# PhishDestroy domain threat record: gptinvest-platform.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gptinvest-platform.com/
Machine-readable companion: https://phishdestroy.io/domain/gptinvest-platform.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:37:35 UTC
- Stored record updated: 2026-10-28 01:00:15 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: MAT BAO CORPORATION
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-18 07:41:41 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0806c-a31f-7650-8c1b-5d92e40ee272/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gptinvest-platform.com
- Certificate Transparency search: https://crt.sh/?q=%25.gptinvest-platform.com
- Web Archive lookup: https://web.archive.org/web/*/https://gptinvest-platform.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added gptinvest-platform.com to its internal blocklist on 2026-10-28 after a trusted‑auto intake rule flagged the domain as suspicious. The recorded page title is “Gpt Invest | AI Trading Platform | Official Main Page” and the page returned HTTP 200 when fetched on 2026-10-28. PhishDestroy first observed the domain on 2026-10-28.

How the scam works
The listing does not confirm any particular malicious behavior; however, sites that advertise AI‑driven trading services are often used in fake‑exchange schemes that entice users to deposit funds or share credentials under false pretenses. No credential‑phishing forms, wallet‑approval prompts, or malware delivery were observed in the captured page.

Evidence
VirusTotal scanned the domain on 2026-10-27 and reported 17 detections from 92 engines, including 13 malicious and 4 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-28 and did not flag the site, while urlscan.io captured the page on 2026-09-08; its machine‑learning engine gave a malicious score of 100 but the overall verdict was non‑malicious. Cloudflare Radar scanned on 2026-10-28 and marked the domain malicious under the “malware” category, and OTX listed one pulse referencing the domain on the same day. PhishDestroy’s internal blocklist contains the domain as of 2026-10-28, and no external public blocklists reported it (external_count = 0).

Infrastructure
The domain was registered with MAT BAO CORPORATION on 2026-08-18 and expires on 2027-08-18; the WHO‑WHO record shows the nameservers marek.ns.cloudflare.com and nena.ns.cloudflare.com. DNS resolution returned Cloudflare‑hosted IPv4 addresses 188.114.97.1 and 188.114.97.3 and IPv6 addresses 2606:4700:3031::ac43:b17c and 2606:4700:3030::6815:4b8f. The TLS certificate, issued by Google Trust Services, is valid for gptinvest-platform.com from 2026-08-18 to 2026-11-16. All observations were made through Cloudflare’s CDN, which does not reveal the origin server location.

What to do
Visitors should not submit personal, credential or financial information to the site; if any such data were entered, change the associated passwords immediately. Organizations can block gptinvest-platform.com at the web‑filter or firewall level and review network logs for connections to the recorded Cloudflare IP addresses. Continue to monitor threat feeds for any change in the domain’s reputation.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0806c-a31f-7650-8c1b-5d92e40ee272/
Cloudflare Radar report: https://radar.cloudflare.com/scan/e91c74ce-c5d8-4ead-ad37-574d0dfc1f7b
Stored capture screenshot: https://urlscan.io/screenshots/01a0806c-a31f-7650-8c1b-5d92e40ee272.png
Cloudflare Radar screenshot (2026-10-27T23:42:27Z): https://screenshots.phishdestroy.io/cf/e91c74ce-c5d8-4ead-ad37-574d0dfc1f7b.png
URLScan screenshot (2026-09-07T08:30:32Z): https://screenshots.phishdestroy.io/us/01a07afd-789a-7018-b375-44596ebf61ec.png
URLScan capture report: https://urlscan.io/result/01a07afd-789a-7018-b375-44596ebf61ec/
URLScan screenshot (2026-09-07T10:29:02Z): https://screenshots.phishdestroy.io/us/01a07b69-d359-72ca-b18d-01f36878b0cf.png
URLScan capture report: https://urlscan.io/result/01a07b69-d359-72ca-b18d-01f36878b0cf/
VirusTotal report: https://www.virustotal.com/gui/domain/gptinvest-platform.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gptinvest-platform.com
Archived copy: https://web.archive.org/web/20261027234104/https://gptinvest-platform.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 23:47:53 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0806c-a31f-7650-8c1b-5d92e40ee272.png
  Captured: 2026-10-27 23:37:35 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a0806c-a31f-7650-8c1b-5d92e40ee272.png
  Source report: https://urlscan.io/result/01a0806c-a31f-7650-8c1b-5d92e40ee272/
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07afd-789a-7018-b375-44596ebf61ec.png
  Captured: 2026-09-07 08:30:32 UTC
  Source report: https://urlscan.io/result/01a07afd-789a-7018-b375-44596ebf61ec/
  SHA-256: 32b313187a9e35a7b4fda24850c8a8bec49343154c8f6821005fc510e6bad2c5
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b69-d359-72ca-b18d-01f36878b0cf.png
  Captured: 2026-09-07 10:29:02 UTC
  Source report: https://urlscan.io/result/01a07b69-d359-72ca-b18d-01f36878b0cf/
  SHA-256: dd78f00ae174201aeb205e48b4a89723931343d0bda2a55a0b49202803a17850
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e91c74ce-c5d8-4ead-ad37-574d0dfc1f7b.png
  Captured: 2026-10-27 23:42:27 UTC
  Source report: https://radar.cloudflare.com/scan/e91c74ce-c5d8-4ead-ad37-574d0dfc1f7b
  SHA-256: 1998af96318b410c49deb0aa65389fe993040b90a798233d137f31ea80a4e683

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:56Z",
        "uuid": "01a0806c-a31f-7650-8c1b-5d92e40ee272",
        "scanned_at": "2026-09-08T09:50:04Z",
        "final_url": "https://gptinvest-platform.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gptinvest-platform.com/",
                "from": "http://gptinvest-platform.com/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "2606:4700::6811:d005",
            "2a00:1450:4001:c15::5f",
            "104.17.24.14",
            "188.114.97.3"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "400ce91b9b9b898fb15207a8f2603ea688c050e7bf1c30b0129abc06a55fb305",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_jsikg",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "gptinvest-platform.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gptinvest-platform.com",
            "protocol": "QUIC",
            "valid_to": "2026-11-16T11:44:44Z",
            "valid_from": "2026-08-18T10:44:48Z"
        },
        "domain_age_days": 20,
        "apex_age_days": 20,
        "tls_age_days": 20,
        "tls_valid_days": 90,
        "requests": 17,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
            "content-security-policy": "img-src 'self' data: blob:; default-src 'self'; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com ht",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:57Z",
        "uuid": "e91c74ce-c5d8-4ead-ad37-574d0dfc1f7b",
        "scanned_at": "2026-10-27T23:42:27Z",
        "final_url": "https://gptinvest-platform.com/",
        "status": 200,
        "history": [
            {
                "url": "https://gptinvest-platform.com/",
                "status": 200
            }
        ],
        "dom_hash": "659b1aaae6c4b281261e1292f01f44652ce1f2fdc1ce08653e257ab7741fcd9f",
        "doc_hash": "bb542027e50b9a7ea4ee577bfac0ae9ec2c0631535d85cc5e8e7ba80f9b25a95",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gptinvest-platform.com",
                "type": "A",
                "value": "104.21.75.143"
            },
            {
                "name": "gptinvest-platform.com",
                "type": "A",
                "value": "172.67.177.124"
            },
            {
                "name": "gptinvest-platform.com",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:b17c"
            },
            {
                "name": "gptinvest-platform.com",
                "type": "AAAA",
                "value": "2606:4700:3030::6815:4b8f"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.16",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-08-18T09:41:41Z",
            "updated": "2026-08-18T11:42:42Z",
            "expires": "2027-08-18T09:41:41Z",
            "nameservers": [
                "marek.ns.cloudflare.com",
                "nena.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T23:40:59Z",
        "analysis_at": "2026-10-27T20:12:51Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 13,
            "suspicious": 4,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "PREBYTES": "suspicious",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "MAT BAO CORPORATION",
        "created": "2026-08-18T09:41:41Z",
        "expires": "2027-08-18T09:41:41Z",
        "updated": "2026-08-18T11:42:42Z",
        "first_seen": "2026-08-18T10:41:05Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:b17c"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.75.143"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.177.124"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::6815:4b8f"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "nena.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "marek.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "marek.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-27T20:18:24Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "gptinvest-platform.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "ef4983066637d6241387d8e9f6bc4378",
            "sha256": "94a30ea07d0415cc99b24429f48595283bd44ab1f2bed4250d91dc19dd3d8061",
            "subject": "gptinvest-platform.com",
            "valid_to": "2027-01-14T13:52:34Z",
            "valid_from": "2026-10-16T12:52:36Z"
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "registrar_iana_id": "1586",
            "registrar_url": "http://www.matbao.net",
            "created": "2026-08-18T09:41:41Z",
            "updated": "2026-08-18T11:42:42Z",
            "expires": "2027-08-18T09:41:41Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "marek.ns.cloudflare.com",
                "nena.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-10-18T02:16:28Z",
                "registration": "2026-08-18T09:41:41Z",
                "registrar expiration": "2027-08-18T09:41:41Z",
                "last update of RDAP database": "2026-10-27T20:18:29Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:47:13Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gptinvest-platform.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T23:41:04Z",
            "first": "2026-10-16T04:27:16Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.08,
            "avg_page_bytes": 44011
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://gptinvest-platform.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://gptinvest-platform.com/",
            "title": "Gpt Invest | AI Trading Platform | Official Main Page",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Gpt Invest | Neon-grade AI trading automation",
            "ogSiteName": "Gpt Invest",
            "themeColor": "#0F1114",
            "description": "Gpt Invest delivers AI-powered trading assistance and automated trading bots with configurable execution, risk controls, and real-time monitoring for modern multi-asset workflows.",
            "twitterCard": "summary",
            "canonicalUrl": "https://gptinvest-platform.com/",
            "ogDescription": "Gpt Invest delivers AI-powered trading assistance and automated trading bots with configurable execution, risk controls, and real-time monitoring for modern multi-asset workflows."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 4,
                "tls": 18,
                "wait": 108,
                "connect": 18,
                "download": 53
            },
            "response_ms": 201
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 152108,
            "co2_grams": 0.0056,
            "cleaner_than": 13
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.161",
                    "host": "nena.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.202",
                    "host": "marek.ns.cloudflare.com"
                }
            ],
            "zone": "gptinvest-platform.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Washington",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gptinvest-platform.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "nena.ns.cloudflare.com",
                "marek.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"marek.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086346, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=15552000; includeSubDomains; preload",
            "message": "HSTS max-age is 15552000, below the 31536000 minimum."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "frame-ancestors 'self'; img-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://cloudflareinsights.co",
            "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gptinvest-platform.com"
            ]
        },
        "linked_pages": {
            "internal_count": 39
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-08-18T09:41:41Z",
            "updated": "2026-08-18T11:42:42Z",
            "expires": "2027-08-18T09:41:41Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "marek.ns.cloudflare.com",
                "nena.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
                "content-security-policy": "frame-ancestors 'self'; img-src 'self' data: blob:; default-src 'self'; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; style",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```