# duplicate-disabled-522922.invalid — Recorded security evidence | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/duplicate-disabled-522922.invalid/ Machine-readable companion: https://phishdestroy.io/domain/duplicate-disabled-522922.invalid/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-08-18 16:40:08 UTC - Last availability or vendor check: 2026-11-01 02:14:55 UTC - Stored record updated: 2026-11-01 23:22:03 UTC - VirusTotal detections in the stored snapshot: 12/91 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 185.53.179.109 - Registrar in stored WHOIS data: GMO Internet Group, Inc. d/b/a Onamae.com - Registration date in stored WHOIS data: 2025-10-29 04:43:25 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019b213a-11b4-77f3-8b49-7795cd3b4c41/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/duplicate-disabled-522922.invalid - Certificate Transparency search: https://crt.sh/?q=%25.duplicate-disabled-522922.invalid - Web Archive lookup: https://web.archive.org/web/*/https://duplicate-disabled-522922.invalid/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy stores a record for duplicate-disabled-522922.invalid. Source observations are dated separately; missing checks do not establish safety. PhishDestroy stores a record for duplicate-disabled-522922.invalid. Source observations are dated separately; missing checks do not establish safety. A reviewed analysis is not available for this text revision. Consult the dated source records below. Package revision: 931cec7d63c7bc7f9842d3e6949ba3a34aee22ca0f4367900d9582abe6b6db8c Source facts (timestamps as stored): {"record_id":522922,"first_recorded_at":"2026-08-18 18:40:08","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":null,"numerator":12,"denominator":91,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","Forcepoint ThreatSeeker","Fortinet","G-Data","Lionic","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":null,"checked_at":"2026-08-28 05:14:19","fetched_at":null,"time_basis":"as stored; legacy timezone not established"},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-08-20 18:20:19"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-09-18 00:30:57"},"availability":{"source":"stored HTTP observation","state":"dead","observed_at":"2026-11-01 03:14:55"}} ## Stored page captures - URLScan · 2025-12-15: https://urlscan.io/screenshots/019b213a-11b4-77f3-8b49-7795cd3b4c41.png Captured: 2025-12-15 08:56:57 UTC Source report: https://urlscan.io/result/019b213a-11b4-77f3-8b49-7795cd3b4c41/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1b2814fa-3cc6-4e9b-ba3d-0072c73ccf5b.png Captured: 2026-08-18 17:49:17 UTC Source report: https://radar.cloudflare.com/scan/1b2814fa-3cc6-4e9b-ba3d-0072c73ccf5b SHA-256: ae5f3d5cd481858f38341090c4d0a9a5d677f959ac7538409d7368b2899211bd ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T07:17:28Z", "uuid": "019b213a-11b4-77f3-8b49-7795cd3b4c41", "scanned_at": "2025-12-15T08:56:57Z", "final_url": "https://www.tetherusdtwallet.com/login", "status": 200, "ip": "104.21.67.63", "domains": [ "static.cloudflareinsights.com" ], "ips": [ "104.16.80.73", "104.21.67.63" ], "asns": [ "13335" ], "doc_hash": "7aa2ff928eb048457670cdfb1fdce8a37bfc3c23657bad7b8a5872cd2f571ab2", "script_hashes": [ "ae447601cf17b9ac77d9cc4c34b20af6fe8f10a611963a340d2e8563d7a73bb7" ], "globals": [ "__cfBeacon" ], "cookies": [ "cf_clearance" ], "tls": { "san": [ "tetherusdtwallet.com", "*.tetherusdtwallet.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "tetherusdtwallet.com", "protocol": "QUIC", "valid_to": "2026-01-27T05:44:34Z", "valid_from": "2025-10-29T04:46:53Z" }, "domain_age_days": 1139, "apex_age_days": 1139, "tls_age_days": 47, "tls_valid_days": 90, "requests": 8, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-0.1.0-1-d9114fd" ], "score": -13, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html;charset=UTF-8", "x-frame-options": "DENY", "x-content-type-options": "nosniff" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T07:27:40Z", "uuid": "1b2814fa-3cc6-4e9b-ba3d-0072c73ccf5b", "scanned_at": "2026-08-18T17:49:17Z", "final_url": "https://www.tetherusdtwallet.com/", "history": [ { "url": "https://www.tetherusdtwallet.com/", "status": 0 } ], "dom_hash": "433a5e367a2aeb4769756ee4cc70d4ffb3e81ed2c2fddf9de5834d9d14dd2a4d", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "www.tetherusdtwallet.com", "type": "A", "value": "185.53.179.109" } ], "dnssec_valid": false, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2025-10-29T05:43:25Z", "updated": "2026-06-22T01:00:22Z", "expires": "2026-10-29T05:43:25Z", "nameservers": [ "ns1.muumuu-domain.com", "ns2.muumuu-domain.com" ] } } } ```