# PhishDestroy domain threat record: gerdstavionix.click

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gerdstavionix.click/
Machine-readable companion: https://phishdestroy.io/domain/gerdstavionix.click/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 21:16:36 UTC
- Last availability or vendor check: 2026-10-27 23:00:24 UTC
- Stored record updated: 2026-10-27 23:55:29 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: celer

## Stored infrastructure

- Observed IP address: 185.62.58.179
- Registrar in stored WHOIS data: NETIM SARL
- Registrar country in stored WHOIS data: FR
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-04-09 05:58:17 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019f7ea1-8009-76c7-8d40-c2994472139a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gerdstavionix.click
- Certificate Transparency search: https://crt.sh/?q=%25.gerdstavionix.click
- Web Archive lookup: https://web.archive.org/web/*/https://gerdstavionix.click/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy placed gerdstavionix.click on its internal blocklist as a suspicious domain. The recorded page title advertised an AI trading platform. The domain was first seen by PhishDestroy on 2026-10-27 and returned an HTTP 200 response at that time. The intake reason cited a trusted report based on the domain’s age of 201 days.

How the scam works
The listing reflects a generic risk associated with suspicious domains that may be used for phishing, credential harvesting, or malware delivery. No specific malicious behavior was observed on the captured page, and the title alone does not prove any affiliation. Such sites typically lure visitors by mimicking legitimate services and prompting the entry of personal data or the download of harmful files.

Evidence
VirusTotal scanned the domain on 2026-10-27 and recorded 16 detections across 92 engines, including 13 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked the site on the same day and did not flag it. urlscan captured the site on 2026-07-20; its machine‑learning engine gave a malicious score of 98, though the overall verdict was clean. Cloudflare Radar marked the domain as malicious with a malware category on 2026-10-27. OTX listed three pulses referencing the domain.

Infrastructure
The domain was registered with NETIM SARL on 2026-04-09, giving it an age of 201 days at first sighting. The recorded IP was 185.62.58.179, associated with Snel.com B.V. in the Netherlands and the domain was fronted by Cloudflare’s CDN. The TLS certificate, issued by ZeroSSL, was valid until 2026-12-17 and used AES‑128‑GCM encryption; DNSSEC was not enabled.

What to do
Avoid entering any credentials or personal information on the site; if you have already done so, change the affected passwords immediately. Network defenders should block connections to gerdstavionix.click and monitor logs for traffic to its recorded IP address. Report any suspicious activity to PhishDestroy and consider adding the domain to internal threat‑intel feeds.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019f7ea1-8009-76c7-8d40-c2994472139a/
Cloudflare Radar report: https://radar.cloudflare.com/scan/aaade0da-b944-4eda-99f0-b425ccdec613
Stored capture screenshot: https://urlscan.io/screenshots/019f7ea1-8009-76c7-8d40-c2994472139a.png
Cloudflare Radar screenshot (2026-10-27T21:17:15Z): https://screenshots.phishdestroy.io/cf/aaade0da-b944-4eda-99f0-b425ccdec613.png
URLScan screenshot (2026-10-27T21:17:09Z): https://screenshots.phishdestroy.io/us/01a17f39-3562-7630-9c32-cf1f07395d26.png
URLScan capture report: https://urlscan.io/result/01a17f39-3562-7630-9c32-cf1f07395d26/
VirusTotal report: https://www.virustotal.com/gui/domain/gerdstavionix.click
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gerdstavionix.click
Archived copy: https://web.archive.org/web/20261027211642/https://gerdstavionix.click/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 21:51:38 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019f7ea1-8009-76c7-8d40-c2994472139a.png
  Captured: 2026-10-27 21:16:36 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/019f7ea1-8009-76c7-8d40-c2994472139a.png
  Source report: https://urlscan.io/result/019f7ea1-8009-76c7-8d40-c2994472139a/
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17f39-3562-7630-9c32-cf1f07395d26.png
  Captured: 2026-10-27 21:17:09 UTC
  Source report: https://urlscan.io/result/01a17f39-3562-7630-9c32-cf1f07395d26/
  SHA-256: 1cab401ced69ec682206cec15a346ef40d94563c1b85874d501b11dcc3ce7e47
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/aaade0da-b944-4eda-99f0-b425ccdec613.png
  Captured: 2026-10-27 21:17:15 UTC
  Source report: https://radar.cloudflare.com/scan/aaade0da-b944-4eda-99f0-b425ccdec613
  SHA-256: 7715cd9b9097c5d246a11f2521a5bbfb593d62b9f52c725747b30a9a47f4ef18

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T21:17:35Z",
        "uuid": "019f7ea1-8009-76c7-8d40-c2994472139a",
        "scanned_at": "2026-07-20T08:25:47Z",
        "final_url": "https://gerdstavionix.click/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gerdstavionix.click/",
                "from": "http://gerdstavionix.click/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "2a04:4e42:200::485",
            "2a00:1450:4001:c0f::5f",
            "104.17.25.14",
            "188.114.97.3"
        ],
        "asns": [
            "54113",
            "15169",
            "13335"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "9d23a6dfd2bfc845988c769a72892fd9fa655d2f616e77794699d05c473b211d",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_p7w1t",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "gerdstavionix.click"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gerdstavionix.click",
            "protocol": "QUIC",
            "valid_to": "2026-09-05T13:47:33Z",
            "valid_from": "2026-06-07T12:47:38Z"
        },
        "domain_age_days": 101,
        "apex_age_days": 101,
        "tls_age_days": 42,
        "tls_valid_days": 90,
        "requests": 16,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T21:36:27Z",
        "uuid": "aaade0da-b944-4eda-99f0-b425ccdec613",
        "scanned_at": "2026-10-27T21:17:15Z",
        "final_url": "https://gerdstavionix.click/",
        "status": 200,
        "history": [
            {
                "url": "https://gerdstavionix.click/",
                "status": 200
            }
        ],
        "dom_hash": "d582c828819cc63033346a36fb7aea5231848e577f22a54eccb8bea82a9beb5b",
        "doc_hash": "d1922a4eec48de2efb4d914e71e6a6ba6cf70d9c3bfdce20014cf4c19ca3cbf7",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gerdstavionix.click",
                "type": "A",
                "value": "185.62.58.179"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.13",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "NETIM SARL",
            "created": "2026-04-09T07:58:17Z",
            "updated": "2026-04-14T07:59:05Z",
            "expires": "2027-04-09T07:58:17Z",
            "nameservers": [
                "kay.ns.cloudflare.com",
                "javier.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T21:48:08Z",
        "analysis_at": "2026-10-27T13:20:37Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "NETIM",
        "created": "2026-04-09T07:58:17Z",
        "expires": "2027-04-09T07:58:17Z",
        "updated": "2026-04-14T07:59:05Z",
        "first_seen": "2026-04-09T08:52:04Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "javier.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "kay.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.58.179"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "javier.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-27T13:25:57Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "gerdstavionix.click"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "4782ead9156725d4531fad714f233ed",
            "sha256": "1d5fc3aedca9f1050506bc7fce8d8817ebb8fde3b8b86390fe9b688a67fac688",
            "subject": "gerdstavionix.click",
            "valid_to": "2026-12-17T23:59:59Z",
            "valid_from": "2026-09-18T00:00:00Z"
        },
        "whois": {
            "registrar": "NETIM",
            "registrar_iana_id": "1519",
            "registrar_url": "https://www.netim.com",
            "created": "2026-04-09T00:00:00Z",
            "updated": "2026-04-09T09:58:14Z",
            "expires": "2027-04-09T21:00:00Z",
            "status": [
                "clientTransferProhibited",
                "ok"
            ],
            "nameservers": [
                "javier.ns.cloudflare.com",
                "kay.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "active",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-04-09T21:00:00Z",
                "last changed": "2026-04-09T09:58:14Z",
                "registration": "2026-04-09T00:00:00Z",
                "registrar expiration": "2027-04-09T21:00:00Z",
                "last update of RDAP database": "2026-10-21T01:24:09Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T21:18:04Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gerdstavionix.click"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T21:16:42Z",
            "first": "2026-10-12T07:58:26Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.06,
            "avg_page_bytes": 12525
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://gerdstavionix.click/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "title": "Gerd Stavionix | AI Trading Platform | Official Website",
            "robots": "index, follow",
            "description": "Gerd Stavionix delivers premium AI-driven trading insights, automated bots, and configurable execution controls with robust monitoring and enterprise-grade reliability.",
            "canonicalUrl": "https://gerdstavionix.click/"
        },
        "trackers": {
            "requests": 19,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 21,
                "tls": 75,
                "wait": 40,
                "connect": 100,
                "download": 1
            },
            "response_ms": 237
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 43914,
            "co2_grams": 0.0016,
            "cleaner_than": 40
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.204",
                    "host": "javier.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.58.125",
                    "host": "kay.ns.cloudflare.com"
                }
            ],
            "zone": "gerdstavionix.click"
        },
        "location": {
            "ip": "185.62.58.179",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "gerdstavionix.click"
        },
        "dns": {
            "A": [
                "185.62.58.179"
            ],
            "NS": [
                "javier.ns.cloudflare.com",
                "kay.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"javier.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416692823, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.58.179",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://gerdstavionix.click"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "whois": {
            "registrar": "NETIM SARL",
            "created": "2026-04-09T07:58:17Z",
            "updated": "2026-04-14T07:59:05Z",
            "expires": "2027-04-09T07:58:17Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "kay.ns.cloudflare.com",
                "javier.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```