# PhishDestroy domain threat record: gaintrixnexute.shop

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gaintrixnexute.shop/
Machine-readable companion: https://phishdestroy.io/domain/gaintrixnexute.shop/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 19:44:47 UTC
- Last availability or vendor check: 2026-10-27 23:00:24 UTC
- Stored record updated: 2026-10-27 23:30:59 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: Dynadot Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-05-06 11:30:12 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019f88dc-11c8-752a-b5b0-f48df380b03a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gaintrixnexute.shop
- Certificate Transparency search: https://crt.sh/?q=%25.gaintrixnexute.shop
- Web Archive lookup: https://web.archive.org/web/*/https://gaintrixnexute.shop/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed gaintrixnexute.shop on its internal blocklist. PhishDestroy first observed the domain on 2026-10-27 and recorded an HTTP 200 response on that date. The recorded page title was "Gaintrix Nexute | AI Trading Platform | Official Website".

How the scam works
The detections suggest the domain could be employed for typical phishing or malware distribution, where a fraudulent site imitates a service to harvest credentials or deliver malicious payloads. No concrete malicious behavior was observed on the captured page, so the assessment relies on vendor flags rather than confirmed abuse.

Evidence
VirusTotal scanned the domain on 2026-10-27 and reported 17 detections from 92 engines, including 14 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked the URL on 2026-10-27 and returned no warning. urlscan.io captured the site on 2026-07-22; its engine score marked it malicious (score 74) while the overall verdict was non‑malicious. Cloudflare Radar on 2026-10-27 flagged the domain as malware and phishing. OTX listed one pulse referencing the domain. PhishDestroy’s internal blocklist marks it as blocked, and external blocklists showed zero matches on the same day.

Infrastructure
The recorded IP address was 188.114.97.1, belonging to the CloudFLARENET‑EU network and associated with Great Britain. The domain was 76 days old at the time of first observation and used the nameservers teagan.ns.cloudflare.com and pranab.ns.cloudflare.com, with DNSSEC not enabled. TLS was provided by a certificate issued by Google Trust Services, valid from 2026-09-01 to 2026-11-30.

What to do
Visitors should avoid entering any credentials, personal data or downloading files from the site. If any login information was submitted, change the associated passwords immediately. Security teams can block gaintrixnexute.shop at firewalls or proxies and monitor outbound traffic to its IP addresses while keeping threat feeds updated.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019f88dc-11c8-752a-b5b0-f48df380b03a/
Cloudflare Radar report: https://radar.cloudflare.com/scan/08dad585-7336-4a4e-accc-93f23f9f144e
Stored capture screenshot: https://urlscan.io/screenshots/019f88dc-11c8-752a-b5b0-f48df380b03a.png
Cloudflare Radar screenshot (2026-10-27T19:48:46Z): https://screenshots.phishdestroy.io/cf/08dad585-7336-4a4e-accc-93f23f9f144e.png
URLScan screenshot (2026-07-21T11:15:20Z): https://screenshots.phishdestroy.io/us/019f8463-1626-772c-abeb-2f36a7f271a1.png
URLScan capture report: https://urlscan.io/result/019f8463-1626-772c-abeb-2f36a7f271a1/
VirusTotal report: https://www.virustotal.com/gui/domain/gaintrixnexute.shop
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gaintrixnexute.shop
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 19:53:59 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019f88dc-11c8-752a-b5b0-f48df380b03a.png
  Captured: 2026-10-27 19:44:47 UTC
- URLScan · 2026-07-21: https://screenshots.phishdestroy.io/us/019f8463-1626-772c-abeb-2f36a7f271a1.png
  Captured: 2026-07-21 11:15:20 UTC
  Source report: https://urlscan.io/result/019f8463-1626-772c-abeb-2f36a7f271a1/
  SHA-256: 98a90ee85f60a0c8f4a7f2862ae5753b5a08f6d13ba444a66145ad9cdb9d2f99
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/08dad585-7336-4a4e-accc-93f23f9f144e.png
  Captured: 2026-10-27 19:48:46 UTC
  Source report: https://radar.cloudflare.com/scan/08dad585-7336-4a4e-accc-93f23f9f144e
  SHA-256: a37370b1277bf0d83b07957aba73c3a9f1fc2e43ba68e760cebf93fab895d030

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T19:53:15Z",
        "uuid": "019f88dc-11c8-752a-b5b0-f48df380b03a",
        "scanned_at": "2026-07-22T08:05:56Z",
        "final_url": "http://gaintrixnexute.shop/",
        "redirects": [
            {
                "to": "https://gaintrixnexute.shop/",
                "from": "http://gaintrixnexute.shop/",
                "status": 307
            },
            {
                "to": "http://gaintrixnexute.shop/",
                "from": "https://gaintrixnexute.shop/",
                "status": 307
            },
            {
                "to": "http://gaintrixnexute.shop/",
                "from": "http://gaintrixnexute.shop/"
            },
            {
                "to": "https://gaintrixnexute.shop/",
                "from": "http://gaintrixnexute.shop/",
                "status": 307
            }
        ],
        "globals": [
            "assert",
            "getRequiredElement",
            "P",
            "S",
            "getRandomNum",
            "getTimeStamp",
            "Dimensions",
            "Config$2",
            "getGlobalConfig",
            "setGlobalConfig",
            "Config$1",
            "Config",
            "setMaxGapCoefficient",
            "setMaxObstacleLength",
            "Status",
            "A11yStrings",
            "RunnerClasses",
            "RunnerSounds",
            "RunnerEvents",
            "updateCanvasScaling",
            "getA11yString",
            "vibrate",
            "createCanvas",
            "decodeBase64ToArrayBuffer",
            "createAdjustedCollisionBox",
            "drawCollisionBoxes",
            "boxCompare",
            "toggleHelpBox",
            "diagnoseErrors",
            "portalSignin",
            "updateForDnsProbe",
            "getMainFrameErrorCssClass",
            "getMainFrameErrorIconCssClass",
            "getSubFrameErrorIconCssClass",
            "shouldShowSuggestionsSummaryList",
            "getSuggestionsSummaryItemCssClass",
            "reloadButtonClick",
            "downloadButtonClick",
            "detailsButtonClick",
            "setAutoFetchState"
        ],
        "domain_age_days": 76,
        "apex_age_days": 76,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 74,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T19:53:17Z",
        "uuid": "08dad585-7336-4a4e-accc-93f23f9f144e",
        "scanned_at": "2026-10-27T19:48:46Z",
        "final_url": "https://gaintrixnexute.shop/",
        "status": 200,
        "history": [
            {
                "url": "https://gaintrixnexute.shop/",
                "status": 200
            }
        ],
        "dom_hash": "4ffb9fd68fd804f8a4cd440a968d54191a8ae92774fa4475ecfc60197c76e82b",
        "doc_hash": "471f454fa9897e5b07f51d201a497e967be7d8985300c9086eebf2e6f1d56e34",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gaintrixnexute.shop",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "gaintrixnexute.shop",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "gaintrixnexute.shop",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            },
            {
                "name": "gaintrixnexute.shop",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.38",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T19:47:31Z",
        "analysis_at": "2026-10-27T15:13:22Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 14,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "first_seen": "2026-05-06T15:57:45Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:d03d"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.37.131"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.208.61"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "pranab.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "pranab.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "teagan.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::6815:2583"
            }
        ],
        "dns_at": "2026-10-27T15:18:51Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "gaintrixnexute.shop"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "78a223835dec54430e5048170a66193b",
            "sha256": "be33c43a8bdbce714a642731563162f5ef07559c435b920b21d44418d90ac7c3",
            "subject": "gaintrixnexute.shop",
            "valid_to": "2026-11-30T16:27:55Z",
            "valid_from": "2026-09-01T15:28:01Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T19:53:32Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gaintrixnexute.shop"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T19:47:53Z",
            "first": "2026-10-13T14:56:02Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.07,
            "avg_page_bytes": 41753
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://gaintrixnexute.shop/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "title": "Gaintrix Nexute | AI Trading Platform | Official Website",
            "robots": "index, follow",
            "themeColor": "#0f0f1a",
            "description": "Gaintrix Nexute offers a crisp look at automated trading bots and AI-driven trading support, emphasizing workflow orchestration, governance, and execution logic with a premium interface.",
            "canonicalUrl": "https://gaintrixnexute.shop/"
        },
        "trackers": {
            "requests": 19,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 9
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 33,
                "wait": 191,
                "connect": 6,
                "download": 26
            },
            "response_ms": 258
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 141513,
            "co2_grams": 0.0052,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.174",
                    "host": "teagan.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.44.199",
                    "host": "pranab.ns.cloudflare.com"
                }
            ],
            "zone": "gaintrixnexute.shop"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gaintrixnexute.shop"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "teagan.ns.cloudflare.com",
                "pranab.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"pranab.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418085090, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=15552000; includeSubDomains; preload",
            "message": "HSTS max-age is 15552000, below the 31536000 minimum."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; script-src 'self' 'unsaf",
            "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gaintrixnexute.shop"
            ]
        },
        "tech_stack": {
            "technologies": [
                "jsDelivr",
                "Cloudflare Turnstile",
                "Cloudflare Rocket Loader",
                "ClientJS",
                "Priority Hints",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "HSTS",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 12
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
                "content-security-policy": "font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```