# PhishDestroy domain threat record: gpttradersoftware.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gpttradersoftware.com/
Machine-readable companion: https://phishdestroy.io/domain/gpttradersoftware.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:37:35 UTC
- Stored record updated: 2026-10-28 01:00:15 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: MAT BAO CORPORATION
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-27 06:01:18 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0806c-a5cb-717c-9dd4-eed1d1919d57/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gpttradersoftware.com
- Certificate Transparency search: https://crt.sh/?q=%25.gpttradersoftware.com
- Web Archive lookup: https://web.archive.org/web/*/https://gpttradersoftware.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy lists gpttradersoftware.com as a suspicious domain. The site’s recorded title is “gpttrader | AI Trading Platform | Official App” and returned HTTP 200 on 2026-10-28 when first seen. Google Safe Browsing reported no threat on that check.

How the scam works
The listing does not confirm a particular fraud technique. Sites that market AI‑driven trading services are frequently used to entice visitors into providing personal data, login credentials or cryptocurrency deposits, often by presenting a fake dashboard or payment request. Because no credential or wallet interaction was observed on the captured page, only the generic risk of credential or fund harvesting can be inferred.

Evidence
VirusTotal scanned the domain on 2026-10-27 and returned 15 detections from 92 engines, including 12 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-28 and found no flag. urlscan.io captured the page on 2026-09-08; its engine score was 97 (malicious) but the overall verdict was not malicious. Cloudflare Radar classified the site as phishing and malware on 2026-10-28. OTX listed three pulses mentioning the domain as of 2026-10-28. PhishDestroy’s internal blocklist marks the domain as listed, while external blocklists showed zero matches on the check date.

Infrastructure
The domain was registered with MAT BAO CORPORATION on 2026-07-27, 93 days before first sighting. Hosting is provided through Cloudflare, with recorded IP addresses including 188.114.97.1 and 172.67.219.87. The TLS certificate, issued by Google Trust Services, is valid from 2026-09-24 to 2026-12-23 and covers only gpttradersoftware.com. The recorded location for the hosting network is Great Britain.

What to do
Do not enter credentials, personal data or cryptocurrency information on the site. If any credentials were submitted, change the associated passwords immediately. Network defenders should block the domain and its recorded IPs and monitor logs for connections to gpttradersoftware.com. Users who have interacted with the site should remain vigilant for follow‑up phishing attempts and report any suspicious activity to their security teams.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0806c-a5cb-717c-9dd4-eed1d1919d57/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8a2e1476-195e-4623-ae02-fb1fa1bb4088
Stored capture screenshot: https://urlscan.io/screenshots/01a0806c-a5cb-717c-9dd4-eed1d1919d57.png
Cloudflare Radar screenshot (2026-10-27T23:42:24Z): https://screenshots.phishdestroy.io/cf/8a2e1476-195e-4623-ae02-fb1fa1bb4088.png
URLScan screenshot (2026-09-07T09:00:46Z): https://screenshots.phishdestroy.io/us/01a07b19-2391-75a1-b0e2-e01756a351bc.png
URLScan capture report: https://urlscan.io/result/01a07b19-2391-75a1-b0e2-e01756a351bc/
URLScan screenshot (2026-09-07T10:28:54Z): https://screenshots.phishdestroy.io/us/01a07b69-d6c1-71c7-babb-d5eb8a7ffc0d.png
URLScan capture report: https://urlscan.io/result/01a07b69-d6c1-71c7-babb-d5eb8a7ffc0d/
VirusTotal report: https://www.virustotal.com/gui/domain/gpttradersoftware.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gpttradersoftware.com
Archived copy: https://web.archive.org/web/20261027234047/https://gpttradersoftware.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-28 00:15:27 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0806c-a5cb-717c-9dd4-eed1d1919d57.png
  Captured: 2026-10-27 23:37:35 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a0806c-a5cb-717c-9dd4-eed1d1919d57.png
  Source report: https://urlscan.io/result/01a0806c-a5cb-717c-9dd4-eed1d1919d57/
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b19-2391-75a1-b0e2-e01756a351bc.png
  Captured: 2026-09-07 09:00:46 UTC
  Source report: https://urlscan.io/result/01a07b19-2391-75a1-b0e2-e01756a351bc/
  SHA-256: 224c5a0aeab97d9c300d9636fd88cddcf83f574e1a0dbb99d991c871f27213ec
- URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07b69-d6c1-71c7-babb-d5eb8a7ffc0d.png
  Captured: 2026-09-07 10:28:54 UTC
  Source report: https://urlscan.io/result/01a07b69-d6c1-71c7-babb-d5eb8a7ffc0d/
  SHA-256: 6802acf6c248db0c81b38069d7f86226421d1f53b8577f254a3336563e2cd015
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8a2e1476-195e-4623-ae02-fb1fa1bb4088.png
  Captured: 2026-10-27 23:42:24 UTC
  Source report: https://radar.cloudflare.com/scan/8a2e1476-195e-4623-ae02-fb1fa1bb4088
  SHA-256: 9e81e1c7160d53674c9ec78752d3a099775fac6b26d5016b80c46395397f501e

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:45Z",
        "uuid": "01a0806c-a5cb-717c-9dd4-eed1d1919d57",
        "scanned_at": "2026-09-08T09:50:07Z",
        "final_url": "https://gpttradersoftware.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gpttradersoftware.com/",
                "from": "http://gpttradersoftware.com/",
                "status": 307
            }
        ],
        "ip": "172.67.219.87",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflareinsights.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "151.101.1.229",
            "142.251.163.95",
            "104.17.25.14",
            "172.67.219.87"
        ],
        "asns": [
            "54113",
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "63aca35e1b6825f17cb46ed47eda51b0be5228cb755a365f53e6f116b883d60f",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_jd2qrpe7",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "gpttradersoftware.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gpttradersoftware.com",
            "protocol": "QUIC",
            "valid_to": "2026-10-25T10:58:18Z",
            "valid_from": "2026-07-27T09:58:19Z"
        },
        "domain_age_days": 42,
        "apex_age_days": 42,
        "tls_age_days": 42,
        "tls_valid_days": 90,
        "requests": 18,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 97,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
            "content-security-policy": "frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:46Z",
        "uuid": "8a2e1476-195e-4623-ae02-fb1fa1bb4088",
        "scanned_at": "2026-10-27T23:42:24Z",
        "final_url": "https://gpttradersoftware.com/",
        "status": 200,
        "history": [
            {
                "url": "https://gpttradersoftware.com/",
                "status": 200
            }
        ],
        "dom_hash": "6437cd2b7776516c3f2068573305917552998d36a1f4747f81319ddc7694db8e",
        "doc_hash": "99edd3ff569b99fbdf53bfd35727523b1ebfbfa308e7621cbb93829965cb3b3a",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gpttradersoftware.com",
                "type": "A",
                "value": "104.21.51.25"
            },
            {
                "name": "gpttradersoftware.com",
                "type": "A",
                "value": "172.67.219.87"
            },
            {
                "name": "gpttradersoftware.com",
                "type": "AAAA",
                "value": "2606:4700:3034::6815:3319"
            },
            {
                "name": "gpttradersoftware.com",
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:db57"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.1",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-07-27T08:01:18Z",
            "updated": "2026-07-27T10:52:39Z",
            "expires": "2027-07-27T08:01:18Z",
            "nameservers": [
                "ariella.ns.cloudflare.com",
                "etienne.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-28T00:12:10Z",
        "analysis_at": "2026-10-27T21:14:37Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 12,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "MAT BAO CORPORATION",
        "created": "2026-07-27T08:01:18Z",
        "expires": "2027-07-27T08:01:18Z",
        "updated": "2026-07-27T10:52:39Z",
        "first_seen": "2026-07-27T11:27:09Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "etienne.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:3319"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "ariella.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ariella.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.219.87"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.51.25"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:db57"
            }
        ],
        "dns_at": "2026-10-27T21:20:02Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "gpttradersoftware.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "3bbeef9cc028c3720e408f1c33917282",
            "sha256": "6c605987f00fcfab6ed24e0944b6658164d4549af9599da543d94d7a9491b717",
            "subject": "gpttradersoftware.com",
            "valid_to": "2026-12-23T13:46:15Z",
            "valid_from": "2026-09-24T12:46:17Z"
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "registrar_iana_id": "1586",
            "registrar_url": "http://www.matbao.net",
            "created": "2026-07-27T08:01:18Z",
            "updated": "2026-07-27T10:52:39Z",
            "expires": "2027-07-27T08:01:18Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ariella.ns.cloudflare.com",
                "etienne.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-09-26T02:16:06Z",
                "registration": "2026-07-27T08:01:18Z",
                "registrar expiration": "2027-07-27T08:01:18Z",
                "last update of RDAP database": "2026-10-22T22:19:19Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:58Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gpttradersoftware.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T23:40:47Z",
            "first": "2026-10-27T23:40:47Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 41218
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://gpttradersoftware.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://gpttradersoftware.com/",
            "title": "gpttrader | AI Trading Platform | Official App",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "gpttrader | Premier AI Trading Platform",
            "ogSiteName": "gpttrader",
            "themeColor": "#131313",
            "description": "gpttrader delivers AI-powered trading guidance, automated bots, portfolio governance, live market monitoring, and disciplined risk management features.",
            "twitterCard": "summary",
            "canonicalUrl": "https://gpttradersoftware.com/",
            "ogDescription": "gpttrader delivers AI-powered trading guidance, automated bots, portfolio governance, live market monitoring, and disciplined risk management features."
        },
        "trackers": {
            "requests": 16,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 13,
                "tls": 13,
                "wait": 176,
                "connect": 13,
                "download": 29
            },
            "response_ms": 244
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 135535,
            "co2_grams": 0.005,
            "cleaner_than": 15
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.32",
                    "host": "ariella.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.61",
                    "host": "etienne.ns.cloudflare.com"
                }
            ],
            "zone": "gpttradersoftware.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gpttradersoftware.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "etienne.ns.cloudflare.com",
                "ariella.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"ariella.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418085998, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=15552000; includeSubDomains; preload",
            "message": "HSTS max-age is 15552000, below the 31536000 minimum."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; font",
            "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gpttradersoftware.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.gpttradersoftware.com"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-07-27T08:01:18Z",
            "updated": "2026-07-27T10:52:39Z",
            "expires": "2027-07-27T08:01:18Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ariella.ns.cloudflare.com",
                "etienne.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=15552000; includeSubDomains; preload",
                "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; img-src 'self' data: blob:;",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```