# ordexiagpt.digital AI Trading Platform Access Form | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/ordexiagpt.digital/
Machine-readable companion: https://phishdestroy.io/domain/ordexiagpt.digital/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-11-01 11:54:32 UTC
- Stored record updated: 2026-11-01 13:00:12 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 185.62.58.101
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-03-12 17:49:29 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a08598-9e85-707b-af27-8cb6a0d38dee/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/ordexiagpt.digital
- Certificate Transparency search: https://crt.sh/?q=%25.ordexiagpt.digital
- Web Archive lookup: https://web.archive.org/web/*/https://ordexiagpt.digital/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records the captured ordexiagpt.digital page as an AI trading platform access form inviting visitors to join.

The captured ordexiagpt.digital page presents itself as an AI trading platform, with a headline calling it a premier AI trading engine and feature chips describing forex and CFD automation, AI-driven guidance, and autonomous trading bots. The main interaction is a Join Ordexia GPT Access panel on the right, which asks for first name, last name, email address, and phone number, includes a Cloudflare human-verification checkbox, and ends with a JOIN NOW button. A disclaimer banner at the bottom states the site functions solely as a marketing platform and does not provide trading or investment services.

The stored VirusTotal domain result reports 17 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "suspicious".
Package revision: 0ecb48d6c82f5a211d75eb17a235ae6051b06d06e30dc1cb81f3dfe20262a650
Text generated (not scan time): 2026-11-01 13:01:20
Reviewed evidence snapshot: {"domain":"ordexiagpt.digital","screenshot_available":true,"page_title":"Ordexia GPT | AI Trading Platform | Official Website","original_meta_description":"Ordexia GPT delivers AI-powered trading insights and automated bot tooling for CFD and forex workflows, with setup, controls, and execution transparency.","metadata_observed_on":"2026-11-01","virustotal":{"detections":17,"engines":92,"malicious":12,"suspicious":5,"retrieved_date":"2026-11-01","analysis_date":"2026-10-18","flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"malware","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"spam","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T11:58:34Z","final_host":"ordexiagpt.digital","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 17 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"suspicious\".","page_paragraph_target_characters":517}
Source facts (timestamps as stored): {"record_id":1730343,"first_recorded_at":"2026-11-01 12:54:32","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":17,"denominator":92,"malicious":12,"suspicious":5,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"malware","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"spam","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-18T13:41:16Z","checked_at":"2026-11-01 12:57:27","fetched_at":"2026-11-01T11:57:27Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":17,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-18 13:41:16","checked_at":"2026-11-01 12:57:27","fetched_at":"2026-11-01 11:57:28","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 12:58:01"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"source":"stored HTTP observation","state":"unknown","observed_at":null}}

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a08598-9e85-707b-af27-8cb6a0d38dee.png
  Captured: 2026-11-01 11:54:32 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a08598-9e85-707b-af27-8cb6a0d38dee.png
  Source report: https://urlscan.io/result/01a08598-9e85-707b-af27-8cb6a0d38dee/
- URLScan · 2026-03-14: https://screenshots.phishdestroy.io/us/019cec53-9375-764d-98d3-08193d2edb15.png
  Captured: 2026-03-14 12:30:32 UTC
  Source report: https://urlscan.io/result/019cec53-9375-764d-98d3-08193d2edb15/
  SHA-256: 296918dd6878aa949c984cf01eaf40c306b67018ff81d9f503c94b294ed5c474
- URLScan · 2026-09-08: https://screenshots.phishdestroy.io/us/01a07f10-ea0d-73ab-ab45-4b88ac25a15f.png
  Captured: 2026-09-08 03:30:18 UTC
  Source report: https://urlscan.io/result/01a07f10-ea0d-73ab-ab45-4b88ac25a15f/
  SHA-256: 617c24e0bf0c1e1721867448c155144e157b88426e3e7b6b574fdf044e8edc25
- URLScan · 2026-09-08: https://screenshots.phishdestroy.io/us/01a0806f-eb25-7476-96d9-873af9be3525.png
  Captured: 2026-09-08 09:53:39 UTC
  Source report: https://urlscan.io/result/01a0806f-eb25-7476-96d9-873af9be3525/
  SHA-256: 0d9ff231abc84d76ebb51b6ef101f2595ee950aa18bcfea94e313cb46de4cf26
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/f8709064-3b61-4a8d-acd7-5d48aa3b89a7.png
  Captured: 2026-11-01 11:58:34 UTC
  Source report: https://radar.cloudflare.com/scan/f8709064-3b61-4a8d-acd7-5d48aa3b89a7
  SHA-256: 149b43fad5b9fd83fe6df7ccd9e4ecaab82b8af2f966a23e9fc2d60b01a59b65

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-01T12:00:12Z",
        "uuid": "01a08598-9e85-707b-af27-8cb6a0d38dee",
        "scanned_at": "2026-09-09T09:56:12Z",
        "final_url": "https://ordexiagpt.digital/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://ordexiagpt.digital/",
                "from": "http://ordexiagpt.digital/",
                "status": 307
            }
        ],
        "ip": "185.62.58.101",
        "ptr": "mysupervps.exmaple.com",
        "domains": [
            "cdn.jsdelivr.net",
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "www.cloudflare.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "104.17.208.5",
            "142.251.110.94",
            "104.16.123.96",
            "2606:4700::6811:cf05",
            "104.17.24.14",
            "2a00:1450:4001:c0f::5f",
            "185.62.58.101"
        ],
        "asns": [
            "13335",
            "15169",
            "62370"
        ],
        "countries": [
            "US",
            "DE",
            "NL"
        ],
        "doc_hash": "a18092907ef7a4b44ec95b2b2f9b5d0ca8136d01bdd45a81b2093fdd39dfeb90",
        "script_hashes": [
            "dcffb692e1e6bda024f7830b7f5a3fa758c06ede0ac195daebf2c9fe01442f3f"
        ],
        "globals": [
            "toggleTermsPopup",
            "intlTelInput",
            "ClientJS",
            "__visitorCountry"
        ],
        "storage_keys": [
            "t_cfp"
        ],
        "tls": {
            "san": [
                "ordexiagpt.digital"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "ordexiagpt.digital",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-07T23:59:59Z",
            "valid_from": "2026-09-08T00:00:00Z"
        },
        "domain_age_days": 179,
        "apex_age_days": 179,
        "tls_age_days": 1,
        "tls_valid_days": 90,
        "requests": 20,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-01T12:00:14Z",
        "uuid": "f8709064-3b61-4a8d-acd7-5d48aa3b89a7",
        "scanned_at": "2026-11-01T11:58:34Z",
        "final_url": "https://ordexiagpt.digital/",
        "status": 200,
        "history": [
            {
                "url": "https://ordexiagpt.digital/",
                "status": 200
            }
        ],
        "dom_hash": "0e2c55ca832f4628e675fee44a3557f95453b330dccc0e6a59bd83df687e26ff",
        "doc_hash": "2ceaf58037d95b8819ce3f5fe1e2f3ac2f44a6425de73c64e1ab98147c31dbf3",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "DGA Domains",
            "Security threats",
            "Malware",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "ordexiagpt.digital",
                "type": "A",
                "value": "185.62.58.101"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.8",
        "verdict": {
            "tags": [
                "dga domains",
                "malware"
            ],
            "malicious": true,
            "categories": [
                "dga domains",
                "malware"
            ]
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-03-12T18:49:29Z",
            "updated": "2026-08-12T03:48:19Z",
            "expires": "2027-03-12T18:49:29Z",
            "nameservers": [
                "neil.ns.cloudflare.com",
                "stella.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-01T11:57:27Z",
        "analysis_at": "2026-10-18T13:41:16Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 12,
            "suspicious": 5,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "malware",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "spam",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "spam",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "Sophos": "phishing and fraud",
            "Webroot": "Phishing and Other Frauds",
            "alphaMountain.ai": "Spam (alphaMountain.ai)"
        },
        "first_seen": "2026-03-13T10:19:01Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "stella.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "neil.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "185.62.58.101"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "neil.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-18T13:46:32Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "ordexiagpt.digital"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "919fd606a2e598e228d5b986baf5730b",
            "sha256": "447c9d575f9966a5399c97431724fff4593ee6f39d3dce3cc9325e44890a6e27",
            "subject": "ordexiagpt.digital",
            "valid_to": "2026-12-07T23:59:59Z",
            "valid_from": "2026-09-08T00:00:00Z"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-03-12T16:00:00Z",
                "registration": "2026-03-12T16:00:00Z",
                "registrar expiration": "2027-03-12T16:00:00Z",
                "last update of RDAP database": "2026-03-12T16:00:00Z"
            },
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-01T12:00:32Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "ordexiagpt.digital"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://ordexiagpt.digital/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "ogUrl": "https://ordexiagpt.digital/",
            "title": "Ordexia GPT | AI Trading Platform | Official Website",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Ordexia GPT | Premium AI Trading Assistants & Automation",
            "ogSiteName": "Ordexia GPT",
            "themeColor": "#0f1114",
            "description": "Ordexia GPT delivers AI-powered trading insights and automated bot tooling for CFD and forex workflows, with setup, controls, and execution transparency.",
            "twitterCard": "summary",
            "canonicalUrl": "https://ordexiagpt.digital/",
            "ogDescription": "Ordexia GPT delivers AI-powered trading insights and automated bot tooling for CFD and forex workflows, with setup, controls, and execution transparency."
        },
        "trackers": {
            "requests": 20,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 7
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 351,
                "tls": 58,
                "wait": 36,
                "connect": 84,
                "download": 21
            },
            "response_ms": 550
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 44002,
            "co2_grams": 0.0016,
            "cleaner_than": 40
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.154",
                    "host": "stella.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.193.211",
                    "host": "neil.ns.cloudflare.com"
                }
            ],
            "zone": "ordexiagpt.digital"
        },
        "location": {
            "ip": "185.62.58.101",
            "asn": "62370",
            "org": "Snel.com B.V.",
            "city": "Rotterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "ordexiagpt.digital"
        },
        "dns": {
            "A": [
                "185.62.58.101"
            ],
            "NS": [
                "stella.ns.cloudflare.com",
                "neil.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"neil.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415767796, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "no-referrer-when-downgrade",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "185.62.58.101",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://ordexiagpt.digital"
            ]
        },
        "linked_pages": {
            "internal_count": 11
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "referrer-policy": "no-referrer-when-downgrade"
            }
        }
    }
}
```