# PhishDestroy domain threat record: galliongpt.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/galliongpt.digital/
Machine-readable companion: https://phishdestroy.io/domain/galliongpt.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 19:44:56 UTC
- Last availability or vendor check: 2026-10-27 23:00:23 UTC
- Stored record updated: 2026-10-27 23:31:01 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-06 05:34:55 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019f88dc-31ed-7225-8d6b-496aa749c86d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/galliongpt.digital
- Certificate Transparency search: https://crt.sh/?q=%25.galliongpt.digital
- Web Archive lookup: https://web.archive.org/web/*/https://galliongpt.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy lists galliongpt.digital as a suspicious domain based on automated analysis and external detections. The recorded page title claims to be an official AI trading platform. PhishDestroy first observed the domain on 2026-10-27. The page returned HTTP 200 when checked on 2026-10-27, but this does not confirm current behavior or reachability.

How the scam works
The domain’s trading-related page title does not establish the actual mechanism of any scheme. A suspicious listing means the domain exhibits traits commonly associated with risky or deceptive activity, but it does not prove a specific fraud type such as wallet drainers, seed theft, or credential harvesting. Visitors should avoid interacting with the site unless they independently verify its legitimacy.

Evidence
VirusTotal detected the domain as malicious on 2026-10-26 with 1 engine flagging it; 92 engines scanned and 56 marked it harmless, 35 undetected. SOCRadar labeled it phishing. Google Safe Browsing did not flag it on 2026-10-27. Cloudflare Radar classified it as phishing and malware on 2026-10-27. urlscan’s ML engine scored it 99 for maliciousness on 2026-07-22, but the overall verdict was not malicious. PhishDestroy’s internal blocklist includes the domain. OTX recorded 3 pulses on 2026-10-27, indicating mentions but not proof of maliciousness.

Infrastructure
The domain was registered on 2026-04-06 via Dynadot Inc and uses Cloudflare nameservers. The recorded IP is 188.114.97.1 within CloudFLARENET-EU. TLS was valid from 2026-06-04 to 2026-09-02 when checked on 2026-10-27. The listing applies to this exact address and does not identify its operator.

What to do
If you visited the site, avoid entering credentials or downloading files. Review account security only if you submitted information. For organizations, apply access controls to this domain and monitor for related activity. Do not assume other domains or shared infrastructure are implicated.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019f88dc-31ed-7225-8d6b-496aa749c86d/
Cloudflare Radar report: https://radar.cloudflare.com/scan/f6381a2c-ba35-4926-97e9-0e18da93bdcd
Stored capture screenshot: https://urlscan.io/screenshots/019f88dc-31ed-7225-8d6b-496aa749c86d.png
Cloudflare Radar screenshot (2026-10-27T19:48:39Z): https://screenshots.phishdestroy.io/cf/f6381a2c-ba35-4926-97e9-0e18da93bdcd.png
VirusTotal report: https://www.virustotal.com/gui/domain/galliongpt.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=galliongpt.digital
Archived copy: https://web.archive.org/web/20261027194914/https://galliongpt.digital/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 20:20:36 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019f88dc-31ed-7225-8d6b-496aa749c86d.png
  Captured: 2026-10-27 19:44:56 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019f88dc-31ed-7225-8d6b-496aa749c86d.png
  Source report: https://urlscan.io/result/019f88dc-31ed-7225-8d6b-496aa749c86d/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f6381a2c-ba35-4926-97e9-0e18da93bdcd.png
  Captured: 2026-10-27 19:48:39 UTC
  Source report: https://radar.cloudflare.com/scan/f6381a2c-ba35-4926-97e9-0e18da93bdcd
  SHA-256: 6bb931b34e1f79cb25be27ed72b6cda24aa88f8fd0e4a5f450e4a45aba0f311e

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T19:52:42Z",
        "uuid": "019f88dc-31ed-7225-8d6b-496aa749c86d",
        "scanned_at": "2026-07-22T08:06:09Z",
        "final_url": "https://galliongpt.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://galliongpt.digital/",
                "from": "http://galliongpt.digital/",
                "status": 307
            }
        ],
        "ip": "2606:4700:3031::6815:52c8",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "2a04:4e42::485",
            "2607:f8b0:4004:c0b::5f",
            "2606:4700::6811:180e",
            "2606:4700:3031::6815:52c8"
        ],
        "asns": [
            "54113",
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "6ce0444e7d108c95cf619139ad18cabffeca44eb3eb24762e68d5d17ff7e613d",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_qy9t4",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "galliongpt.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "galliongpt.digital",
            "protocol": "QUIC",
            "valid_to": "2026-09-02T11:30:56Z",
            "valid_from": "2026-06-04T10:31:05Z"
        },
        "domain_age_days": 106,
        "apex_age_days": 106,
        "tls_age_days": 47,
        "tls_valid_days": 90,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "connect-src 'self' https://cloudflareinsights.com; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; style-src 'self' 'unsafe-",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "no-referrer-when-downgrade",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T19:52:44Z",
        "uuid": "f6381a2c-ba35-4926-97e9-0e18da93bdcd",
        "scanned_at": "2026-10-27T19:48:39Z",
        "final_url": "https://galliongpt.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://galliongpt.digital/",
                "status": 200
            }
        ],
        "dom_hash": "6dd4c1ff362b2aafd07eb231d45f4faf28172b710649eba19320211ac0e44c12",
        "doc_hash": "9733895efbc72a066becff3d30a49a7c0413570837d071ffcb583d29f76677c9",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "galliongpt.digital",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "galliongpt.digital",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "galliongpt.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            },
            {
                "name": "galliongpt.digital",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.15",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-04-06T07:34:55Z",
            "updated": "2026-08-12T08:03:02Z",
            "expires": "2027-04-06T07:34:55Z",
            "nameservers": [
                "clara.ns.cloudflare.com",
                "chance.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T20:18:11Z",
        "analysis_at": "2026-10-26T15:00:59Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 1,
            "suspicious": 0,
            "undetected": 35
        },
        "detections": {
            "SOCRadar": "phishing"
        },
        "reputation": 0,
        "created": "2026-04-06T00:00:00Z",
        "updated": "2026-04-06T00:00:00Z",
        "first_seen": "2026-04-06T08:39:26Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "clara.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.162.217"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.82.200"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "chance.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "chance.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:a2d9"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::6815:52c8"
            }
        ],
        "dns_at": "2026-10-26T15:06:35Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "galliongpt.digital"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "e14d8a13d3b69cc713a9061302d50b2f",
            "sha256": "6a18e2b66cc6d75b4f4bcfe3ad13ab14f494c255be1c68ee90221f385bb26a73",
            "subject": "galliongpt.digital",
            "valid_to": "2026-12-29T11:58:46Z",
            "valid_from": "2026-09-30T10:58:49Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-04-06T07:34:55Z",
                "last changed": "2026-04-06T08:07:16Z",
                "registration": "2026-04-06T07:34:55Z",
                "registrar expiration": "2027-04-06T07:34:55Z",
                "last update of RDAP database": "2026-10-21T09:17:40Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T19:53:05Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "galliongpt.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T19:49:14Z",
            "first": "2026-10-27T19:49:14Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 42641
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true,
            "sitemaps": [
                "https://galliongpt.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://galliongpt.digital/",
            "title": "Gallion gpt | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Gallion gpt | Premier AI-Driven Trading Automation",
            "ogSiteName": "Gallion gpt",
            "themeColor": "#0e0e0e",
            "description": "Gallion gpt delivers premium, institution-grade automated trading tools guided by AI, with precise execution workflows, risk-aware features, and expert-level decision support.",
            "twitterCard": "summary",
            "canonicalUrl": "https://galliongpt.digital/",
            "ogDescription": "Gallion gpt delivers premium, institution-grade automated trading tools guided by AI, with precise execution workflows, risk-aware features, and expert-level decision support."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 3,
                "tls": 32,
                "wait": 167,
                "connect": 26,
                "download": 17
            },
            "response_ms": 245
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 144523,
            "co2_grams": 0.0053,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.38.219",
                    "host": "clara.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.33",
                    "host": "chance.ns.cloudflare.com"
                }
            ],
            "zone": "galliongpt.digital"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "galliongpt.digital"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "chance.ns.cloudflare.com",
                "clara.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"chance.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418084702, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "frame-ancestors 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; default-src",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://galliongpt.digital"
            ]
        },
        "linked_pages": {
            "internal_count": 14
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "frame-ancestors 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; default-src 'self'; img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src https://challenges.cloudflare.com; style-src 'self' 'unsafe-i",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "no-referrer-when-downgrade",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```