# gpdi.pro — SUSPICIOUS

> PhishDestroy identifies gpdi.pro as a crypto drainer fake login page with 0/95 VirusTotal detections. Do not enter credentials and verify this domain.

## Summary
PhishDestroy identifies gpdi.pro as a crypto drainer impersonating a login page, designed to steal cryptocurrency wallet credentials or initiate unauthorized transactions. This threat operates by presenting a convincing replica of a legitimate service's authentication interface, tricking users into inputting their private keys, seed phrases, or connected wallet credentials. Once harvested, these credentials are used to drain funds or gain unauthorized access to digital assets, making this a high-risk phishing vector for cryptocurrency users. The domain leverages social engineering tactics to appear authentic, often masquerading as a login portal for exchanges, DeFi platforms, or NFT services, and may be distributed via phishing emails, fake ads, or social media messages.  This domain was flagged by PhishDestroy under investigation with a risk level assessed as active. The domain was registered through GoDaddy.com, LLC on July 02, 2024, and is currently hosted at IP address 44.211.14.38. It uses a Let's Encrypt SSL certificate to appear legitimate, although it has not yet been detected by industry blocklists, with VirusTotal reporting 0 detections out of 95 scanning engines. The domain's recent registration date and lack of detections suggest it may be newly operational or actively evading detection. Given the absence of signatures in threat intelligence feeds, users should exercise extreme caution, as this domain represents an emerging and unmitigated risk.  If you have visited gpdi.pro or entered any credentials, wallet keys, or seed phrases, you should immediately revoke access to any connected wallets, transfer remaining funds to a secure wallet, and perform a full security audit of your cryptocurrency accounts. Do not interact further with this domain or any linked services. Use PhishDestroy's verification tool to check the legitimacy of any suspicious links before entering sensitive information. Always verify URLs manually, use hardware wallets for large transactions, and enable multi-factor authentication where available to mitigate the risk of credential theft or unauthorized access.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-07-02 22:48:40
- Registrar: GoDaddy.com, LLC
- IP: 44.211.14.38

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2401629b-fc49-4ad1-8916-242c671d7eb1
- PhishDestroy: https://phishdestroy.io/domain/gpdi.pro/
- LLM endpoint: https://phishdestroy.io/domain/gpdi.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gpdi.pro/
Last updated: 2026-03-26