# gnvmt.com: Spakas Pips Trade investment homepage capture | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/gnvmt.com/ Machine-readable companion: https://phishdestroy.io/domain/gnvmt.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-31 22:05:11 UTC - Last availability or vendor check: 2026-10-31 22:27:43 UTC - Stored record updated: 2026-10-31 23:31:31 UTC - VirusTotal detections in the stored snapshot: 6/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 102.130.123.45 - Registrar in stored WHOIS data: Host Africa (Pty.) Ltd. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2025-06-27 20:45:07 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19411-9065-74c1-990a-dc42cd7101a0/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/gnvmt.com - Certificate Transparency search: https://crt.sh/?q=%25.gnvmt.com - Web Archive lookup: https://web.archive.org/web/*/https://gnvmt.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records the gnvmt.com homepage, branded Spakas Pips Trade, promoting investment and broker services. The captured gnvmt.com homepage presents itself as Spakas Pips Trade, an investment and trading brand. A hero banner invites visitors to "Manage and Grow Your Investments" with an "ACCOUNT" button, while an "About Spakas Pips Trade" section describes connecting with a broker and links to a "Read More" page. A "GET STARTED NOW!" button in the header offers the main call to action. The stored VirusTotal domain result reports 6 detections out of 92 engines. CRDF reported "malicious"; ESET reported "suspicious". Package revision: 0dd3640400922703eebc9bed981a9c8c92040438fd93b5172a972166e8adfdaf Text generated (not scan time): 2026-10-31 23:11:18 Reviewed evidence snapshot: {"domain":"gnvmt.com","screenshot_available":true,"page_title":"Spakas Pips Trade","original_meta_description":"Spakas Pips Trade LIMITED??? INVEST IN A LEADING TRADE AND INVESTMENT COMPANY, OPERATING IN THE UK. SERVICES INCLUDE: FOREX TRADING CRYPTOCURRENCIES, STOCKS & COMMODITIES INVESTMENTS. OIL & GAS, REAL ESTATE INVESTMENTS, MARKET RESEARCH AND ANALYSIS: ASSISTING BOTH INDIVIDUALS & COMPANIES INVEST IN","initial_ai_description":"The website presents itself as an investment platform offering 'Guaranteed ROIs' and 'Professional Investment Investment services tailored to meet your individual needs.' This language is characteristic of fraudulent investment schemes designed to lure victims with promises of high returns.","metadata_observed_on":"2026-10-31","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":6,"engines":92,"malicious":4,"suspicious":2,"retrieved_date":"2026-10-31","analysis_date":"2026-10-31","flagging_vendors":["CRDF","ESET","G-Data","Netcraft","BitDefender","alphaMountain.ai"],"vendor_labels":{"CRDF":"malicious","ESET":"suspicious","G-Data":"phishing","Netcraft":"malicious","BitDefender":"phishing","alphaMountain.ai":"suspicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-31T22:08:09Z","final_host":"gnvmt.com","captured_on":"2026-10-31"},"virustotal_public_summary":"The stored VirusTotal domain result reports 6 detections out of 92 engines. CRDF reported \"malicious\"; ESET reported \"suspicious\".","page_paragraph_target_characters":518} Source facts (timestamps as stored): {"record_id":1723999,"first_recorded_at":"2026-10-31 23:05:11","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":6,"denominator":92,"malicious":4,"suspicious":2,"vendors":{"CRDF":"malicious","ESET":"suspicious","G-Data":"phishing","Netcraft":"malicious","BitDefender":"phishing","alphaMountain.ai":"suspicious"},"observed_at":"2026-10-31T09:14:37Z","checked_at":"2026-10-31 23:07:25","fetched_at":"2026-10-31T22:07:16Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":6,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","ESET","G-Data","Netcraft"],"observed_at":"2026-10-31 09:14:37","checked_at":"2026-10-31 23:07:25","fetched_at":"2026-10-31 22:07:26","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-31 23:07:39"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-01 00:30:30"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-31 23:27:43"}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a19411-9065-74c1-990a-dc42cd7101a0.png Captured: 2026-10-31 22:27:43 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1867b-e74b-768d-8548-ada9a90c5a47.png Captured: 2026-10-31 22:05:11 UTC Source report: https://urlscan.io/result/01a19411-9065-74c1-990a-dc42cd7101a0/ - URLScan · 2026-01-01: https://screenshots.phishdestroy.io/us/019b7972-318e-7181-94fa-b4dd62cc9850.png Captured: 2026-01-01 12:04:50 UTC Source report: https://urlscan.io/result/019b7972-318e-7181-94fa-b4dd62cc9850/ SHA-256: 0ea6b173d25cbb4ef28c66b54e00056fe28a228a59a0be61ad1e51113a73fa02 - URLScan · 2026-05-23: https://screenshots.phishdestroy.io/us/019e5403-0fc2-76eb-9fce-859b9087dd8c.png Captured: 2026-05-23 08:45:57 UTC Source report: https://urlscan.io/result/019e5403-0fc2-76eb-9fce-859b9087dd8c/ SHA-256: f27c8be08e6cb011b1d1b4984eea47fe7fed61c8507bd899cd1e03d40b0a8e82 - URLScan · 2026-08-14: https://screenshots.phishdestroy.io/us/01a00157-dd4a-754b-bb04-97affb9f63d3.png Captured: 2026-08-14 17:35:38 UTC Source report: https://urlscan.io/result/01a00157-dd4a-754b-bb04-97affb9f63d3/ SHA-256: f60fc374a4eaedf6898661d8793f768ee23dbaf26aa34604a818942f93b757b2 - URLScan · 2026-09-10: https://screenshots.phishdestroy.io/us/01a088cb-dba2-742f-8361-30f722ca5b80.png Captured: 2026-09-10 00:51:05 UTC Source report: https://urlscan.io/result/01a088cb-dba2-742f-8361-30f722ca5b80/ SHA-256: 67282bbb3c192a8dc2744e2d03558072db3f0680cbbcfc4e1ccde827b221fd4b - URLScan · 2026-10-09: https://screenshots.phishdestroy.io/us/01a11e3a-9683-760d-8b57-9181c129b731.png Captured: 2026-10-09 01:15:32 UTC Source report: https://urlscan.io/result/01a11e3a-9683-760d-8b57-9181c129b731/ SHA-256: 3d8939dc0dcbd19c2248d33af84a4e4b0009d34f268efde917cfb6cf80519987 - URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a189b6-67e9-761e-80a3-456cf07694c5.png Captured: 2026-10-29 22:10:05 UTC Source report: https://urlscan.io/result/01a189b6-67e9-761e-80a3-456cf07694c5/ SHA-256: c22a22dea7d27e308baae09b24b067fe9fc24195417dc8184c6c4b195e6d3785 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8e538b7a-4fad-4e61-bb8b-73e90730a28a.png Captured: 2026-10-31 22:08:09 UTC Source report: https://radar.cloudflare.com/scan/8e538b7a-4fad-4e61-bb8b-73e90730a28a SHA-256: 715b03dd82bdfe408055f07962c6e8cabd6ed6e1582996c6ef969d3f32d94559 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-31T23:07:55Z", "uuid": "01a19411-9065-74c1-990a-dc42cd7101a0", "scanned_at": "2026-10-31T22:26:06Z", "final_url": "http://gnvmt.com/", "status": 200, "redirects": [ { "to": "https://gnvmt.com/", "from": "http://gnvmt.com/", "status": 307 }, { "to": "http://gnvmt.com/", "from": "https://gnvmt.com/", "status": 307 } ], "ip": "102.130.123.45", "ptr": "wp63.host-ww.net", "domains": [ "www.youtube.com", "coin-images.coingecko.com", "fonts.gstatic.com", "jnn-pa.googleapis.com", "googleads.g.doubleclick.net", "www.cryptocompare.com", "static.getbutton.io", "use.fontawesome.com", "i.ytimg.com", "www.google.com", "static.doubleclick.net", "widgets.cryptocompare.com", "api.coingecko.com", "fonts.googleapis.com", "widgets.coingecko.com", "code.tidio.co", "translate.google.com" ], "ips": [ "2001:4860:4844:400::", "2001:4860:4822:600::", "142.251.152.119", "142.251.155.4", "2a00:1450:4001:c15::95", "142.251.20.154", "104.18.31.136", "172.67.142.173", "2606:4700:20::681a:fdd", "2001:4860:4829:400::", "20.126.215.223", "172.66.172.219", "142.251.127.94", "2a00:1450:4001:c15::5f", "104.18.5.118" ], "asns": [ "15169", "13335", "8075", "328364" ], "countries": [ "US", "DE", "NL", "ZA" ], "link_domains": [ "www.blockchain.com", "www.cryptocompare.com" ], "doc_hash": "f4bfc84ede8d0310ed91355c1c11dbf4d23430bc6aa625d2c5ab14f8e03b14f4", "script_hashes": [ "160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef", "587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560", "eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267", "23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b", "1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b", "f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02", "96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44", "186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c", "f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d" ], "globals": [ "$", "jQuery", "Popper", "bootstrap", "moment", "EvEmitter", "imagesLoaded", "__core-js_shared__", "core", "nav", "functionConfirm", "scripts", "embedder", "baseUrl", "googleTranslateElementInit", "changeLanguageByButtonClick", "changeLanguageByButtonClick2", "fabric", "saveAs", "XLSX", "XLS", "cccCurrentTheme", "cccCreateCSSSelector", "cccglobal_data", "cccupdating", "cccloading_counter", "cccfsym", "ccctsym", "cccscale", "ccclimit", "cccperiod", "cccaggregate", "cccminPeriod", "cccforceAll", "cccchart_type", "chartBTC", "colors", "validateCheckboxes", "cccUpdateChart", "cccRedrawChart" ], "cookies": [ "XSRF-TOKEN", "spakas_pips_trade_session", "__Secure-YNID", "YSC", "__Secure-ROLLOUT_TOKEN", "VISITOR_INFO1_LIVE", "VISITOR_PRIVACY_METADATA", "__cf_bm" ], "domain_age_days": 490, "apex_age_days": 490, "requests": 82, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericscam" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Scam" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.1.34" } }, "cf": { "v": 1, "fetched_at": "2026-10-31T22:09:57Z", "uuid": "8e538b7a-4fad-4e61-bb8b-73e90730a28a", "scanned_at": "2026-10-31T22:08:09Z", "final_url": "https://gnvmt.com/", "status": 200, "history": [ { "url": "https://gnvmt.com/", "status": 200 } ], "dom_hash": "30aba99a5db3fb40bc21e2ccafa656f4272866ebd635bf56c7e4b18bf252957c", "doc_hash": "ed6980a540c22621dc14bbed1977be7648376c32b2ab65e98d83ed5f7bdd679e", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "gnvmt.com", "type": "A", "value": "102.130.123.45" } ], "dnssec_valid": false, "ip": "127.0.1.1", "whois": { "registrar": "Host Africa (Pty.) Ltd.", "created": "2025-06-27T22:45:07Z", "updated": "2026-07-04T04:33:09Z", "expires": "2027-06-27T22:45:07Z", "nameservers": [ "ns1.host-ww.net", "ns2.host-ww.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-31T22:07:16Z", "analysis_at": "2026-10-31T09:14:37Z", "stats": { "timeout": 0, "harmless": 50, "malicious": 4, "suspicious": 2, "undetected": 36 }, "detections": { "CRDF": "malicious", "ESET": "suspicious", "G-Data": "phishing", "Netcraft": "malicious", "BitDefender": "phishing", "alphaMountain.ai": "suspicious" }, "reputation": 0, "categories": { "Google": "transportation", "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "registrar": "Host Africa (Pty.) Ltd.", "created": "2025-06-27T22:45:07Z", "expires": "2027-06-27T22:45:07Z", "updated": "2026-09-03T02:16:13Z", "first_seen": "2024-03-06T08:11:52Z", "dns": [ { "ttl": 14400, "type": "A", "value": "102.130.123.45" }, { "ttl": 21600, "type": "SOA", "rname": "root.wp63.host-ww.net", "value": "ns1.host-ww.net" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 ip4:102.130.123.45 include:spf.antispamcloud.com include:spf.host-ww.net +a +mx ~all" }, { "ttl": 14400, "type": "MX", "value": "gnvmt.com", "priority": 0 }, { "ttl": 21600, "type": "NS", "value": "ns2.host-ww.net" }, { "ttl": 21600, "type": "NS", "value": "ns1.host-ww.net" } ], "dns_at": "2026-10-31T09:58:44Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "*.gnvmt.com", "gnvmt.com", "gnvmt.com.prrrc.com", "www.gnvmt.com.prrrc.com" ], "issuer": "Let's Encrypt / YR2", "serial": "6768d2dd21707fa37cb17aa0387eccdca6d", "sha256": "b2b0d9093f668d8f82e9132b76bdda40b322e2c663fcee3ba0ebb916a59751ad", "subject": "gnvmt.com.prrrc.com", "valid_to": "2026-12-05T10:36:54Z", "valid_from": "2026-09-06T10:36:55Z" }, "whois": { "registrar": "Host Africa (Pty.) Ltd.", "registrar_iana_id": "664", "registrar_url": "http://hostafrica.com", "created": "2025-06-27T22:45:07Z", "updated": "2026-07-04T04:33:09Z", "expires": "2027-06-27T22:45:07Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.host-ww.net", "ns2.host-ww.net" ], "dnssec": "Unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-06-27T22:45:07Z", "last changed": "2026-07-04T04:33:09Z", "registration": "2025-06-27T22:45:07Z", "last update of RDAP database": "2026-10-27T13:16:28Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-31T22:10:47Z", "mail_config": { "mx": [ "gnvmt.com" ], "spf": "v=spf1 ip4:102.130.123.45 include:spf.antispamcloud.com include:spf.host-ww.net +a +mx ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 5 }, "caa_records": { "domain": "gnvmt.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-31T22:05:50Z", "first": "2025-07-11T14:00:44Z", "changes": 1, "days_archived": 2, "scans_per_day": 0, "avg_page_bytes": 6408 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "Spakas Pips Trade", "ogType": "website", "ogImage": "https://gnvmt.com/storage/app/public/photos/4HGy5pD4aSVggy1mI2Cr2zYo2uAidYnIJGrsVoN9.png", "ogTitle": "Trading With Spakas Pips Trade", "keywords": "Spakas Pips Trade", "ogSiteName": "Spakas Pips Trade", "themeColor": "#FCB42D", "description": "Spakas Pips Trade LIMITED???\nINVEST IN A LEADING\nTRADE AND INVESTMENT\nCOMPANY, OPERATING IN\nTHE UK. \nSERVICES INCLUDE: FOREX TRADING\nCRYPTOCURRENCIES, STOCKS & COMMODITIES INVESTMENTS. OIL & GAS, REAL ESTATE INVESTMENTS, MARKET\nRESEARCH AND ANALYSIS:\nASSISTING BOTH INDIVIDUALS & COMPANIES INVEST IN", "ogDescription": "Spakas Pips Trade LIMITED???\nINVEST IN A LEADING\nTRADE AND INVESTMENT\nCOMPANY, OPERATING IN\nTHE UK. \nSERVICES INCLUDE: FOREX TRADING\nCRYPTOCURRENCIES, STOCKS & COMMODITIES INVESTMENTS. OIL & GAS, REAL ESTATE INVESTMENTS, MARKET\nRESEARCH AND ANALYSIS:\nASSISTING BOTH INDIVIDUALS & COMPANIES INVEST IN" }, "mixed_content": { "no_sri": [ "https://widgets.coingecko.com/coingecko-coin-price-marquee-widget.js", "https://translate.google.com/translate_a/elementa0d8.js", "https://code.tidio.co/ggsggsgggg" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 374, "tls": 211, "wait": 1485, "connect": 188, "download": 185 }, "response_ms": 2443 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 40562, "co2_grams": 0.0015, "cleaner_than": 41 }, "dns_server": { "ns": [ { "ip": "195.110.43.170", "host": "ns2.host-ww.net" }, { "ip": "169.239.180.4", "host": "ns1.host-ww.net" } ], "zone": "gnvmt.com" }, "location": { "ip": "102.130.123.45", "asn": "328364", "org": "Host Africa Pty Ltd", "city": "Emfuleni", "country": "ZA" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "gnvmt.com.prrrc.com" }, "dns": { "A": [ "102.130.123.45" ], "MX": [ "{\"exchange\": \"gnvmt.com\", \"priority\": 0}" ], "NS": [ "ns1.host-ww.net", "ns2.host-ww.net" ], "SOA": "{\"nsname\": \"ns1.host-ww.net\", \"hostmaster\": \"root.wp63.host-ww.net\", \"serial\": 2026101101, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 ip4:102.130.123.45 include:spf.antispamcloud.com include:spf.host-ww.net +a +mx ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "102.130.123.45", "family": 4 }, "redirects": { "chain": [ "https://gnvmt.com" ] }, "rank": { "domain": "gnvmt.com" }, "linked_pages": { "external": [ "https://www.blockchain.com/" ], "external_count": 1, "internal_count": 13 }, "whois": { "registrar": "Host Africa (Pty.) Ltd.", "created": "2025-06-27T22:45:07Z", "updated": "2026-07-04T04:33:09Z", "expires": "2027-06-27T22:45:07Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.host-ww.net", "ns2.host-ww.net" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.1.34" } } } } ```