# PhishDestroy domain threat record: gptv7-investion.digital

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gptv7-investion.digital/
Machine-readable companion: https://phishdestroy.io/domain/gptv7-investion.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:37:35 UTC
- Stored record updated: 2026-10-28 01:00:15 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.1
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-22 10:00:03 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0a9b1-9daf-7038-938c-c3fef8593b5c/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gptv7-investion.digital
- Certificate Transparency search: https://crt.sh/?q=%25.gptv7-investion.digital
- Web Archive lookup: https://web.archive.org/web/*/https://gptv7-investion.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed gptv7-investion.digital as a suspicious domain based on automated security detections. The recorded page title advertises an "AI Trading Platform" and was first observed by PhishDestroy on 2026-10-28. An HTTP 200 response was recorded for the domain on that date.

How the scam works
No specific malicious behavior was observed on the page, but domains that trigger multiple security detections are often used for phishing, credential harvesting, or delivering malware. Such sites may present a legitimate‑looking service to lure users into entering personal data or downloading harmful files. Without concrete evidence of a particular technique, the risk remains that the site could be leveraged for any of these common fraud vectors.

Evidence
VirusTotal scanned the domain on 2026-10-26 and reported 15 detections from 92 engines, including 12 malicious and 3 suspicious classifications from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked the domain on 2026-10-28 and did not flag it. URLScan captured the site on 2026-09-16; its machine‑learning engine marked it malicious with a score of 98, though the overall verdict was non‑malicious. Cloudflare Radar flagged the domain as malicious on 2026-10-28, categorising it under malware. OTX listed one pulse for the domain on the same day, and PhishDestroy’s internal blocklist contains the domain, while external blocklists reported zero matches.

Infrastructure
The domain was registered on 2026-03-22 through Spaceship, Inc., with a client‑transfer‑prohibited status. Hosting is provided via Cloudflare, recorded under the IP 188.114.96.1 and the CloudFLARENET‑EU network located in GB. The TLS certificate, issued by Google Trust Services, is valid until 2026-12-14.

What to do
Visitors should avoid entering credentials, downloading files, or providing any personal information on the site. If any credentials were submitted, change the associated passwords and monitor accounts for suspicious activity. Defenders should block the domain at the network perimeter, review logs for any connections to the recorded IP or hostnames, and apply standard phishing‑mitigation policies.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0a9b1-9daf-7038-938c-c3fef8593b5c/
Cloudflare Radar report: https://radar.cloudflare.com/scan/4d798abb-da19-4c44-8aa3-fd771eb22972
Stored capture screenshot: https://urlscan.io/screenshots/01a0a9b1-9daf-7038-938c-c3fef8593b5c.png
Cloudflare Radar screenshot (2026-10-27T23:42:24Z): https://screenshots.phishdestroy.io/cf/4d798abb-da19-4c44-8aa3-fd771eb22972.png
URLScan screenshot (2026-09-15T20:15:23Z): https://screenshots.phishdestroy.io/us/01a0a6b5-a6e5-73cf-9303-19b29b8bb491.png
URLScan capture report: https://urlscan.io/result/01a0a6b5-a6e5-73cf-9303-19b29b8bb491/
VirusTotal report: https://www.virustotal.com/gui/domain/gptv7-investion.digital
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gptv7-investion.digital
Archived copy: https://web.archive.org/web/20261027234048/https://gptv7-investion.digital/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 23:47:11 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0a9b1-9daf-7038-938c-c3fef8593b5c.png
  Captured: 2026-10-27 23:37:35 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a0a9b1-9daf-7038-938c-c3fef8593b5c.png
  Source report: https://urlscan.io/result/01a0a9b1-9daf-7038-938c-c3fef8593b5c/
- URLScan · 2026-09-15: https://screenshots.phishdestroy.io/us/01a0a6b5-a6e5-73cf-9303-19b29b8bb491.png
  Captured: 2026-09-15 20:15:23 UTC
  Source report: https://urlscan.io/result/01a0a6b5-a6e5-73cf-9303-19b29b8bb491/
  SHA-256: 99630241584978f0e28f19406d74cf2eb80e3858a76a2c4a43210172b4f65321
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4d798abb-da19-4c44-8aa3-fd771eb22972.png
  Captured: 2026-10-27 23:42:24 UTC
  Source report: https://radar.cloudflare.com/scan/4d798abb-da19-4c44-8aa3-fd771eb22972
  SHA-256: b846cacfa1a623cd86aa0cd03576d4eb03df9b4ed049db3694a35e1d38d49c9e

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:34Z",
        "uuid": "01a0a9b1-9daf-7038-938c-c3fef8593b5c",
        "scanned_at": "2026-09-16T10:09:50Z",
        "final_url": "https://gptv7-investion.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gptv7-investion.digital/",
                "from": "http://gptv7-investion.digital/",
                "status": 307
            }
        ],
        "ip": "188.114.96.3",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "2606:4700::6811:cf05",
            "2a00:1450:400a:1009::5f",
            "104.17.25.14",
            "188.114.96.3"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "CH"
        ],
        "doc_hash": "00a6858dafed2f3c04a5ad475d96bf2fc9586c0c5d7e91d03608212ddc438678",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_qxhweqf",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "gptv7-investion.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gptv7-investion.digital",
            "protocol": "QUIC",
            "valid_to": "2026-12-14T16:27:59Z",
            "valid_from": "2026-09-15T15:28:03Z"
        },
        "domain_age_days": 176,
        "apex_age_days": 176,
        "tls_age_days": 0,
        "tls_valid_days": 90,
        "requests": 16,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:35Z",
        "uuid": "4d798abb-da19-4c44-8aa3-fd771eb22972",
        "scanned_at": "2026-10-27T23:42:24Z",
        "final_url": "https://gptv7-investion.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://gptv7-investion.digital/",
                "status": 200
            }
        ],
        "dom_hash": "7e33137833d1b6aa08b4f21dada5b434082b922cae1e084b14d457b2277d23fe",
        "doc_hash": "8b11c3f1370a876695395ca701d41ea6bacb2f71335146d2cb2a1a9133aea0b1",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gptv7-investion.digital",
                "type": "A",
                "value": "172.67.172.28"
            },
            {
                "name": "gptv7-investion.digital",
                "type": "A",
                "value": "104.21.55.182"
            },
            {
                "name": "gptv7-investion.digital",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:ac1c"
            },
            {
                "name": "gptv7-investion.digital",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:37b6"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.22",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T23:40:58Z",
        "analysis_at": "2026-10-26T07:00:58Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 12,
            "suspicious": 3,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "created": "2026-03-22T00:00:00Z",
        "updated": "2026-03-22T00:00:00Z",
        "first_seen": "2026-03-24T11:01:17Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:37b6"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "damiete.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "isla.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.172.28"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "damiete.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.55.182"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:ac1c"
            }
        ],
        "dns_at": "2026-10-26T07:06:31Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "gptv7-investion.digital"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "bacf5bab694dee210e6db5ec0ef93944",
            "sha256": "8cbf61b1d3803a2805d15d8cfdff9cad7cc1b7518466649fba1607dbd0b8ab94",
            "subject": "gptv7-investion.digital",
            "valid_to": "2026-12-14T16:27:59Z",
            "valid_from": "2026-09-15T15:28:03Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-08-24T03:46:19Z",
                "registration": "2026-03-22T11:00:03Z",
                "registrar expiration": "2027-03-22T11:00:03Z",
                "last update of RDAP database": "2026-10-26T07:06:29Z"
            },
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:58Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gptv7-investion.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T23:40:48Z",
            "first": "2026-10-27T23:40:48Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 41606
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true,
            "sitemaps": [
                "https://gptv7-investion.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "GPT v7 Investion | AI Trading Platform | Official Website",
            "robots": "index, follow",
            "themeColor": "#0f0f1a",
            "description": "GPT v7 Investion delivers a premium overview of automated trading with AI-driven insights, showcasing streamlined workflows, refined controls, and precise execution capabilities.",
            "canonicalUrl": "https://gptv7-investion.digital/"
        },
        "trackers": {
            "requests": 17,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 5,
                "tls": 34,
                "wait": 226,
                "connect": 43,
                "download": 29
            },
            "response_ms": 337
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 138231,
            "co2_grams": 0.0051,
            "cleaner_than": 15
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.35.32",
                    "host": "damiete.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.119",
                    "host": "isla.ns.cloudflare.com"
                }
            ],
            "zone": "gptv7-investion.digital"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gptv7-investion.digital"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "damiete.ns.cloudflare.com",
                "isla.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"damiete.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418084266, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenge",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gptv7-investion.digital"
            ]
        },
        "linked_pages": {
            "internal_count": 12
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; frame-ancestors 'self'; img-src 'self' data: blob:; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```