# PhishDestroy domain threat record: chatgptsmart-skillgpt.click Content language: English Canonical HTML report: https://phishdestroy.io/domain/chatgptsmart-skillgpt.click/ Machine-readable companion: https://phishdestroy.io/domain/chatgptsmart-skillgpt.click/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-24 08:03:42 UTC - Last availability or vendor check: 2026-10-25 11:01:23 UTC - Stored record updated: 2026-10-25 15:21:31 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.56.121 - Registrar in stored WHOIS data: Dynadot, LLC - Registrar country in stored WHOIS data: US - Registration date (registry RDAP, chatgptsmart-skillgpt.click): 2026-06-07 06:57:38 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16d06-0821-750a-9773-04c26b903eb5/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/chatgptsmart-skillgpt.click - Certificate Transparency search: https://crt.sh/?q=%25.chatgptsmart-skillgpt.click - Web Archive lookup: https://web.archive.org/web/*/https://chatgptsmart-skillgpt.click/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added chatgptsmart-skillgpt.click to its internal blocklist on 2026-10-24 after observing the domain. The recorded page title was “chat gpt smart‑skill gpt | a premium AI | Official Website”. An HTTP 200 response was recorded on the same date. How the scam works The listing reflects a generic suspicious‑domain risk where a site mimics legitimate‑sounding AI or trading services to lure visitors, potentially serving phishing pages or malicious scripts. No concrete malicious behavior was captured on the page, so the exact technique cannot be confirmed. Evidence VirusTotal scanned the domain on 2026-10-24 and reported 14 malicious and 4 suspicious detections out of 92 engines (18 total). Google Safe Browsing checked the URL on 2026-10-24 and did not flag it, while urlscan.io captured the site on the same day and gave an overall clean verdict but a malicious engine score of 99. Cloudflare Radar flagged the domain as malicious with a malware category on 2026-10-24, and OTX listed three pulses referencing it. PhishDestroy’s internal blocklist contains the domain, whereas external blocklists showed no matches on the check date. Infrastructure The domain was registered on 2026-06-07 through Dynadot, LLC with a clientTransferProhibited status and delegated to Cloudflare nameservers earl.ns.cloudflare.com and cecelia.ns.cloudflare.com. The recorded IP address was 185.62.56.121, belonging to the Snel.com B.V. network in the Netherlands. The site used a TLS 1.3 certificate issued by ZeroSSL, valid from 2026-09-19 to 2026-12-18. What to do Visitors should avoid entering credentials, personal data, or downloading files from the site; if any such information was submitted, change the associated passwords and monitor accounts for unusual activity. Organizations should block the exact domain at the network perimeter and review logs for connections to the recorded IP address. Continue to monitor threat feeds for any updates on this domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16d06-0821-750a-9773-04c26b903eb5/ Cloudflare Radar report: https://radar.cloudflare.com/scan/fd51c90a-9755-4afc-aa8c-3fe468f99c5b Stored capture screenshot: https://urlscan.io/screenshots/01a16d06-0821-750a-9773-04c26b903eb5.png Cloudflare Radar screenshot (2026-10-24T08:06:13Z): https://screenshots.phishdestroy.io/cf/fd51c90a-9755-4afc-aa8c-3fe468f99c5b.png URLScan screenshot (2026-10-24T08:09:40Z): https://screenshots.phishdestroy.io/us/01a16cf5-2e5c-70b5-b292-f3a7397c2085.png URLScan capture report: https://urlscan.io/result/01a16cf5-2e5c-70b5-b292-f3a7397c2085/ VirusTotal report: https://www.virustotal.com/gui/domain/chatgptsmart-skillgpt.click Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=chatgptsmart-skillgpt.click Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-24 08:38:27 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16d06-0821-750a-9773-04c26b903eb5.png Captured: 2026-10-24 08:29:56 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a06bc5-cc7e-70ba-b874-9ce6ed898d25.png Captured: 2026-10-24 08:03:42 UTC Source report: https://urlscan.io/result/01a16d06-0821-750a-9773-04c26b903eb5/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/fd51c90a-9755-4afc-aa8c-3fe468f99c5b.png Captured: 2026-10-24 08:06:13 UTC Source report: https://radar.cloudflare.com/scan/fd51c90a-9755-4afc-aa8c-3fe468f99c5b SHA-256: 7d3b2c931607414f39eb0ed6dfc4e32489510fc13d859f421c5cf8c1e8c4ef78 - URLQuery: https://screenshots.phishdestroy.io/uq/90297b4e-db8c-4898-8157-bdbf115a5541.png Source report: https://urlquery.net/report/90297b4e-db8c-4898-8157-bdbf115a5541 SHA-256: f459b5e879306039e300219eefc8ccac2cd0a0f1ebb5a19d8771488612e6f6ec - URLScan · 2026-09-04: https://screenshots.phishdestroy.io/us/01a06bc5-cc7e-70ba-b874-9ce6ed898d25.png Captured: 2026-09-04 09:35:28 UTC Source report: https://urlscan.io/result/01a06bc5-cc7e-70ba-b874-9ce6ed898d25/ SHA-256: d298d557bba4ecd53c552eba60097b9ba57d13bdb8b53450b134231ff6376b1e - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16cf5-2e5c-70b5-b292-f3a7397c2085.png Captured: 2026-10-24 08:09:40 UTC Source report: https://urlscan.io/result/01a16cf5-2e5c-70b5-b292-f3a7397c2085/ SHA-256: 65f5c834d83c545a1de2fec4b9788e5dab78742970cc08a9446d41db74b7f26c - URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16d02-d00f-7348-b940-2e41024ae4f0.png Captured: 2026-10-24 08:24:38 UTC Source report: https://urlscan.io/result/01a16d02-d00f-7348-b940-2e41024ae4f0/ SHA-256: 8f6b963581ab08d529987f480f66d8e0c4bf3f6cb90045bba82d88643943af52 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-24T08:37:33Z", "uuid": "01a16d06-0821-750a-9773-04c26b903eb5", "scanned_at": "2026-10-24T08:28:11Z", "final_url": "https://chatgptsmart-skillgpt.click/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://chatgptsmart-skillgpt.click/", "from": "http://chatgptsmart-skillgpt.click/", "status": 307 }, { "to": "http://chatgptsmart-skillgpt.click/", "from": "https://chatgptsmart-skillgpt.click/", "status": 307 }, { "to": "https://chatgptsmart-skillgpt.click/", "from": "http://chatgptsmart-skillgpt.click/", "status": 308 } ], "ip": "185.62.56.121", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "142.251.20.94", "104.18.95.41", "104.16.124.96", "151.101.65.229", "104.17.25.14", "142.251.14.95", "185.62.56.121" ], "asns": [ "15169", "13335", "54113", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "9998d3a7487095f713ed570097bc9a8849ad25b25c7699051a6803f583ea936b", "script_hashes": [ "0e041e5a33ca5b9231ee825b230994a934d045cc54275bf38dbf1a91b5fb16f9" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "chatgptsmart-skillgpt.click" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "chatgptsmart-skillgpt.click", "protocol": "TLS 1.3", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "domain_age_days": 139, "apex_age_days": 139, "tls_age_days": 35, "tls_valid_days": 90, "requests": 22, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-24T08:09:40Z", "uuid": "fd51c90a-9755-4afc-aa8c-3fe468f99c5b", "scanned_at": "2026-10-24T08:06:13Z", "final_url": "https://chatgptsmart-skillgpt.click/", "status": 200, "history": [ { "url": "https://chatgptsmart-skillgpt.click/", "status": 200 } ], "dom_hash": "f0a53487cd6f0c320e22ba4e861a60207afe22df187b0a469e9bdea875a8fd3a", "doc_hash": "9998d3a7487095f713ed570097bc9a8849ad25b25c7699051a6803f583ea936b", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "chatgptsmart-skillgpt.click", "type": "A", "value": "185.62.56.121" } ], "dnssec_valid": false, "ip": "185.62.56.121", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-06-07T06:57:38Z", "updated": "2026-06-12T06:58:11Z", "expires": "2027-06-07T06:57:38Z", "nameservers": [ "earl.ns.cloudflare.com", "cecelia.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-24T08:35:48Z", "analysis_at": "2026-10-18T17:46:38Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 4, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "suspicious", "Bfore.Ai PreCrime": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Suspicious (alphaMountain.ai)" }, "registrar": "Dynadot, LLC", "created": "2026-06-07T06:57:38Z", "expires": "2027-06-07T06:57:38Z", "updated": "2026-06-12T06:58:11Z", "first_seen": "2026-06-07T08:29:31Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "earl.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.56.121" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "cecelia.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "cecelia.ns.cloudflare.com" } ], "dns_at": "2026-10-18T17:51:57Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "chatgptsmart-skillgpt.click" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "cce2c904f3801ea11f529d655c602f94", "sha256": "ad28329eccff140f9ea4b7ef6918769659b359a8c5d0425e00aa98ac81d9f537", "subject": "chatgptsmart-skillgpt.click", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "whois": { "registrar": "Dynadot, LLC", "registrar_iana_id": "472", "registrar_url": "www.dynadot.com", "created": "2026-06-07T06:57:38Z", "updated": "2026-06-12T06:58:11Z", "expires": "2027-06-07T06:57:38Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "cecelia.ns.cloudflare.com", "earl.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-07T06:57:38Z", "last changed": "2026-06-08T10:06:36Z", "registration": "2026-06-07T06:57:38Z", "registrar expiration": "2027-06-07T06:57:38Z", "last update of RDAP database": "2026-10-14T00:11:08Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-24T08:09:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "chatgptsmart-skillgpt.click" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-24T08:05:11Z", "first": "2026-10-16T23:50:47Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.14, "avg_page_bytes": 12342 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://chatgptsmart-skillgpt.click/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://chatgptsmart-skillgpt.click/", "title": "chat gpt smart-skill gpt | a premium AI | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "chat gpt smart-skill gpt | Premium Automated Trading Suite Overview", "ogSiteName": "chat gpt smart-skill gpt", "themeColor": "#0a2040", "description": "chat gpt smart-skill gpt delivers a premium, AI-driven trading automation overview for professional teams. Explore workflows, governance controls, security practices, and deployment features with clarity.", "twitterCard": "summary", "canonicalUrl": "https://chatgptsmart-skillgpt.click/", "ogDescription": "chat gpt smart-skill gpt delivers a premium overview of automated trading bots and AI-powered assistance, highlighting governance, security, and deployment features for professional traders." }, "trackers": { "requests": 23, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 9, "tls": 24, "wait": 22, "connect": 32, "download": 17 }, "response_ms": 104 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 44987, "co2_grams": 0.0016, "cleaner_than": 39 }, "dns_server": { "ns": [ { "ip": "173.245.59.161", "host": "earl.ns.cloudflare.com" }, { "ip": "162.159.38.135", "host": "cecelia.ns.cloudflare.com" } ], "zone": "chatgptsmart-skillgpt.click" }, "location": { "ip": "185.62.56.121", "asn": "62370", "org": "Snel.com B.V.", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "chatgptsmart-skillgpt.click" }, "dns": { "A": [ "185.62.56.121" ], "NS": [ "cecelia.ns.cloudflare.com", "earl.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"cecelia.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417249841, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.121", "family": 4 }, "redirects": { "chain": [ "https://chatgptsmart-skillgpt.click" ] }, "linked_pages": { "internal_count": 38 }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-06-07T06:57:38Z", "updated": "2026-06-12T06:58:11Z", "expires": "2027-06-07T06:57:38Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "earl.ns.cloudflare.com", "cecelia.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```