# PhishDestroy domain threat record: gravidanza-engine.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gravidanza-engine.com/
Machine-readable companion: https://phishdestroy.io/domain/gravidanza-engine.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:38:00 UTC
- Stored record updated: 2026-10-28 01:00:15 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: MainReg Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-02-09 10:17:02 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019f88dd-3959-754c-8648-dd0b2a0b3f84/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gravidanza-engine.com
- Certificate Transparency search: https://crt.sh/?q=%25.gravidanza-engine.com
- Web Archive lookup: https://web.archive.org/web/*/https://gravidanza-engine.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has added gravidanza-engine.com to its internal blocklist as a suspicious domain. The domain was first seen by PhishDestroy on 2026-10-28, when a page with the title "gravidanza | AI Trading Platform | Official Website" returned HTTP 200.

How the scam works
The multiple vendor detections that triggered the listing commonly flag sites that promote AI‑driven trading services as potential financial‑fraud or malware lures. Such pages may try to persuade visitors to disclose credentials, install software, or make payments, but the captured page did not show a phishing form or malicious payload.

Evidence
VirusTotal scanned the domain on 2026-10-27 and reported 17 detections from 92 engines, of which 14 were labeled malicious and 3 suspicious. Google Safe Browsing checked on 2026-10-28 and returned no flag. urlscan.io captured the site on 2026-07-22; its machine‑learning engine gave a malicious score of 98, while the overall verdict was non‑malicious. OTX listed one pulse referencing the domain on 2026-10-28. PhishDestroy’s internal blocklist marked the domain as suspicious on 2026-10-27, and external blocklists showed zero entries at that time.

Infrastructure
The domain was registered with MainReg Inc. on 2026-02-09, giving it an age of 261 days at first sighting. Hosting is provided through Cloudflare, recorded under the network label CloudFLARENET‑EU, with the IPv4 address 188.114.97.1 (and IPv6 2a06:98c1:3121::3) shown as located in GB. The TLS certificate observed was issued by Google Trust Services, valid from 2026-06-07 to 2026-09-05 and using AES_128_GCM.

What to do
Visitors should avoid entering credentials, personal data, or downloading files from the site; if any information was submitted, change the associated passwords and monitor accounts for unusual activity. Security teams can block the exact domain in web filters and watch DNS queries for gravidanza-engine.com, reviewing logs for connections to the recorded IP addresses while avoiding blanket blocks of shared infrastructure.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019f88dd-3959-754c-8648-dd0b2a0b3f84/
Cloudflare Radar report: https://radar.cloudflare.com/scan/f5552a3b-c281-49c8-a402-6e60a6ef4dc9
Stored capture screenshot: https://urlscan.io/screenshots/019f88dd-3959-754c-8648-dd0b2a0b3f84.png
Cloudflare Radar screenshot (2026-10-27T23:42:12Z): https://screenshots.phishdestroy.io/cf/f5552a3b-c281-49c8-a402-6e60a6ef4dc9.png
VirusTotal report: https://www.virustotal.com/gui/domain/gravidanza-engine.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gravidanza-engine.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 23:45:51 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019f88dd-3959-754c-8648-dd0b2a0b3f84.png
  Captured: 2026-10-27 23:38:00 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019f88dd-3959-754c-8648-dd0b2a0b3f84.png
  Source report: https://urlscan.io/result/019f88dd-3959-754c-8648-dd0b2a0b3f84/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f5552a3b-c281-49c8-a402-6e60a6ef4dc9.png
  Captured: 2026-10-27 23:42:12 UTC
  Source report: https://radar.cloudflare.com/scan/f5552a3b-c281-49c8-a402-6e60a6ef4dc9
  SHA-256: 7c0fba4e981e92c2d53c06bbd71d78f522aa14dc51c41c9e3e21c6221167eb27

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:45:00Z",
        "uuid": "019f88dd-3959-754c-8648-dd0b2a0b3f84",
        "scanned_at": "2026-07-22T08:07:13Z",
        "final_url": "https://gravidanza-engine.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gravidanza-engine.com/",
                "from": "http://gravidanza-engine.com/",
                "status": 307
            }
        ],
        "ip": "2a06:98c1:3121::3",
        "domains": [
            "cdnjs.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "188.114.97.3",
            "2606:4700::6811:d005",
            "2a00:1450:400a:1000::5f",
            "104.17.24.14",
            "2a06:98c1:3121::3"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "CH"
        ],
        "doc_hash": "2e7c1604d031d39f50c24038a9a0ab7843429b12a95c5f5a4a45649a9a22d595",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_etirbg38",
            "toggleTermsPopup",
            "__cfQR",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "gravidanza-engine.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gravidanza-engine.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-09-05T22:54:00Z",
            "valid_from": "2026-06-07T21:54:02Z"
        },
        "domain_age_days": 162,
        "apex_age_days": 162,
        "tls_age_days": 44,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "content-security-policy": "frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:45:02Z",
        "uuid": "f5552a3b-c281-49c8-a402-6e60a6ef4dc9",
        "scanned_at": "2026-10-27T23:42:12Z",
        "final_url": "https://gravidanza-engine.com/",
        "status": 200,
        "history": [
            {
                "url": "https://gravidanza-engine.com/",
                "status": 200
            }
        ],
        "dom_hash": "9554a1ac860706a281a7b5525df6655d4cc6ab42bc1ae35c14967c24b7ea9245",
        "doc_hash": "7e0fe1fe0e3f7de433a9fb0eef1f8f22571d41157fd73e2375ee8ba94c6643a7",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gravidanza-engine.com",
                "type": "A",
                "value": "172.67.159.152"
            },
            {
                "name": "gravidanza-engine.com",
                "type": "A",
                "value": "104.21.66.117"
            },
            {
                "name": "gravidanza-engine.com",
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:9f98"
            },
            {
                "name": "gravidanza-engine.com",
                "type": "AAAA",
                "value": "2606:4700:3031::6815:4275"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.14",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2026-02-09T11:17:02Z",
            "updated": "2026-02-09T14:31:02Z",
            "expires": "2027-02-09T11:17:02Z",
            "nameservers": [
                "corey.ns.cloudflare.com",
                "veda.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T23:40:56Z",
        "analysis_at": "2026-10-27T15:12:57Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 14,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "spam",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-02-09T00:00:00Z",
        "updated": "2026-02-09T00:00:00Z",
        "first_seen": "2026-02-09T14:49:55Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "veda.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.66.117"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:9f98"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "corey.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "mail.gravidanza-engine.com",
                "priority": 10
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "google-site-verification=sK7nz-XUBXhlE8KLGiWMSLWBqLRbTdko-h6E7XnKjNQ"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "corey.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 ip4:46.166.131.92 ~all"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::6815:4275"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.159.152"
            }
        ],
        "dns_at": "2026-10-27T15:18:29Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "gravidanza-engine.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "49dda6f699300122139b6f9bff82e3bb",
            "sha256": "7008ceeb86282664ea91b349f92e872d89764ca10e115911e83b3e22a2f970b9",
            "subject": "gravidanza-engine.com",
            "valid_to": "2027-01-02T02:57:26Z",
            "valid_from": "2026-10-04T01:57:30Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "last changed": "2026-02-09T00:00:00Z",
                "registration": "2026-02-09T00:00:00Z",
                "registrar expiration": "2027-02-09T00:00:00Z",
                "last update of RDAP database": "2026-10-27T15:18:00Z"
            },
            "registrar": "MainReg Inc.",
            "registrar_iana_id": "1917"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:45:20Z",
        "mail_config": {
            "mx": [
                "mail.gravidanza-engine.com"
            ],
            "spf": "v=spf1 ip4:46.166.131.92 ~all",
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gravidanza-engine.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T23:41:33Z",
            "first": "2026-10-27T23:41:33Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 43444
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://gravidanza-engine.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://gravidanza-engine.com/",
            "title": "gravidanza | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "gravidanza | Premium AI-Driven Trading Automation",
            "ogSiteName": "gravidanza",
            "themeColor": "#f4faff",
            "description": "gravidanza delivers a premium AI-powered trading automation suite with precise execution controls and risk-focused workflows for crystal-clear oversight and streamlined portfolio operations.",
            "twitterCard": "summary",
            "canonicalUrl": "https://gravidanza-engine.com/",
            "ogDescription": "gravidanza delivers a premium AI-powered trading automation suite with precise execution controls and risk-focused workflows for crystal-clear oversight and streamlined portfolio operations."
        },
        "trackers": {
            "requests": 17,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 18,
                "wait": 189,
                "connect": 26,
                "download": 40
            },
            "response_ms": 274
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 147505,
            "co2_grams": 0.0054,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.34.147",
                    "host": "veda.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.24",
                    "host": "corey.ns.cloudflare.com"
                }
            ],
            "zone": "gravidanza-engine.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gravidanza-engine.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "MX": [
                "{\"exchange\": \"mail.gravidanza-engine.com\", \"priority\": 10}"
            ],
            "NS": [
                "corey.ns.cloudflare.com",
                "veda.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"corey.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418083532, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=sK7nz-XUBXhlE8KLGiWMSLWBqLRbTdko-h6E7XnKjNQ",
                "v=spf1 ip4:46.166.131.92 ~all"
            ],
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; font",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gravidanza-engine.com"
            ]
        },
        "linked_pages": {
            "internal_count": 40
        },
        "whois": {
            "registrar": "MainReg Inc.",
            "created": "2026-02-09T11:17:02Z",
            "updated": "2026-02-09T14:31:02Z",
            "expires": "2027-02-09T11:17:02Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "corey.ns.cloudflare.com",
                "veda.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "content-security-policy": "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; frame-src https://challenges.cloudflare.com; connect-src 'self' https://cloudflarein",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```