Is gpg.cc a scam? What our scan found

{
  "domain": "gpg.cc",
  "scanId": "466221ef0cf34d67b8b6116788aab0d8",
  "status": "completed",
  "indexable": false,
  "publicNotice": null,
  "completedAt": "2026-10-01T01:58:35.219Z",
  "ageDays": 24,
  "fresh": false,
  "verdict": "dangerous",
  "trustScore": 1,
  "badges": [
    {
      "name": "antivirus_tier4",
      "chain": "antivirus",
      "tier": 4,
      "maxTier": 4,
      "score": -99,
      "description": "Detected by 10+ engines"
    },
    {
      "name": "scam_farm_tier2",
      "chain": "scam_farm",
      "tier": 2,
      "maxTier": 4,
      "score": -22,
      "description": "Shares code with 3-4 domains"
    }
  ],
  "reachable": true,
  "unreachableReason": null,
  "category": "cybersecurity",
  "categoryReasoning": "This site appears to be a security scanning or validation service that checks for risks and provides network security assessments before allowing users to proceed to another destination.",
  "siteDesign": null,
  "regulatorFlagged": false,
  "regulators": [],
  "contacts": {
    "emails": [],
    "phones": [],
    "addresses": []
  },
  "technologies": [
    {
      "name": "Nginx",
      "category": "web-server"
    }
  ],
  "antivirus": {
    "detections": [
      {
        "engine": "alphaMountain.ai",
        "result": "phishing",
        "engineType": "security_vendor"
      },
      {
        "engine": "BitDefender",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "Chong Lua Dao",
        "result": "malicious",
        "engineType": "phishing_authority"
      },
      {
        "engine": "CyRadar",
        "result": "phishing",
        "engineType": "security_vendor"
      },
      {
        "engine": "ESET",
        "result": "suspicious",
        "engineType": "antivirus"
      },
      {
        "engine": "Forcepoint ThreatSeeker",
        "result": "malicious",
        "engineType": "security_vendor"
      },
      {
        "engine": "G-Data",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "Gridinsoft",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "Kaspersky",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "Lionic",
        "result": "malicious",
        "engineType": "security_vendor"
      },
      {
        "engine": "Sophos",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "VIPRE",
        "result": "phishing",
        "engineType": "antivirus"
      }
    ],
    "enginesTotal": 91,
    "permalink": "https://www.virustotal.com/gui/domain/gpg.cc",
    "scannedAt": "2026-10-01T01:58:24.537Z"
  },
  "blacklists": [
    {
      "provider": "google_safe_browsing",
      "flagged": false,
      "threats": []
    }
  ],
  "registration": {
    "registrar": "Gname.com Pte. Ltd.",
    "registrarIanaId": "1923",
    "createdAt": "2024-02-08T09:02:14.000Z",
    "updatedAt": "2026-06-29T07:24:07.000Z",
    "expiresAt": "2027-02-08T09:02:14.000Z",
    "ageDays": 965,
    "ageText": "2y 7m",
    "privacyProtected": false,
    "nameservers": [
      "a3.share-dns.com",
      "b3.share-dns.net"
    ]
  },
  "certificate": {
    "issuer": "Let's Encrypt",
    "validFrom": "2026-08-22T10:07:01.000Z",
    "validUntil": "2026-11-20T10:07:00.000Z",
    "valid": true,
    "protocol": "TLSv1.3"
  },
  "hosting": {
    "ip": "154.81.136.190",
    "countryCode": "US",
    "countryName": "United States",
    "city": "Los Angeles",
    "provider": "Zillion Network Inc.",
    "asn": 54801,
    "serverSoftware": "nginx",
    "mapImageUrl": null,
    "latitude": 34.0522,
    "longitude": -118.2437,
    "behindCloudflare": false
  },
  "timing": {
    "dnsMs": 0,
    "connectMs": 175,
    "tlsMs": 162,
    "ttfbMs": 330,
    "downloadMs": 3,
    "domReadyMs": 682,
    "loadCompleteMs": 729
  },
  "resources": [
    {
      "kind": "documents",
      "count": 1,
      "bytes": 0
    }
  ],
  "networkStats": {
    "totalRequests": 1,
    "totalBytes": 0,
    "failedRequests": 0,
    "uniqueDomains": 1,
    "thirdPartyRatio": 0,
    "httpsPercentage": 100
  },
  "cookies": [
    {
      "name": "ssid",
      "domain": "gpg.cc",
      "secure": true,
      "httpOnly": true,
      "expiresAt": null
    },
    {
      "name": "lang",
      "domain": "gpg.cc",
      "secure": true,
      "httpOnly": true,
      "expiresAt": null
    }
  ],
  "identity": {
    "finalUrl": "https://gpg.cc/",
    "brandName": null,
    "faviconUrl": "/api/scan/favicon/466221ef0cf34d67b8b6116788aab0d8"
  },
  "telemetry": {
    "statusCode": 200,
    "durationMs": 22180,
    "scraper": "patchright",
    "attempts": 1,
    "source": "batch",
    "contentType": "text/html; charset=utf-8"
  },
  "securityHeaders": [
    {
      "key": "content_security_policy",
      "present": false,
      "value": null
    },
    {
      "key": "strict_transport_security",
      "present": true,
      "value": "max-age=31536000\nmax-age=31536000"
    },
    {
      "key": "x_frame_options",
      "present": true,
      "value": "sameorigin"
    },
    {
      "key": "x_content_type_options",
      "present": false,
      "value": null
    },
    {
      "key": "referrer_policy",
      "present": false,
      "value": null
    },
    {
      "key": "permissions_policy",
      "present": false,
      "value": null
    },
    {
      "key": "x_xss_protection",
      "present": false,
      "value": null
    },
    {
      "key": "cross_origin_opener_policy",
      "present": false,
      "value": null
    }
  ],
  "redirects": [],
  "transactions": [
    {
      "url": "https://gpg.cc/",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": false
    }
  ],
  "hasCapture": true,
  "archive": {},
  "networkSize": 3
}