# PhishDestroy domain threat record: duplicate-disabled-401742.invalid Content language: English Canonical HTML report: https://phishdestroy.io/domain/duplicate-disabled-401742.invalid/ Machine-readable companion: https://phishdestroy.io/domain/duplicate-disabled-401742.invalid/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-08-09 21:52:28 UTC - Last availability or vendor check: 2026-10-21 01:16:24 UTC - Stored record updated: 2026-10-22 14:22:01 UTC - VirusTotal detections in the stored snapshot: 8/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: across ## Stored infrastructure - Observed IP address: 104.21.49.90 - Registrar in stored WHOIS data: OrangeHost LLC - Registration date in stored WHOIS data: 2026-02-22 13:28:41 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019fe881-7c62-753a-9f55-45848569806d/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/duplicate-disabled-401742.invalid - Certificate Transparency search: https://crt.sh/?q=%25.duplicate-disabled-401742.invalid - Web Archive lookup: https://web.archive.org/web/*/https://duplicate-disabled-401742.invalid/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019fe881-7c62-753a-9f55-45848569806d.png Captured: 2026-08-09 21:52:28 UTC - URLScan capture: https://screenshots.phishdestroy.io/019fe881-7c62-753a-9f55-45848569806d.png Captured: 2026-08-09 21:52:28 UTC Source report: https://urlscan.io/result/019fe881-7c62-753a-9f55-45848569806d/ ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T10:13:00Z", "uuid": "019fe881-7c62-753a-9f55-45848569806d", "scanned_at": "2026-08-09T21:51:01Z", "final_url": "https://www.gallantpeak.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://www.gallantpeak.com/", "from": "http://www.gallantpeak.com/", "status": 307 } ], "ip": "104.21.49.90", "domains": [ "www.tradingview-widget.com", "cdn.jsdelivr.net", "widgetdata.tradingview.com", "fonts.gstatic.com", "widget-sheriff.tradingview-widget.com", "fonts.googleapis.com", "gallantpeak.com", "static.cloudflareinsights.com", "s3.tradingview.com" ], "ips": [ "172.253.115.94", "3.161.213.118", "142.251.163.95", "152.233.50.1", "104.16.80.73", "37.19.207.37", "151.101.1.229", "104.21.49.90" ], "asns": [ "16509", "15169", "212238", "13335", "60068", "54113" ], "countries": [ "US", "GB" ], "link_domains": [ "gallantpeak.com", "www.youtube.com", "www.tradingview.com" ], "social": [ "https://www.youtube.com/watch" ], "doc_hash": "c9789fdb6bcc77becc18a33e9dd6e1ea39b8d16e7f62369b78f6a335fc15769f", "script_hashes": [ "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8", "28157db3a4367484fd5f111e477b568d2c4020c919ae00c94760df71b77d3481", "ea04f0f0236f7455bbe2a5e0bf16d5f65ab125e6cd1e474af326f892d94699a3", "263a75ca330de270700fe6ecfabb7889aa1aee32b2fce1ef3881146c134d0124" ], "tls": { "san": [ "*.gallantpeak.com", "gallantpeak.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "gallantpeak.com", "protocol": "QUIC", "valid_to": "2026-10-15T08:12:50Z", "valid_from": "2026-07-17T08:12:51Z" }, "domain_age_days": 51, "apex_age_days": 173, "tls_age_days": 23, "tls_valid_days": 89, "requests": 95, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 78, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "geolocation=(), microphone=(), camera=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T11:46:47Z", "uuid": "a8310742-cd82-4b72-b4a2-bb8368a87024", "scanned_at": "2026-08-09T22:26:59Z", "final_url": "https://www.gallantpeak.com/", "status": 200, "history": [ { "url": "https://www.gallantpeak.com/", "status": 200 } ], "dom_hash": "d939073d28a0c1484798ec421c334f46706459202790ad17e6fa8517fee8c7b6", "doc_hash": "fb0bccb13afed03be2fa3dd0619cbba9f8893c9d996bfb1a1563567ed72a03a5", "domain_risks": [ "Scam", "Security threats", "Brokerage & Investing", "Business & Economy", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "gallantpeak.com", "type": "A", "value": "172.67.189.112" }, { "name": "gallantpeak.com", "type": "A", "value": "104.21.49.90" }, { "name": "gallantpeak.com", "type": "AAAA", "value": "2606:4700:3035::6815:315a" }, { "name": "gallantpeak.com", "type": "AAAA", "value": "2606:4700:3037::ac43:bd70" }, { "name": "www.gallantpeak.com", "type": "A", "value": "172.67.189.112" }, { "name": "www.gallantpeak.com", "type": "A", "value": "104.21.49.90" }, { "name": "www.gallantpeak.com", "type": "AAAA", "value": "2606:4700:3035::6815:315a" }, { "name": "www.gallantpeak.com", "type": "AAAA", "value": "2606:4700:3037::ac43:bd70" } ], "dnssec_valid": false, "ip": "172.67.189.112", "whois": { "registrar": "OrangeHost LLC", "created": "2026-02-22T14:28:41Z", "updated": "2026-05-19T08:56:04Z", "expires": "2027-02-22T14:28:41Z", "nameservers": [ "felipe.ns.cloudflare.com", "maisie.ns.cloudflare.com" ] } } } ```