# PhishDestroy domain threat record: geldix-ai-tech.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/geldix-ai-tech.com/ Machine-readable companion: https://phishdestroy.io/domain/geldix-ai-tech.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-27 19:46:55 UTC - Last availability or vendor check: 2026-10-27 23:00:28 UTC - Stored record updated: 2026-10-27 23:45:20 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.97.1 - Registrar in stored WHOIS data: MainReg Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-04 08:15:02 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0b61a-ba31-73ed-8274-deb3dfe6f2e5/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/geldix-ai-tech.com - Certificate Transparency search: https://crt.sh/?q=%25.geldix-ai-tech.com - Web Archive lookup: https://web.archive.org/web/*/https://geldix-ai-tech.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed geldix-ai-tech.com as a suspicious domain based on automated analysis. The recorded page title reads “Geldix Ai | Compliance Rewriting Agent | Official Website”. The domain was first seen by PhishDestroy on 2026-10-27 when an HTTP 200 response was recorded. How the scam works No specific malicious behavior was observed on the page, so the listing does not confirm a particular fraud technique. Domains flagged as suspicious are often used to host phishing pages, deliver malware, or harvest credentials. Visitors who are prompted to enter personal or financial information should treat the site as untrusted. The risk stems from the possibility that the site could later be repurposed for such attacks. Evidence VirusTotal scanned the domain on 2026-10-27 with 92 engines and reported zero detections. Google Safe Browsing checked on the same date and did not flag the site. OTX listed one pulse referencing the domain on 2026-10-27. PhishDestroy’s internal blocklist marked the domain as suspicious, while external blocklists returned no hits. urlscan.io captured the site on 2026-09-18; its engine analysis gave a malicious score of 98 but the overall verdict was non‑malicious. Cloudflare Radar scanned on 2026-10-27 and returned a malicious verdict with a malware category. Infrastructure The domain was registered on 2026-03-04 through MainReg Inc., giving it an age of 237 days at first sighting. The recorded DNS records listed Cloudflare‑provided IPv4 addresses 188.114.96.3 and 188.114.97.3 and IPv6 addresses 2a06:98c1:3120::3 and 2a06:98c1:3121::3. The site used Cloudflare’s CDN and presented a TLS certificate issued by Google Trust Services, valid until 2026-11-27. Nameservers were emily.ns.cloudflare.com and javier.ns.cloudflare.com; DNSSEC was not enabled. What to do Do not submit credentials, seed phrases or private keys to the site; if any were entered, change the associated passwords and consider revoking any granted access. Network defenders should block the exact domain, monitor outbound traffic for connections to it, and log any retrieval attempts. Review security tools regularly for updates on this domain and treat any interaction as potentially unsafe until further investigation confirms it is benign. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a0b61a-ba31-73ed-8274-deb3dfe6f2e5/ Cloudflare Radar report: https://radar.cloudflare.com/scan/257d6839-4530-4ee7-85e9-0c599feece5d Stored capture screenshot: https://urlscan.io/screenshots/01a0b61a-ba31-73ed-8274-deb3dfe6f2e5.png Cloudflare Radar screenshot (2026-10-27T19:57:59Z): https://screenshots.phishdestroy.io/cf/257d6839-4530-4ee7-85e9-0c599feece5d.png URLScan screenshot (2026-03-05T18:27:34Z): https://screenshots.phishdestroy.io/us/019cbf41-3527-77ae-8d18-cb78f83346d8.png URLScan capture report: https://urlscan.io/result/019cbf41-3527-77ae-8d18-cb78f83346d8/ URLScan screenshot (2026-05-02T14:17:42Z): https://screenshots.phishdestroy.io/us/019de90d-493e-732e-9189-9c311fe0531b.png URLScan capture report: https://urlscan.io/result/019de90d-493e-732e-9189-9c311fe0531b/ URLScan screenshot (2026-06-30T15:38:47Z): https://screenshots.phishdestroy.io/us/019f192e-baa1-7192-b2cc-aaebac315b73.png URLScan capture report: https://urlscan.io/result/019f192e-baa1-7192-b2cc-aaebac315b73/ URLScan screenshot (2026-07-10T23:19:59Z): https://screenshots.phishdestroy.io/us/019f4e54-93c0-7441-87e1-9a2b30907bb0.png URLScan capture report: https://urlscan.io/result/019f4e54-93c0-7441-87e1-9a2b30907bb0/ URLScan screenshot (2026-08-28T16:54:16Z): https://screenshots.phishdestroy.io/us/01a0494b-0973-760b-8ef0-1b2135a30504.png URLScan capture report: https://urlscan.io/result/01a0494b-0973-760b-8ef0-1b2135a30504/ URLScan screenshot (2026-10-27T19:31:47Z): https://screenshots.phishdestroy.io/us/01a17ed8-ce45-7449-947e-c595dc07e685.png URLScan capture report: https://urlscan.io/result/01a17ed8-ce45-7449-947e-c595dc07e685/ VirusTotal report: https://www.virustotal.com/gui/domain/geldix-ai-tech.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=geldix-ai-tech.com Archived copy: https://web.archive.org/web/20261027195109/https://geldix-ai-tech.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 20:03:05 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a0b61a-ba31-73ed-8274-deb3dfe6f2e5.png Captured: 2026-10-27 19:46:55 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0b61a-ba31-73ed-8274-deb3dfe6f2e5.png Source report: https://urlscan.io/result/01a0b61a-ba31-73ed-8274-deb3dfe6f2e5/ - URLScan · 2026-03-05: https://screenshots.phishdestroy.io/us/019cbf41-3527-77ae-8d18-cb78f83346d8.png Captured: 2026-03-05 18:27:34 UTC Source report: https://urlscan.io/result/019cbf41-3527-77ae-8d18-cb78f83346d8/ SHA-256: f4132c3b5708fb67b5581ede45603b6eb2ddf0a0185199257963ec57702822a3 - URLScan · 2026-05-02: https://screenshots.phishdestroy.io/us/019de90d-493e-732e-9189-9c311fe0531b.png Captured: 2026-05-02 14:17:42 UTC Source report: https://urlscan.io/result/019de90d-493e-732e-9189-9c311fe0531b/ SHA-256: 2407d99e263a822e92382f45eb5e888be596b4c5c9f86a6f1164991e0b426342 - URLScan · 2026-06-30: https://screenshots.phishdestroy.io/us/019f192e-baa1-7192-b2cc-aaebac315b73.png Captured: 2026-06-30 15:38:47 UTC Source report: https://urlscan.io/result/019f192e-baa1-7192-b2cc-aaebac315b73/ SHA-256: 24ae1d6c1cc8ff72acfdb335ed102451b2818f106488c8f744b8d67ff1937b2f - URLScan · 2026-07-10: https://screenshots.phishdestroy.io/us/019f4e54-93c0-7441-87e1-9a2b30907bb0.png Captured: 2026-07-10 23:19:59 UTC Source report: https://urlscan.io/result/019f4e54-93c0-7441-87e1-9a2b30907bb0/ SHA-256: 1d1b29a296ab72a45ae79bbbb6e5edfc60e4c388c8202c7e3cdb1d89ba210ae9 - URLScan · 2026-08-28: https://screenshots.phishdestroy.io/us/01a0494b-0973-760b-8ef0-1b2135a30504.png Captured: 2026-08-28 16:54:16 UTC Source report: https://urlscan.io/result/01a0494b-0973-760b-8ef0-1b2135a30504/ SHA-256: 407f40bb7ccaee84c056bdc8e28cc1248fc948e8012474e93e9030aee26a0384 - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17ed8-ce45-7449-947e-c595dc07e685.png Captured: 2026-10-27 19:31:47 UTC Source report: https://urlscan.io/result/01a17ed8-ce45-7449-947e-c595dc07e685/ SHA-256: 1d1b29a296ab72a45ae79bbbb6e5edfc60e4c388c8202c7e3cdb1d89ba210ae9 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/257d6839-4530-4ee7-85e9-0c599feece5d.png Captured: 2026-10-27 19:57:59 UTC Source report: https://radar.cloudflare.com/scan/257d6839-4530-4ee7-85e9-0c599feece5d SHA-256: 07bf0915249cdf5308e1c60b7c3444ff1546e35e94626260e32ec550a946defe ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T20:02:02Z", "uuid": "01a0b61a-ba31-73ed-8274-deb3dfe6f2e5", "scanned_at": "2026-09-18T20:00:05Z", "final_url": "https://geldix-ai-tech.com/", "status": 200, "ip": "188.114.96.3", "domains": [ "cdnjs.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflare.com" ], "ips": [ "2606:4700::6811:d005", "2a00:1450:4001:c17::5f", "104.17.25.14", "188.114.96.3" ], "asns": [ "13335", "15169" ], "countries": [ "US", "DE" ], "doc_hash": "b879a8de7ac6311a5223c91906f09f1afcd21adf1238674f53d478723cd7f729", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_p98ihd63", "toggleTermsPopup", "__cfQR", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "geldix-ai-tech.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "geldix-ai-tech.com", "protocol": "QUIC", "valid_to": "2026-11-27T19:16:43Z", "valid_from": "2026-08-29T18:16:45Z" }, "domain_age_days": 198, "apex_age_days": 198, "tls_age_days": 20, "tls_valid_days": 90, "requests": 17, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "img-src 'self' data: blob:; default-src 'self'; frame-ancestors 'self'; connect-src 'self' https://cloudflareinsights.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T20:02:05Z", "uuid": "257d6839-4530-4ee7-85e9-0c599feece5d", "scanned_at": "2026-10-27T19:57:59Z", "final_url": "https://geldix-ai-tech.com/", "status": 200, "history": [ { "url": "https://geldix-ai-tech.com/", "status": 200 } ], "dom_hash": "e12305b0ded2a26d1eccea3f4586de57dae206e8bbb7c4bf557f0003f7fc185b", "doc_hash": "8060e72e1ac0ac6e70ff422c03dba0c997360e1237dd2acb6f05b085472fedb1", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "geldix-ai-tech.com", "type": "A", "value": "188.114.96.2" }, { "name": "geldix-ai-tech.com", "type": "A", "value": "188.114.97.2" }, { "name": "geldix-ai-tech.com", "type": "AAAA", "value": "2a06:98c1:3121::2" }, { "name": "geldix-ai-tech.com", "type": "AAAA", "value": "2a06:98c1:3120::2" } ], "dnssec_valid": false, "ip": "127.0.1.5", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "MainReg Inc.", "created": "2026-03-04T09:15:02Z", "updated": "2026-03-04T13:14:02Z", "expires": "2027-03-04T09:15:02Z", "nameservers": [ "emily.ns.cloudflare.com", "javier.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-27T19:56:31Z", "analysis_at": "2026-10-27T10:24:22Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "tags": [ "dga" ], "created": "2026-03-04T00:00:00Z", "updated": "2026-03-04T00:00:00Z", "first_seen": "2026-03-04T13:35:09Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:24da" }, { "ttl": 21600, "type": "NS", "value": "javier.ns.cloudflare.com" }, { "ttl": 300, "type": "MX", "value": "mail.geldix-ai-tech.com", "priority": 10 }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:c7c5" }, { "ttl": 21600, "type": "NS", "value": "emily.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.36.218" }, { "ttl": 300, "type": "TXT", "value": "google-site-verification=lIFG8Wxy-Zq7P0Q5nwxPP5CnzTHMUYOINDPynZRnz3Y" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "emily.ns.cloudflare.com" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 ip4:46.166.131.92 ~all" }, { "ttl": 300, "type": "A", "value": "172.67.199.197" } ], "dns_at": "2026-10-27T10:26:24Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "geldix-ai-tech.com" ], "issuer": "Google Trust Services / WE1", "serial": "209bb12857dbb5170e3d5ce4b342a303", "sha256": "9677dccde7ba5255dbc62d79eae208175f17557e9395bf9860e498ada4c6fb64", "subject": "geldix-ai-tech.com", "valid_to": "2026-11-27T19:16:43Z", "valid_from": "2026-08-29T18:16:45Z" }, "whois": [], "rdap": { "status": [ "active" ], "events": { "last changed": "2026-03-04T00:00:00Z", "registration": "2026-03-04T00:00:00Z", "registrar expiration": "2027-03-04T00:00:00Z", "last update of RDAP database": "2026-10-27T00:07:00Z" }, "registrar": "MainReg Inc.", "registrar_iana_id": "1917" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T20:02:20Z", "mail_config": { "mx": [ "mail.geldix-ai-tech.com" ], "spf": "v=spf1 ip4:46.166.131.92 ~all", "spf_lookups": 0 }, "caa_records": { "domain": "geldix-ai-tech.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-27T19:51:09Z", "first": "2026-10-27T19:51:09Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 42892 }, "robots_txt": { "agents": [ "*", "Amazonbot", "Applebot-Extended", "Bytespider", "CCBot" ], "present": true, "sitemaps": [ "https://geldix-ai-tech.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 175 }, "social_tags": { "ogUrl": "https://geldix-ai-tech.com/", "title": "Geldix Ai | Compliance Rewriting Agent | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "Geldix Ai | Market Education Overview", "ogSiteName": "Geldix Ai", "themeColor": "#000000", "description": "Geldix Ai offers an informational overview of market concepts, educational resources, and risk-awareness materials, with clear feature listings and FAQs for foundational understanding.", "twitterCard": "summary", "canonicalUrl": "https://geldix-ai-tech.com/", "ogDescription": "Geldix Ai offers an informational overview of market concepts, educational resources, and risk-awareness materials, with clear feature listings and FAQs for foundational understanding." }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 30, "tls": 48, "wait": 238, "connect": 8, "download": 12 }, "response_ms": 336 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 146745, "co2_grams": 0.0054, "cleaner_than": 14 }, "dns_server": { "ns": [ { "ip": "173.245.58.155", "host": "emily.ns.cloudflare.com" }, { "ip": "108.162.195.204", "host": "javier.ns.cloudflare.com" } ], "zone": "geldix-ai-tech.com" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "geldix-ai-tech.com" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "MX": [ "{\"exchange\": \"mail.geldix-ai-tech.com\", \"priority\": 10}" ], "NS": [ "emily.ns.cloudflare.com", "javier.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"emily.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418529082, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "google-site-verification=lIFG8Wxy-Zq7P0Q5nwxPP5CnzTHMUYOINDPynZRnz3Y", "v=spf1 ip4:46.166.131.92 ~all" ], "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com;", "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://geldix-ai-tech.com" ] }, "tech_stack": { "technologies": [ "jsDelivr", "Cloudflare Turnstile", "Cloudflare Rocket Loader", "ClientJS", "Priority Hints", "Google Font API", "Font Awesome", "cdnjs", "HSTS", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 50 }, "whois": { "registrar": "MainReg Inc.", "created": "2026-03-04T09:15:02Z", "updated": "2026-03-04T13:14:02Z", "expires": "2027-03-04T09:15:02Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "emily.ns.cloudflare.com", "javier.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "img-src 'self' data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; default-src 'self'; frame-ancestors 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com; font-s", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```