://urlscan.io/result/01a16c6d-9497-75e9-80a5-c650d431f0b6/ VirusTotal report: https://www.virustotal.com/gui/domain/certogestovanzaai.pro Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=certogestovanzaai.pro Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 08:20:05 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16c65-42fe-756f-b106-86996852e62e.png Captured: 2026-10-24 05:34:19 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16c65-42fe-756f-b106-86996852e62e.png Captured: 2026-10-24 05:34:19 UTC Source report: https://urlscan.io/result/01a16c65-42fe-756f-b106-86996852e62e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/6e4151d0-a25c-4c37-8ee7-349da9046ed3.png Captured: 2026-10-24 05:34:50 UTC Source report: https://radar.cloudflare.com/scan/6e4151d0-a25c-4c37-8ee7-349da9046ed3 SHA-256: 31927271552ef50071d8b62cdb3825ef34b64cb2744eb5a62cfbcb273187d3e2 - URLQuery: https://screenshots.phishdestroy.io/uq/41e8e3fa-2e4a-47c5-b79b-679578d32db9.png Source report: https://urlquery.net/report/41e8e3fa-2e4a-47c5-b79b-679578d32db9 SHA-256: f8158c807977bbb4c10dea634aade018e681ede7bab190be2c8cd1e6a6c39adb - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16c6d-9497-75e9-80a5-c650d431f0b6.png Captured: 2026-10-24 05:41:34 UTC Source report: https://urlscan.io/result/01a16c6d-9497-75e9-80a5-c650d431f0b6/ SHA-256: 9091fd95cac34426447863a29859977153b02391afe540e75a4a133bb6f66ceb ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T05:35:08Z", "uuid": "01a16c65-42fe-756f-b106-86996852e62e", "scanned_at": "2026-10-24T05:32:33Z", "final_url": "https://certogestovanzaai.pro/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://certogestovanzaai.pro/", "from": "http://certogestovanzaai.pro/", "status": 307 }, { "to": "http://certogestovanzaai.pro/", "from": "https://certogestovanzaai.pro/", "status": 307 }, { "to": "https://certogestovanzaai.pro/", "from": "http://certogestovanzaai.pro/", "status": 308 } ], "ip": "185.62.57.48", "ptr": "static-48-57-62-185.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "192.178.183.94", "104.18.95.41", "104.18.94.41", "104.16.124.96", "104.17.208.5", "104.17.25.14", "142.251.127.95", "185.62.57.48" ], "asns": [ "15169", "13335", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "9ea325293d7518168d13ebc4096f9b7b8629dc3ec14782f30a6fb9aade35cfca", "script_hashes": [ "0bac6a6bce1468587385e6bf21c00e49f07e209a686fc418dac11015bc1e8e2d" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "turnstile", "__visitorCountry" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "certogestovanzaai.pro" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "certogestovanzaai.pro", "protocol": "TLS 1.3", "valid_to": "2026-11-29T23:59:59Z", "valid_from": "2026-08-31T00:00:00Z" }, "domain_age_days": 103, "apex_age_days": 103, "tls_age_days": 54, "tls_valid_days": 90, "requests": 22, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T05:35:10Z", "uuid": "6e4151d0-a25c-4c37-8ee7-349da9046ed3", "scanned_at": "2026-10-24T05:34:50Z", "final_url": "https://certogestovanzaai.pro/", "status": 200, "history": [ { "url": "https://certogestovanzaai.pro/", "status": 200 } ], "dom_hash": "f09f038820479bddb65a0b15ab77de2f191a400120ff3dc6da23d16b0348d2aa", "doc_hash": "9ea325293d7518168d13ebc4096f9b7b8629dc3ec14782f30a6fb9aade35cfca", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "certogestovanzaai.pro", "type": "A", "value": "185.62.57.48" } ], "dnssec_valid": false, "ip": "185.62.57.48", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Spaceship, Inc.", "created": "2026-07-12T08:26:06Z", "updated": "2026-08-12T04:01:31Z", "expires": "2027-07-12T08:26:06Z", "nameservers": [ "bruce.ns.cloudflare.com", "audrey.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-24T08:13:17Z", "analysis_at": "2026-10-22T14:06:14Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 13, "suspicious": 4, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "suspicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "first_seen": "2026-07-12T09:03:32Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "audrey.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "bruce.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.57.48" }, { "ttl": 21600, "type": "NS", "value": "audrey.ns.cloudflare.com" } ], "dns_at": "2026-10-22T14:11:42Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "certogestovanzaai.pro" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "c0705d3dddbd4b2796c5d3779d84a2cd", "sha256": "a0503e1fe1a1a86e39e7e9d54a2e63dc6c2d5cbbc18092f94ae7a550975291b5", "subject": "certogestovanzaai.pro", "valid_to": "2026-11-29T23:59:59Z", "valid_from": "2026-08-31T00:00:00Z" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-07-12T08:26:06Z", "registration": "2026-07-12T08:26:06Z", "registrar expiration": "2027-07-12T08:26:06Z", "last update of RDAP database": "2026-10-22T14:11:42Z" }, "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T05:35:28Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "certogestovanzaai.pro" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://certogestovanzaai.pro/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://certogestovanzaai.pro/", "title": "certo gestovanza ai | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "certo gestovanza ai | Elite AI trading workflows and portfolio clarity", "ogSiteName": "certo gestovanza ai", "themeColor": "#111111", "description": "certo gestovanza ai introduces an AI-driven trading platform featuring bot-led workflows, execution oversight, portfolio governance, and structured market insights in a premium aurora-glass experience.", "twitterCard": "summary", "canonicalUrl": "https://certogestovanzaai.pro/", "ogDescription": "certo gestovanza ai delivers AI-powered trading bot workflows, execution oversight, portfolio governance, and lucid market insights in a premium aurora-glass experience." }, "trackers": { "requests": 20, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 34, "tls": 19, "wait": 23, "connect": 17, "download": 28 }, "response_ms": 121 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 47152, "co2_grams": 0.0017, "cleaner_than": 38 }, "dns_server": { "ns": [ { "ip": "108.162.193.77", "host": "bruce.ns.cloudflare.com" }, { "ip": "162.159.38.66", "host": "audrey.ns.cloudflare.com" } ], "zone": "certogestovanzaai.pro" }, "location": { "ip": "185.62.57.48", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "certogestovanzaai.pro" }, "dns": { "A": [ "185.62.57.48" ], "NS": [ "bruce.ns.cloudflare.com", "audrey.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"audrey.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414602871, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.57.48", "family": 4 }, "redirects": { "chain": [ "https://certogestovanzaai.pro" ] }, "linked_pages": { "internal_count": 38 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```