# PhishDestroy domain threat record: gptchat-bot.digital Content language: English Canonical HTML report: https://phishdestroy.io/domain/gptchat-bot.digital/ Machine-readable companion: https://phishdestroy.io/domain/gptchat-bot.digital/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-27 23:37:35 UTC - Stored record updated: 2026-10-28 01:00:16 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 185.62.56.63 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-03-22 10:00:02 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019fdda9-ba29-7098-b505-110086ed0695/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/gptchat-bot.digital - Certificate Transparency search: https://crt.sh/?q=%25.gptchat-bot.digital - Web Archive lookup: https://web.archive.org/web/*/https://gptchat-bot.digital/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed gptchat-bot.digital as a suspicious domain based on automated analysis. The recorded page title reads “GPT Chat Bot | AI Trading Platform | Official Website”. The domain was first seen by PhishDestroy on 2026-10-28 and returned HTTP 200 at that time. How the scam works No specific malicious behavior was observed on the page, and the available evidence does not identify a concrete attack vector. Domains flagged as suspicious are commonly used for phishing, credential harvesting, or malware distribution, but the exact mechanism for this site cannot be confirmed. Evidence VirusTotal scanned the domain on 2026-10-27 and reported 18 detections from 92 engines, including 15 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-28 and did not flag the site. urlscan.io captured the page on 2026-08-07; its engine verdict marked it malicious with a score of 99, while the overall verdict was clean. Cloudflare Radar scanned on 2026-10-27 and labeled the domain malicious under the malware category. OTX listed one pulse on 2026-10-28. PhishDestroy’s internal blocklist contains the domain, and external blocklists showed no matches on the check date. Infrastructure The domain was registered on 2026-03-22 through Spaceship, Inc., giving it an age of about 220 days at first sighting. The recorded IP was 185.62.56.63 and the hosting organization was identified as Snel.com B.V. in the Netherlands. TLS was provided by a ZeroSSL ECC DV certificate valid from 2026-08-06 to 2026-11-04. DNS was served by Cloudflare nameservers and DNSSEC was not enabled. What to do Visitors should avoid entering credentials, personal data, or downloading files from this site; if any information was submitted, change related passwords and monitor accounts for unusual activity. Defenders can block the domain at network perimeters, review logs for connections to the recorded IP, and ensure endpoint protection is up‑to‑date. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019fdda9-ba29-7098-b505-110086ed0695/ Cloudflare Radar report: https://radar.cloudflare.com/scan/ec18c535-bc46-45d6-ba1a-5f4aca4cc883 Stored capture screenshot: https://urlscan.io/screenshots/019fdda9-ba29-7098-b505-110086ed0695.png Cloudflare Radar screenshot (2026-10-27T23:42:28Z): https://screenshots.phishdestroy.io/cf/ec18c535-bc46-45d6-ba1a-5f4aca4cc883.png URLScan screenshot (2026-08-05T20:15:52Z): https://screenshots.phishdestroy.io/us/019fd390-e5f3-770c-ba1d-89961c96e73f.png URLScan capture report: https://urlscan.io/result/019fd390-e5f3-770c-ba1d-89961c96e73f/ URLScan screenshot (2026-08-06T05:56:52Z): https://screenshots.phishdestroy.io/us/019fd5a4-d587-7239-a185-462eefe97898.png URLScan capture report: https://urlscan.io/result/019fd5a4-d587-7239-a185-462eefe97898/ URLScan screenshot (2026-08-06T07:53:34Z): https://screenshots.phishdestroy.io/us/019fd60f-ad0b-765f-b2ea-cec917415493.png URLScan capture report: https://urlscan.io/result/019fd60f-ad0b-765f-b2ea-cec917415493/ URLScan screenshot (2026-08-06T17:34:20Z): https://screenshots.phishdestroy.io/us/019fd823-d5db-77aa-af70-c85a4dd51a1a.png URLScan capture report: https://urlscan.io/result/019fd823-d5db-77aa-af70-c85a4dd51a1a/ URLScan screenshot (2026-08-07T06:21:11Z): https://screenshots.phishdestroy.io/us/019fdae1-e9bd-731c-a9aa-d4f9439f023b.png URLScan capture report: https://urlscan.io/result/019fdae1-e9bd-731c-a9aa-d4f9439f023b/ URLScan screenshot (2026-08-07T12:31:41Z): https://screenshots.phishdestroy.io/us/019fdc35-1cdc-71ee-9708-5a5a1129a3f6.png URLScan capture report: https://urlscan.io/result/019fdc35-1cdc-71ee-9708-5a5a1129a3f6/ VirusTotal report: https://www.virustotal.com/gui/domain/gptchat-bot.digital Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gptchat-bot.digital Archived copy: https://web.archive.org/web/20261027234047/https://gptchat-bot.digital/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 23:47:57 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019fdda9-ba29-7098-b505-110086ed0695.png Captured: 2026-10-27 23:37:35 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/019fdda9-ba29-7098-b505-110086ed0695.png Source report: https://urlscan.io/result/019fdda9-ba29-7098-b505-110086ed0695/ - URLScan · 2026-08-05: https://screenshots.phishdestroy.io/us/019fd390-e5f3-770c-ba1d-89961c96e73f.png Captured: 2026-08-05 20:15:52 UTC Source report: https://urlscan.io/result/019fd390-e5f3-770c-ba1d-89961c96e73f/ SHA-256: c286c85da36b021cd179e8f72f197f930a2c0d07d278522682e8a0e945ed2c74 - URLScan · 2026-08-06: https://screenshots.phishdestroy.io/us/019fd5a4-d587-7239-a185-462eefe97898.png Captured: 2026-08-06 05:56:52 UTC Source report: https://urlscan.io/result/019fd5a4-d587-7239-a185-462eefe97898/ SHA-256: fcee0cd2faca74b4b2029db469e69710d3d74a0fdade177cfd0037cacbba7391 - URLScan · 2026-08-06: https://screenshots.phishdestroy.io/us/019fd60f-ad0b-765f-b2ea-cec917415493.png Captured: 2026-08-06 07:53:34 UTC Source report: https://urlscan.io/result/019fd60f-ad0b-765f-b2ea-cec917415493/ SHA-256: 7887772b704ffced76c74af414410aaa9c69028cc5213906a4f868a535bad6a7 - URLScan · 2026-08-06: https://screenshots.phishdestroy.io/us/019fd823-d5db-77aa-af70-c85a4dd51a1a.png Captured: 2026-08-06 17:34:20 UTC Source report: https://urlscan.io/result/019fd823-d5db-77aa-af70-c85a4dd51a1a/ SHA-256: dcb57c3fcbd423e30176f66fc75320c5c301564ea278900c74e73d8594160fab - URLScan · 2026-08-07: https://screenshots.phishdestroy.io/us/019fdae1-e9bd-731c-a9aa-d4f9439f023b.png Captured: 2026-08-07 06:21:11 UTC Source report: https://urlscan.io/result/019fdae1-e9bd-731c-a9aa-d4f9439f023b/ SHA-256: dcb57c3fcbd423e30176f66fc75320c5c301564ea278900c74e73d8594160fab - URLScan · 2026-08-07: https://screenshots.phishdestroy.io/us/019fdc35-1cdc-71ee-9708-5a5a1129a3f6.png Captured: 2026-08-07 12:31:41 UTC Source report: https://urlscan.io/result/019fdc35-1cdc-71ee-9708-5a5a1129a3f6/ SHA-256: dcb57c3fcbd423e30176f66fc75320c5c301564ea278900c74e73d8594160fab - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ec18c535-bc46-45d6-ba1a-5f4aca4cc883.png Captured: 2026-10-27 23:42:28 UTC Source report: https://radar.cloudflare.com/scan/ec18c535-bc46-45d6-ba1a-5f4aca4cc883 SHA-256: 21acae00517e3efaa117c3a304521f9a6d3f8df8430c8ef42255fb1bfb118258 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T23:47:05Z", "uuid": "019fdda9-ba29-7098-b505-110086ed0695", "scanned_at": "2026-08-07T19:18:41Z", "final_url": "https://gptchat-bot.digital/", "status": 200, "ip": "185.62.56.63", "ptr": "s46060.hosted-by-snel.com", "domains": [ "cdn.jsdelivr.net", "cdnjs.cloudflare.com", "fonts.gstatic.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "104.17.208.5", "142.251.13.94", "2606:4700::6810:7b60", "2606:4700::6811:d005", "104.17.24.14", "2a00:1450:400a:1001::5f", "185.62.56.63" ], "asns": [ "13335", "15169", "62370" ], "countries": [ "US", "CH", "NL" ], "doc_hash": "1764964acda40e8f6fa2bcf7ae8d1abe36ee475dec5a3c2ae2976bbc372911c3", "script_hashes": [ "e776c8e03ae39686bf5344edf2667ee34a517077e47c1b709c3cc2c8dd1792c3" ], "globals": [ "toggleTermsPopup", "intlTelInput", "FingerprintJS", "__visitorCountry" ], "storage_keys": [ "t_fingerprint" ], "tls": { "san": [ "gptchat-bot.digital" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "gptchat-bot.digital", "protocol": "TLS 1.3", "valid_to": "2026-11-04T23:59:59Z", "valid_from": "2026-08-06T00:00:00Z" }, "domain_age_days": 137, "apex_age_days": 137, "tls_age_days": 1, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T23:47:10Z", "uuid": "ec18c535-bc46-45d6-ba1a-5f4aca4cc883", "scanned_at": "2026-10-27T23:42:28Z", "final_url": "https://gptchat-bot.digital/", "status": 200, "history": [ { "url": "https://gptchat-bot.digital/", "status": 200 } ], "dom_hash": "2a14737900d11b703d475abf511f6ad7caa4e3f7eff661973d368556e8bec5b0", "doc_hash": "99725c875200fa417f015152492482ee1c1246a978e3c85d356cfda17b786ae5", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "gptchat-bot.digital", "type": "A", "value": "185.62.56.63" } ], "dnssec_valid": false, "ip": "127.0.1.1", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-27T23:40:59Z", "analysis_at": "2026-10-27T19:14:51Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 15, "suspicious": 3, "undetected": 31 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-03-22T00:00:00Z", "updated": "2026-03-22T00:00:00Z", "first_seen": "2026-03-24T10:56:35Z", "dns": [ { "ttl": 300, "type": "A", "value": "185.62.56.63" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "cortney.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "ed.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "cortney.ns.cloudflare.com" } ], "dns_at": "2026-10-27T19:20:34Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "gptchat-bot.digital" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "fbdc75de943d76f59837ff44b29ef712", "sha256": "f1f188a5bebd1291350279a554005e5ed44c61c1a1431a325f336f1620f3f093", "subject": "gptchat-bot.digital", "valid_to": "2027-01-03T23:59:59Z", "valid_from": "2026-10-05T00:00:00Z" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-08-24T01:25:55Z", "registration": "2026-03-22T11:00:02Z", "registrar expiration": "2027-03-22T11:00:02Z", "last update of RDAP database": "2026-10-25T19:03:54Z" }, "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T23:47:26Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "gptchat-bot.digital" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T04:42:22Z", "first": "2026-10-21T04:42:22Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 12374 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://gptchat-bot.digital/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "ogUrl": "https://gptchat-bot.digital/", "title": "GPT Chat Bot | AI Trading Platform | Official Website", "ogType": "website", "robots": "index, follow", "ogTitle": "GPT Chat Bot | Premium AI Trading Automation & Insights", "ogSiteName": "GPT Chat Bot", "themeColor": "#1a0028", "description": "GPT Chat Bot delivers advanced AI-driven trading automation, featuring structured workflows, real-time monitoring, and robust risk controls for confident decision-making.", "twitterCard": "summary", "canonicalUrl": "https://gptchat-bot.digital/", "ogDescription": "GPT Chat Bot delivers advanced AI-driven trading automation, featuring structured workflows, real-time monitoring, and robust risk controls for confident decision-making." }, "trackers": { "requests": 20, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 7 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 60, "wait": 43, "connect": 38, "download": 1 }, "response_ms": 144 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 44354, "co2_grams": 0.0016, "cleaner_than": 40 }, "dns_server": { "ns": [ { "ip": "173.245.59.111", "host": "ed.ns.cloudflare.com" }, { "ip": "108.162.192.87", "host": "cortney.ns.cloudflare.com" } ], "zone": "gptchat-bot.digital" }, "location": { "ip": "185.62.56.63", "asn": "62370", "org": "Snel.com B.V.", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "gptchat-bot.digital" }, "dns": { "A": [ "185.62.56.63" ], "NS": [ "cortney.ns.cloudflare.com", "ed.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"cortney.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416726896, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.63", "family": 4 }, "redirects": { "chain": [ "https://gptchat-bot.digital" ] }, "linked_pages": { "internal_count": 11 }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```