# PhishDestroy domain threat record: gravidanza-app.cyou

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gravidanza-app.cyou/
Machine-readable companion: https://phishdestroy.io/domain/gravidanza-app.cyou/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:38:00 UTC
- Stored record updated: 2026-10-28 01:00:15 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: NameCheap, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-02-11 09:37:44 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019f88dd-368b-752f-9dcf-207fe4de6564/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gravidanza-app.cyou
- Certificate Transparency search: https://crt.sh/?q=%25.gravidanza-app.cyou
- Web Archive lookup: https://web.archive.org/web/*/https://gravidanza-app.cyou/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added gravidanza-app.cyou to its internal blocklist on 2026-10-28. The recorded page title is “gravidanza | AI Trading Platform | Official Website” and the HTTP response was 200 when captured on 2026-07-22. The site presented a valid TLS certificate issued by Google Trust Services, but no external blocklists flagged it at the time of checking.

How the scam works
The available detections do not confirm a specific attack vector. A site that advertises an AI‑driven trading platform could be used to lure visitors into providing credentials or downloading unwanted software, which is a common pattern for suspicious domains.

Evidence
VirusTotal scanned the domain on 2026-10-27 and reported 13 malicious and 4 suspicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-28 and did not flag the URL. urlscan.io captured the site on 2026-07-22; its engine score was 99 (malicious) while the overall verdict was non‑malicious. OTX listed three pulses mentioning the domain as of 2026-10-28, and PhishDestroy’s internal list marks it as blocked while external blocklists returned zero hits.

Infrastructure
The domain was registered on 2026-02-11 through NameCheap, Inc. The domain was observed to resolve to Cloudflare IP addresses 188.114.96.3 and 188.114.97.3, which belong to ASN 13335. The TLS certificate was valid from 2026-06-10 to 2027-01-04 and the site used Cloudflare’s WAF and HSTS preload. DNS records include A, AAAA, MX and TXT entries, and DNSSEC signatures were not present.

What to do
Do not enter login credentials, personal data or financial information on this site. If any credentials were submitted, change the associated passwords immediately and monitor the accounts for unauthorized activity. Network defenders should block traffic to gravidanza-app.cyou.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019f88dd-368b-752f-9dcf-207fe4de6564/
Cloudflare Radar report: https://radar.cloudflare.com/scan/78826ac8-2771-457e-b661-aa1f479f267a
Stored capture screenshot: https://urlscan.io/screenshots/019f88dd-368b-752f-9dcf-207fe4de6564.png
Cloudflare Radar screenshot (2026-10-27T23:42:12Z): https://screenshots.phishdestroy.io/cf/78826ac8-2771-457e-b661-aa1f479f267a.png
URLScan screenshot (2026-07-21T11:46:06Z): https://screenshots.phishdestroy.io/us/019f847f-4499-7460-a093-a3d69006a504.png
URLScan capture report: https://urlscan.io/result/019f847f-4499-7460-a093-a3d69006a504/
VirusTotal report: https://www.virustotal.com/gui/domain/gravidanza-app.cyou
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gravidanza-app.cyou
Archived copy: https://web.archive.org/web/20261027234117/https://gravidanza-app.cyou/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-28 00:14:59 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019f88dd-368b-752f-9dcf-207fe4de6564.png
  Captured: 2026-10-27 23:38:00 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/019f88dd-368b-752f-9dcf-207fe4de6564.png
  Source report: https://urlscan.io/result/019f88dd-368b-752f-9dcf-207fe4de6564/
- URLScan · 2026-07-21: https://screenshots.phishdestroy.io/us/019f847f-4499-7460-a093-a3d69006a504.png
  Captured: 2026-07-21 11:46:06 UTC
  Source report: https://urlscan.io/result/019f847f-4499-7460-a093-a3d69006a504/
  SHA-256: 274d49d3e7a62d025382a5fc256a1796b4f49f724213bf8a30cd08c50d7ecb73
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/78826ac8-2771-457e-b661-aa1f479f267a.png
  Captured: 2026-10-27 23:42:12 UTC
  Source report: https://radar.cloudflare.com/scan/78826ac8-2771-457e-b661-aa1f479f267a
  SHA-256: 98ec1d356f3fa5abc3f1b6bf34c95115fb9f889fede79e1c8e7b815ac8c4fa70

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:45:04Z",
        "uuid": "019f88dd-368b-752f-9dcf-207fe4de6564",
        "scanned_at": "2026-07-22T08:07:17Z",
        "final_url": "https://gravidanza-app.cyou/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gravidanza-app.cyou/",
                "from": "http://gravidanza-app.cyou/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "fonts.googleapis.com",
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "cdn.jsdelivr.net",
            "static.cloudflare.com"
        ],
        "ips": [
            "142.251.20.94",
            "2606:4700::6811:d005",
            "2a00:1450:400a:1001::5f",
            "104.17.24.14",
            "188.114.97.3"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US",
            "CH"
        ],
        "doc_hash": "07c07d9a49fdd9a37b178a820f3b3bca959852775714a5a857b47c24669c6b27",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_xls1zyt0",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "gravidanza-app.cyou"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gravidanza-app.cyou",
            "protocol": "QUIC",
            "valid_to": "2026-09-08T17:16:53Z",
            "valid_from": "2026-06-10T16:16:58Z"
        },
        "domain_age_days": 160,
        "apex_age_days": 160,
        "tls_age_days": 41,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com; default-src 'self'; img-src 'self' data: blob:; script-sr",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:45:06Z",
        "uuid": "78826ac8-2771-457e-b661-aa1f479f267a",
        "scanned_at": "2026-10-27T23:42:12Z",
        "final_url": "https://gravidanza-app.cyou/",
        "status": 200,
        "history": [
            {
                "url": "https://gravidanza-app.cyou/",
                "status": 200
            }
        ],
        "dom_hash": "858a026f1f2548298f98a9f584ba99979b299adf4b34508073782a8d0722fa4e",
        "doc_hash": "2ad6e45874ecd6524cea872fa456879501b196727d498be867d996c31bf0d97c",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gravidanza-app.cyou",
                "type": "A",
                "value": "172.67.144.107"
            },
            {
                "name": "gravidanza-app.cyou",
                "type": "A",
                "value": "104.21.55.36"
            },
            {
                "name": "gravidanza-app.cyou",
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:906b"
            },
            {
                "name": "gravidanza-app.cyou",
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3724"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.19",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-02-11T10:37:44Z",
            "updated": "2026-03-01T12:20:46Z",
            "expires": "2027-02-11T23:59:59Z",
            "nameservers": [
                "byron.ns.cloudflare.com",
                "diva.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-28T00:12:09Z",
        "analysis_at": "2026-10-27T15:13:26Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 4,
            "undetected": 31
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "spam",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-02-11T00:00:00Z",
        "updated": "2026-02-11T00:00:00Z",
        "first_seen": "2026-02-11T13:45:11Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.144.107"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.55.36"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 ip4:46.166.131.92 ~all"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3724"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "diva.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "byron.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "byron.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "mail.gravidanza-app.cyou",
                "priority": 10
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "google-site-verification=ntsEcXs44Lb0iWyJTJdeO_SRUnmnjhBRUzxyTmwl508"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:906b"
            }
        ],
        "dns_at": "2026-10-27T15:18:47Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "gravidanza-app.cyou"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "6e28083e70cd976b0e3e056c9610009f",
            "sha256": "d8a1108565592d49c1e1ee9e125a6e92c5e789c01f64f32a51eb1868b10a41bf",
            "subject": "gravidanza-app.cyou",
            "valid_to": "2027-01-04T23:01:30Z",
            "valid_from": "2026-10-06T22:01:34Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "server transfer prohibited"
            ],
            "events": {
                "registration": "2026-02-11T10:37:44Z",
                "registrar expiration": "2027-02-11T10:37:44Z",
                "last update of RDAP database": "2026-04-12T01:07:42Z"
            },
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:45:21Z",
        "mail_config": {
            "mx": [
                "mail.gravidanza-app.cyou"
            ],
            "spf": "v=spf1 ip4:46.166.131.92 ~all",
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gravidanza-app.cyou"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T23:41:17Z",
            "first": "2026-10-22T11:03:43Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.18,
            "avg_page_bytes": 42606
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true,
            "sitemaps": [
                "https://gravidanza-app.cyou/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "title": "gravidanza | AI Trading Platform | Official Website",
            "robots": "index, follow",
            "description": "gravidanza presents a premium, AI-driven trading platform delivering automated bots, intelligent trading assistance, modular workflows, and security-first governance...",
            "canonicalUrl": "https://gravidanza-app.cyou/"
        },
        "trackers": {
            "requests": 19,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 5
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 16,
                "tls": 97,
                "wait": 107,
                "connect": 130,
                "download": 45
            },
            "response_ms": 395
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 145138,
            "co2_grams": 0.0053,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.58.97",
                    "host": "diva.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.67",
                    "host": "byron.ns.cloudflare.com"
                }
            ],
            "zone": "gravidanza-app.cyou"
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gravidanza-app.cyou"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "MX": [
                "{\"exchange\": \"mail.gravidanza-app.cyou\", \"priority\": 10}"
            ],
            "NS": [
                "byron.ns.cloudflare.com",
                "diva.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"byron.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418083530, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=ntsEcXs44Lb0iWyJTJdeO_SRUnmnjhBRUzxyTmwl508",
                "v=spf1 ip4:46.166.131.92 ~all"
            ],
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://challenges",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gravidanza-app.cyou"
            ]
        },
        "linked_pages": {
            "internal_count": 12
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-02-11T10:37:44Z",
            "updated": "2026-03-01T12:20:46Z",
            "expires": "2027-02-11T23:59:59Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "byron.ns.cloudflare.com",
                "diva.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "content-security-policy": "font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; default-src 'self'; frame-src https://challenges.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cl",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "no-referrer-when-downgrade",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```