# PhishDestroy domain threat record: granax-gptpro.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/granax-gptpro.com/
Machine-readable companion: https://phishdestroy.io/domain/granax-gptpro.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:37:41 UTC
- Stored record updated: 2026-10-28 01:00:15 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 185.62.57.48
- Registrar in stored WHOIS data: MainReg Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2025-11-17 06:22:02 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019ec035-f77b-71ea-8942-de712dc74419/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/granax-gptpro.com
- Certificate Transparency search: https://crt.sh/?q=%25.granax-gptpro.com
- Web Archive lookup: https://web.archive.org/web/*/https://granax-gptpro.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added granax-gptpro.com to its internal blocklist on 2026-10-28 following an automated intake that marked the domain as trusted‑auto but flagged for age and risk. The recorded page title reads "Granax | Premium AI Trading Platform | Official Website". An HTTP 200 response was observed on 2026-10-28, and the site was not listed on external blocklists aside from a Cloudflare family block.

How the scam works
Detections label the site as phishing or malware, which typically means the page could be used to harvest credentials, deliver malicious payloads, or trick users into unsafe financial actions. No specific malicious behavior was observed on the captured page, so the risk is inferred from the classification rather than concrete evidence.

Evidence
VirusTotal reported 16 detections from 92 engines on 2026-10-21, with 15 malicious and 1 suspicious verdict across vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. urlscan.io recorded a malicious engine score of 100 on 2026-06-13, though its overall verdict was non‑malicious. Cloudflare Radar flagged the domain as phishing and malware on 2026-10-28, while Google Safe Browsing returned no flag on the same day. OTX listed one pulse referencing the domain, and PhishDestroy’s internal blocklist marks it as true.

Infrastructure
The domain was registered on 2025-11-17 through MainReg Inc., giving it an age of 345 days at first sighting. The recorded IP was 185.62.57.48, associated with Snel.com B.V. in the Netherlands, and the domain used Cloudflare nameservers damien.ns.cloudflare.com and grannbo.ns.cloudflare.com. The TLS certificate, issued by ZeroSSL, is valid from 2026-08-31 to 2026-11-29 and covers only granax-gptpro.com.

What to do
Visitors should avoid entering any credentials or downloading files from the site; if they have already submitted sensitive information, they should change passwords and monitor accounts for unusual activity. Administrators should block the exact domain granax-gptpro.com in network filters and review access logs for any connections. Security teams can add the domain to their threat intelligence feeds based on the VirusTotal, urlscan and Cloudflare Radar detections.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019ec035-f77b-71ea-8942-de712dc74419/
Cloudflare Radar report: https://radar.cloudflare.com/scan/89ed6432-9dc2-45f2-8a8b-d84d244669e4
Stored capture screenshot: https://urlscan.io/screenshots/019ec035-f77b-71ea-8942-de712dc74419.png
Cloudflare Radar screenshot (2026-10-27T23:42:24Z): https://screenshots.phishdestroy.io/cf/89ed6432-9dc2-45f2-8a8b-d84d244669e4.png
VirusTotal report: https://www.virustotal.com/gui/domain/granax-gptpro.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=granax-gptpro.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 23:47:07 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019ec035-f77b-71ea-8942-de712dc74419.png
  Captured: 2026-10-27 23:37:41 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/019ec035-f77b-71ea-8942-de712dc74419.png
  Source report: https://urlscan.io/result/019ec035-f77b-71ea-8942-de712dc74419/
- URLScan · 2025-11-17: https://screenshots.phishdestroy.io/us/019a91d9-62c7-7728-ba45-2476d566a1d1.png
  Captured: 2025-11-17 12:45:41 UTC
  Source report: https://urlscan.io/result/019a91d9-62c7-7728-ba45-2476d566a1d1/
  SHA-256: 9bcdca7ed6082646f7d7fcb8e15ba4f3ea434295a932af3f7714bbd73fb1e2cd
- URLScan · 2025-11-18: https://screenshots.phishdestroy.io/us/019a957a-2cc6-705c-9b83-29d0d6de2807.png
  Captured: 2025-11-18 05:40:10 UTC
  Source report: https://urlscan.io/result/019a957a-2cc6-705c-9b83-29d0d6de2807/
  SHA-256: 6bab0622eda43020ba912e5eff367846888531a43a88aeed5a4cfbea4bd7d93d
- URLScan · 2026-06-12: https://screenshots.phishdestroy.io/us/019ebc22-9fda-73e3-aab8-96981cde4fbf.png
  Captured: 2026-06-12 14:00:52 UTC
  Source report: https://urlscan.io/result/019ebc22-9fda-73e3-aab8-96981cde4fbf/
  SHA-256: 08f90e439c710749286f05f17c244ccdab074149f14bd03a05a41c638acf98ea
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17fc3-db9d-71ec-8f31-fe6fb522ae17.png
  Captured: 2026-10-27 23:48:42 UTC
  Source report: https://urlscan.io/result/01a17fc3-db9d-71ec-8f31-fe6fb522ae17/
  SHA-256: 382eaacc256fe4ad4d7747387ee86eb51eb576f61300a9fe88b0d0d03982accc
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/89ed6432-9dc2-45f2-8a8b-d84d244669e4.png
  Captured: 2026-10-27 23:42:24 UTC
  Source report: https://radar.cloudflare.com/scan/89ed6432-9dc2-45f2-8a8b-d84d244669e4
  SHA-256: e8db9062a5f5058a9acfd34ca73d2cd44b43266fc238c19880a09d8d5ed7718f

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:26Z",
        "uuid": "019ec035-f77b-71ea-8942-de712dc74419",
        "scanned_at": "2026-06-13T09:00:30Z",
        "final_url": "https://granax-gptpro.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://granax-gptpro.com/",
                "from": "http://granax-gptpro.com/",
                "status": 307
            }
        ],
        "ip": "185.62.58.101",
        "ptr": "mysupervps.exmaple.com",
        "domains": [
            "fonts.gstatic.com",
            "storage-hub.forza-analytics.com",
            "cdnjs.cloudflare.com",
            "fonts.googleapis.com",
            "ajax.googleapis.com",
            "d3e54v103j8qbb.cloudfront.net"
        ],
        "ips": [
            "172.67.173.47",
            "142.251.14.94",
            "104.17.25.14",
            "192.178.183.95",
            "142.250.154.95",
            "13.226.247.67",
            "185.62.58.101"
        ],
        "asns": [
            "13335",
            "15169",
            "16509",
            "62370"
        ],
        "countries": [
            "US",
            "NL"
        ],
        "doc_hash": "f31e23e03b2a5dea687cf03b65c5c310e445be2614af09fb69e2aa8b838a99e0",
        "script_hashes": [
            "9f44478d431ec32eeaa7597852203fa8a036e9e25875e31bb8179f78ee910dba",
            "65baaf73001c13bbb1ae1934c4267e35f27855d25a0f2d2ac3dd20f0df6d66ba",
            "653a448c69253dc5b67cdf5fd1a1982f30ae00e1c81e22c2e301f7fd66e64e95",
            "1deefa5b2000fbfb6f55c26810a9c81f35969237a8b8c4cedbb5ccae42b7f8fd"
        ],
        "globals": [
            "funnel",
            "$",
            "jQuery",
            "tram",
            "Webflow",
            "WebFont",
            "disclaimer",
            "startTimer",
            "Handlebars",
            "Swal",
            "Trackier",
            "ClientJS",
            "intlTelInputGlobals",
            "apiPath",
            "script",
            "styles"
        ],
        "cookies": [
            "advanced-staticbridge-wf-grnx-gptpr-com",
            "funnel-info-wf-grnx-gptpr-com"
        ],
        "tls": {
            "san": [
                "granax-gptpro.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "E7",
            "subject": "granax-gptpro.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-08-16T01:29:55Z",
            "valid_from": "2026-05-18T01:29:56Z"
        },
        "domain_age_days": 208,
        "apex_age_days": 208,
        "tls_age_days": 26,
        "tls_valid_days": 89,
        "requests": 46,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx/1.14.1",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:28Z",
        "uuid": "89ed6432-9dc2-45f2-8a8b-d84d244669e4",
        "scanned_at": "2026-10-27T23:42:24Z",
        "final_url": "https://granax-gptpro.com/",
        "status": 200,
        "history": [
            {
                "url": "https://granax-gptpro.com/",
                "status": 200
            }
        ],
        "dom_hash": "b894020eb99d7d05a7dbbeae76f6dc72dfa9650a57e82bc7b5bdad735434fab9",
        "doc_hash": "85c9021323ba1293f9234393d3f47b033c8a8119bfaf5b47a59530fe49045936",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "granax-gptpro.com",
                "type": "A",
                "value": "185.62.57.48"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.3",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2025-11-17T07:22:02Z",
            "updated": "2025-11-17T08:23:03Z",
            "expires": "2026-11-17T07:22:02Z",
            "nameservers": [
                "damien.ns.cloudflare.com",
                "grannbo.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T23:40:58Z",
        "analysis_at": "2026-10-21T07:58:15Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 15,
            "suspicious": 1,
            "undetected": 32
        },
        "detections": {
            "ESET": "phishing",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Emsisoft": "malware",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "created": "2025-11-17T00:00:00Z",
        "updated": "2025-11-17T00:00:00Z",
        "first_seen": "2025-11-17T08:42:26Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "damien.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "grannbo.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "damien.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.57.48"
            }
        ],
        "dns_at": "2026-10-21T08:03:47Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "granax-gptpro.com"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "4b1ce87b4b58a76157a1e0d901d7909d",
            "sha256": "f715e5d6177123806d3ede4e7b4f305a144c111a505416b83b8215851dea9610",
            "subject": "granax-gptpro.com",
            "valid_to": "2026-11-29T23:59:59Z",
            "valid_from": "2026-08-31T00:00:00Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "last changed": "2025-11-17T00:00:00Z",
                "registration": "2025-11-17T00:00:00Z",
                "registrar expiration": "2026-11-17T00:00:00Z",
                "last update of RDAP database": "2026-10-18T07:46:00Z"
            },
            "registrar": "MainReg Inc.",
            "registrar_iana_id": "1917"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:46:50Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "granax-gptpro.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T23:41:04Z",
            "first": "2026-10-27T23:41:04Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 12170
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://granax-gptpro.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "title": "Granax | Premium AI Trading Platform | Official Website",
            "robots": "index, follow",
            "themeColor": "#061310",
            "description": "Granax unveils a premium, AI-powered trading platform featuring automated strategies, real-time oversight, and robust risk governance across multiple assets.",
            "canonicalUrl": "https://granax-gptpro.com/"
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 18,
                "tls": 111,
                "wait": 165,
                "connect": 86,
                "download": 0
            },
            "response_ms": 380
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 40950,
            "co2_grams": 0.0015,
            "cleaner_than": 41
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.34.150",
                    "host": "grannbo.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.168",
                    "host": "damien.ns.cloudflare.com"
                }
            ],
            "zone": "granax-gptpro.com"
        },
        "location": {
            "ip": "185.62.57.48",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "granax-gptpro.com"
        },
        "dns": {
            "A": [
                "185.62.57.48"
            ],
            "NS": [
                "grannbo.ns.cloudflare.com",
                "damien.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"damien.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416471841, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.57.48",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://granax-gptpro.com"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2025-11-17T07:22:02Z",
            "updated": "2025-11-17T08:23:03Z",
            "expires": "2026-11-17T07:22:02Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "damien.ns.cloudflare.com",
                "grannbo.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```