# PhishDestroy domain threat record: duplicate-disabled-213231.invalid Content language: English Canonical HTML report: https://phishdestroy.io/domain/duplicate-disabled-213231.invalid/ Machine-readable companion: https://phishdestroy.io/domain/duplicate-disabled-213231.invalid/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-05-03 13:06:45 UTC - Last availability or vendor check: 2026-10-27 02:25:55 UTC - Stored record updated: 2026-10-28 11:22:30 UTC - VirusTotal detections in the stored snapshot: 2/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 208.91.198.105 - Registrar in stored WHOIS data: BigRock Solutions Ltd. - Registration date in stored WHOIS data: 2013-01-25 11:07:33 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019dedba-8335-70fe-a34a-b711b4a30e81/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/duplicate-disabled-213231.invalid - Certificate Transparency search: https://crt.sh/?q=%25.duplicate-disabled-213231.invalid - Web Archive lookup: https://web.archive.org/web/*/https://duplicate-disabled-213231.invalid/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis {"en": "PhishDestroy identifies ancillarie.com as a cryptocurrency drainer posing as a legitimate service to trick users into connecting wallets. This domain was flagged as an active generic phishing page designed to harvest private keys or initiate unauthorized transactions. \n\nTechnical analysis of this domain reveals concerning indicators. VirusTotal currently shows 0 out of 95 security engines detecting the threat, highlighting the domain's ability to evade initial detection systems. The domain was registered through BigRock Solutions Ltd. on January 25, 2013, which raises questions considering its recent malicious activity. Resolving to IP 208.91.198.105 and equipped with a Let's Encrypt SSL certificate, ancillarie.com employs legitimate infrastructure to appear trustworthy while hosting a fake login portal. While the exact blocklist count is undetermined, the lack of detection makes proactive user verification essential. \n\nIf you visited ancillarie.com or entered sensitive information, cease all crypto transactions from connected wallets immediately. Revoke any wallet connections made on this site through your wallet's connected app dashboard. Run a full antivirus scan on devices used to access the domain. Report the domain to PhishDestroy for further investigation and share your incident with your crypto platform's security team. Avoid interacting with unknown domains requesting wallet connections, especially those using newly issued SSL certificates or resolving to suspicious IPs.", "th": "Good question! The answer depends on a few factors."} Analysis generated: 2026-05-03 13:07:37 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019dedba-8335-70fe-a34a-b711b4a30e81.png Captured: 2026-05-03 13:06:45 UTC - URLScan capture: https://screenshots.phishdestroy.io/019dedba-8335-70fe-a34a-b711b4a30e81.png Source report: https://urlscan.io/result/019dedba-8335-70fe-a34a-b711b4a30e81/ ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T05:59:00Z", "uuid": "019dedba-8335-70fe-a34a-b711b4a30e81", "scanned_at": "2026-05-03T12:05:25Z", "final_url": "https://www.ancillarie.com/goal/", "status": 429, "ip": "208.91.198.105", "ptr": "cp-24.webhostbox.net", "ips": [ "208.91.198.105" ], "asns": [ "46606" ], "countries": [ "US" ], "doc_hash": "1e00f2a16e1f1e6066e0726c3549cccf39d012cbab12fe099096031ad3969707", "tls": { "san": [ "*.ancillarie.com", "ancillarie.com" ], "cipher": "AES_256_GCM", "issuer": "R13", "subject": "ancillarie.com", "protocol": "TLS 1.3", "valid_to": "2026-07-10T10:30:53Z", "valid_from": "2026-04-11T10:30:54Z" }, "domain_age_days": 2772, "apex_age_days": 2772, "tls_age_days": 22, "tls_valid_days": 89, "requests": 2, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 27, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache", "content-type": "text/html; charset=iso-8859-1" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T06:13:17Z", "uuid": "be8d2fb1-e576-4535-82ae-c04e719f2042", "scanned_at": "2026-05-03T12:07:16Z", "final_url": "https://www.ancillarie.com/", "status": 429, "history": [ { "url": "https://www.ancillarie.com/", "status": 429 } ], "dom_hash": "42065dba3b8a7b2130dd66fe299c26c1aa681d7c7f2893f8410bbcd2d2e1770d", "doc_hash": "1e00f2a16e1f1e6066e0726c3549cccf39d012cbab12fe099096031ad3969707", "domain_risks": [ "Business", "Business & Economy" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "www.ancillarie.com", "type": "CNAME", "value": "ancillarie.com" }, { "name": "ancillarie.com", "type": "A", "value": "208.91.198.105" }, { "name": "www.ancillarie.com", "type": "CNAME", "value": "ancillarie.com" } ], "dnssec_valid": false, "ip": "208.91.198.105", "whois": { "registrar": "BigRock Solutions Ltd", "created": "2013-01-25T12:07:33Z", "updated": "2025-01-20T07:18:08Z", "expires": "2034-01-25T12:07:33Z", "nameservers": [ "ns1.cp-24.webhostbox.net", "ns2.cp-24.webhostbox.net" ] } } } ```