# PhishDestroy domain threat record: duplicate-disabled-814826.invalid Content language: English Canonical HTML report: https://phishdestroy.io/domain/duplicate-disabled-814826.invalid/ Machine-readable companion: https://phishdestroy.io/domain/duplicate-disabled-814826.invalid/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-09-06 04:26:38 UTC - Last availability or vendor check: 2026-10-21 01:14:09 UTC - Stored record updated: 2026-10-22 14:22:01 UTC - VirusTotal detections in the stored snapshot: 15/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: genericcrypto ## Stored infrastructure - Observed IP address: 216.198.79.65 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Registration date in stored WHOIS data: 2026-09-02 15:36:29 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a074f7-1b34-7293-85e9-b227530d1922/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/duplicate-disabled-814826.invalid - Certificate Transparency search: https://crt.sh/?q=%25.duplicate-disabled-814826.invalid - Web Archive lookup: https://web.archive.org/web/*/https://duplicate-disabled-814826.invalid/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/3yXNXtn7/eb0333b9fce2.png Captured: 2026-09-06 04:26:38 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a074f7-1b34-7293-85e9-b227530d1922.png Captured: 2026-09-06 04:26:38 UTC Source report: https://urlscan.io/result/01a074f7-1b34-7293-85e9-b227530d1922/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/92469ff1-6e18-4d9c-8644-93a29cbf26cf.png Captured: 2026-09-06 04:30:33 UTC Source report: https://radar.cloudflare.com/scan/92469ff1-6e18-4d9c-8644-93a29cbf26cf SHA-256: aeb55490550092e1601b740f7a42ff1b2da963965301ab4f3f1d51f5c392d5dc ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T03:48:42Z", "uuid": "01a074f7-1b34-7293-85e9-b227530d1922", "scanned_at": "2026-09-06T04:25:54Z", "final_url": "https://www.ambiredesktop.app/", "status": 200, "ip": "216.198.79.65", "domains": [ "cdn.livechatinc.com", "api.livechatinc.com", "www.ambire.com", "accounts.livechatinc.com", "secure.livechatinc.com" ], "ips": [ "104.26.8.104", "23.33.238.105", "23.33.238.110", "104.72.70.86", "216.198.79.65" ], "asns": [ "13335", "20940", "16509" ], "countries": [ "AU", "US" ], "link_domains": [ "id-preview--0b9496c1-9a59-4d37-9183-f89da91a6466.lovable.app", "lovable.dev" ], "doc_hash": "00d71f74d86c8132fd5a0b3afafd2390f1aae9294a1a4c4d7375311c5214031a", "globals": [ "savepage_ShadowLoader", "__lc", "LiveChatWidget", "__lc_inited", "LC_API" ], "cookies": [ "__lc_cid", "__lc_cst", "__oauth_redirect_detector" ], "storage_keys": [ "__test_storage_support__" ], "tls": { "san": [ "*.ambiredesktop.app", "ambiredesktop.app" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "*.ambiredesktop.app", "protocol": "TLS 1.3", "valid_to": "2026-12-01T21:27:49Z", "valid_from": "2026-09-02T21:27:50Z" }, "domain_age_days": 3, "apex_age_days": 3, "tls_age_days": 3, "tls_valid_days": 89, "requests": 28, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericcrypto" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Crypto" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T03:59:30Z", "uuid": "92469ff1-6e18-4d9c-8644-93a29cbf26cf", "scanned_at": "2026-09-06T04:30:33Z", "final_url": "https://www.ambiredesktop.app/", "status": 200, "redirected": "https-only", "history": [ { "url": "http://www.ambiredesktop.app/", "status": 307 }, { "url": "https://www.ambiredesktop.app/", "status": 200 } ], "dom_hash": "8267a082909d7484483891b56449cb70830e28a7f34aa505aa7f1b8bd1674aff", "doc_hash": "fb9ac53043bd495e43127f54b9b603c13a99aaed393fa3de15a387234194e519", "phishing_v2": [ "phishing" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "www.ambiredesktop.app", "type": "A", "value": "64.29.17.65" }, { "name": "www.ambiredesktop.app", "type": "A", "value": "216.198.79.1" } ], "dnssec_valid": false, "ip": "64.29.17.65", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-09-02T17:36:29Z", "updated": "2026-09-02T17:36:30Z", "expires": "2027-09-02T17:36:29Z", "nameservers": [ "ns3.my-ndns.com", "ns4.my-ndns.com" ] } } } ```