# PhishDestroy domain threat record: eclatgainetrasystem.click Content language: English Canonical HTML report: https://phishdestroy.io/domain/eclatgainetrasystem.click/ Machine-readable companion: https://phishdestroy.io/domain/eclatgainetrasystem.click/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 14:25:55 UTC - Last availability or vendor check: 2026-10-25 14:34:32 UTC - Stored record updated: 2026-10-25 20:49:50 UTC - VirusTotal detections in the stored snapshot: 13/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.31.34 - Registrar in stored WHOIS data: Spaceship, Inc. - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-09-10 05:49:03 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1737a-33b3-72eb-8df8-1ddb94a67aa2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/eclatgainetrasystem.click - Certificate Transparency search: https://crt.sh/?q=%25.eclatgainetrasystem.click - Web Archive lookup: https://web.archive.org/web/*/https://eclatgainetrasystem.click/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed eclatgainetrasystem.click on 2026-10-25 under a trusted auto‑rule for suspicious domains. The recorded page title presents the site as an AI‑trading platform and an HTTP 200 response was recorded on that date. How the scam works The listing is based on automated detections that indicate a potential phishing or fraudulent trading offer, but no specific malicious behavior was observed on the page. Such domains often lure visitors with promises of AI‑driven profits to harvest credentials or persuade financial actions. Evidence VirusTotal scanned the domain on 2026-10-18 and reported 13 detections from 92 engines, with vendors labeling it as phishing or malicious. Google Safe Browsing checked on 2026-10-25 and did not flag the URL, while OTX recorded five pulses referencing the domain as of that date. urlscan.io captured the site on 2026-10-25; its engine score was 99 (malicious) but the overall verdict was non‑malicious, and Cloudflare Radar marked the domain as malicious with a malware category. PhishDestroy’s internal blocklist contains the domain, and external DNS blocklists show one block by Cloudflare Family; Spamhaus reported no listing. Infrastructure The domain was registered with Spaceship, Inc. on 2026-09-10, giving it a 45‑day age at first sight. Recorded IP addresses 104.21.31.34 and 172.67.174.235 belong to Cloudflare, Inc., the TLS certificate was issued by Google Trust Services and is valid until 2026-12-09, and the nameservers are chloe.ns.cloudflare.com and rick.ns.cloudflare.com with DNSSEC not enabled. What to do Visitors should avoid entering credentials, personal data, or financial information on the site; if any were submitted, change the associated passwords and monitor accounts for unauthorized activity. Defenders can block eclatgainetrasystem.click at the network perimeter, review logs for connections to the recorded IPs, and add the domain to internal blocklists using the VirusTotal and Cloudflare Radar findings as reference. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1737a-33b3-72eb-8df8-1ddb94a67aa2/ Cloudflare Radar report: https://radar.cloudflare.com/scan/a279662f-3077-4b2c-8641-7f45d8b79444 URLQuery report: https://urlquery.net/report/9c2f664f-877d-4781-8266-3ec37ae120c8 Stored capture screenshot: https://urlscan.io/screenshots/01a1737a-33b3-72eb-8df8-1ddb94a67aa2.png Cloudflare Radar screenshot (2026-10-25T14:30:35Z): https://screenshots.phishdestroy.io/cf/a279662f-3077-4b2c-8641-7f45d8b79444.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/9c2f664f-877d-4781-8266-3ec37ae120c8.png URLScan screenshot (2026-09-17T17:00:30Z): https://screenshots.phishdestroy.io/us/01a0b04f-e751-73ae-b352-bbe133101ae1.png URLScan capture report: https://urlscan.io/result/01a0b04f-e751-73ae-b352-bbe133101ae1/ URLScan screenshot (2026-09-18T09:53:40Z): https://screenshots.phishdestroy.io/us/01a0b3ef-7eb9-755a-8be3-594553511e5d.png URLScan capture report: https://urlscan.io/result/01a0b3ef-7eb9-755a-8be3-594553511e5d/ URLScan screenshot (2026-10-25T14:44:40Z): https://screenshots.phishdestroy.io/us/01a17385-07e9-727d-adf8-a4c05b0b957f.png URLScan capture report: https://urlscan.io/result/01a17385-07e9-727d-adf8-a4c05b0b957f/ VirusTotal report: https://www.virustotal.com/gui/domain/eclatgainetrasystem.click Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=eclatgainetrasystem.click Archived copy: https://web.archive.org/web/20261025142636/https://eclatgainetrasystem.click/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 15:39:02 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1737a-33b3-72eb-8df8-1ddb94a67aa2.png Captured: 2026-10-25 14:34:32 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1737a-33b3-72eb-8df8-1ddb94a67aa2.png Captured: 2026-10-25 14:34:32 UTC Source report: https://urlscan.io/result/01a1737a-33b3-72eb-8df8-1ddb94a67aa2/ - URLScan capture 2: https://urlscan.io/screenshots/01a0b3ef-7eb9-755a-8be3-594553511e5d.png Captured: 2026-10-25 14:25:55 UTC Source report: https://urlscan.io/result/01a1737a-33b3-72eb-8df8-1ddb94a67aa2/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a279662f-3077-4b2c-8641-7f45d8b79444.png Captured: 2026-10-25 14:30:35 UTC Source report: https://radar.cloudflare.com/scan/a279662f-3077-4b2c-8641-7f45d8b79444 SHA-256: 931d3abede21cfbace70983c4311b7b7c8bd0e4c97c14692b56bcdda96a009df - URLQuery: https://screenshots.phishdestroy.io/uq/9c2f664f-877d-4781-8266-3ec37ae120c8.png Source report: https://urlquery.net/report/9c2f664f-877d-4781-8266-3ec37ae120c8 SHA-256: 436906e6551658a213b7d980bfa8cbe1c04dd2edbfd68e7057342837c1956e01 - URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0b04f-e751-73ae-b352-bbe133101ae1.png Captured: 2026-09-17 17:00:30 UTC Source report: https://urlscan.io/result/01a0b04f-e751-73ae-b352-bbe133101ae1/ SHA-256: be1bf0da0c9b632c7169c8de2bf97b77598a4e1904164308afd16be1242a2ce6 - URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b3ef-7eb9-755a-8be3-594553511e5d.png Captured: 2026-09-18 09:53:40 UTC Source report: https://urlscan.io/result/01a0b3ef-7eb9-755a-8be3-594553511e5d/ SHA-256: b49dbb21b041c727d68af72e9933142b6c1d31a0866c21fbc5be9fec1df848b7 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17385-07e9-727d-adf8-a4c05b0b957f.png Captured: 2026-10-25 14:44:40 UTC Source report: https://urlscan.io/result/01a17385-07e9-727d-adf8-a4c05b0b957f/ SHA-256: ca4a78240e284c0b95db425dd3acd9f6873082354aa38ad524e48ab101f26612 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T15:02:30Z", "uuid": "01a1737a-33b3-72eb-8df8-1ddb94a67aa2", "scanned_at": "2026-10-25T14:32:41Z", "final_url": "https://eclatgainetrasystem.click/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://eclatgainetrasystem.click/", "from": "http://eclatgainetrasystem.click/", "status": 307 } ], "ip": "172.67.174.235", "domains": [ "cdnjs.cloudflare.com", "challenges.cloudflare.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflare.com" ], "ips": [ "104.18.94.41", "2606:4700::6811:cf05", "2a00:1450:4001:c17::5f", "104.17.24.14", "172.67.174.235" ], "asns": [ "13335", "15169" ], "countries": [ "US", "DE" ], "doc_hash": "339d076a7ac9418673ba013babad8e154b9712cfa49dbc912802ac68264f7b9f", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_qe02kjcf", "toggleTermsPopup", "__tsGet", "__tsNeedsClick", "__tsShow", "__tsReset", "__lgBS", "__cfQR", "turnstile", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "eclatgainetrasystem.click" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "eclatgainetrasystem.click", "protocol": "QUIC", "valid_to": "2026-12-09T09:03:31Z", "valid_from": "2026-09-10T08:03:35Z" }, "domain_age_days": 45, "apex_age_days": 45, "tls_age_days": 45, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T14:33:16Z", "uuid": "a279662f-3077-4b2c-8641-7f45d8b79444", "scanned_at": "2026-10-25T14:30:35Z", "final_url": "https://eclatgainetrasystem.click/", "status": 200, "history": [ { "url": "https://eclatgainetrasystem.click/", "status": 200 } ], "dom_hash": "56c223035325fe5bd83fc454c8e6ba5be73ddeb988b94165fe9418a47a5f3b4d", "doc_hash": "dfc46e7bca1e715b9a49a4ebb743576af403bbbda3eeea4288d0f39e2ab61d8a", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "eclatgainetrasystem.click", "type": "A", "value": "172.67.174.235" }, { "name": "eclatgainetrasystem.click", "type": "A", "value": "104.21.31.34" }, { "name": "eclatgainetrasystem.click", "type": "AAAA", "value": "2606:4700:3034::ac43:aeeb" }, { "name": "eclatgainetrasystem.click", "type": "AAAA", "value": "2606:4700:3033::6815:1f22" } ], "dnssec_valid": false, "ip": "172.67.174.235", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Spaceship, Inc.", "created": "2026-09-10T07:49:02Z", "updated": "2026-09-15T07:49:51Z", "expires": "2027-09-10T07:49:02Z", "nameservers": [ "chloe.ns.cloudflare.com", "rick.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T15:34:42Z", "analysis_at": "2026-10-18T03:40:24Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 11, "suspicious": 2, "undetected": 34 }, "detections": { "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Sophos": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "Spaceship, Inc.", "created": "2026-09-10T07:49:02Z", "expires": "2027-09-10T07:49:02Z", "updated": "2026-09-15T07:49:51Z", "first_seen": "2026-09-10T09:52:35Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "chloe.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:1f22" }, { "ttl": 21600, "type": "NS", "value": "rick.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::ac43:aeeb" }, { "ttl": 300, "type": "A", "value": "104.21.31.34" }, { "ttl": 21600, "type": "NS", "value": "chloe.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.174.235" } ], "dns_at": "2026-10-18T03:45:42Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "eclatgainetrasystem.click" ], "issuer": "Google Trust Services / WE1", "serial": "5b9f1296807ed5230e2e2509f6779c2d", "sha256": "7de4fda5c98ac56546daf07d400eff8e5b1c85c3bfd0f040193fb1a99f4281d7", "subject": "eclatgainetrasystem.click", "valid_to": "2026-12-09T09:03:31Z", "valid_from": "2026-09-10T08:03:35Z" }, "whois": { "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862", "registrar_url": "https://www.spaceship.com/", "created": "2026-09-10T07:49:02Z", "updated": "2026-09-15T07:49:51Z", "expires": "2027-09-10T07:49:02Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "chloe.ns.cloudflare.com", "rick.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "add period" ], "events": { "last changed": "2026-09-10T09:00:03Z", "registration": "2026-09-10T07:49:02Z", "registrar expiration": "2027-09-10T07:49:02Z", "last update of RDAP database": "2026-10-18T03:45:38Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T14:33:28Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "eclatgainetrasystem.click" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://eclatgainetrasystem.click/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://eclatgainetrasystem.click/", "title": "Eclat Gainetra | a premium AI trading | Authorized Main Hub", "ogType": "website", "robots": "index, follow", "ogTitle": "Eclat Gainetra | Premium AI-Powered Trading Assistant", "ogSiteName": "Eclat Gainetra", "themeColor": "#180026", "description": "Eclat Gainetra delivers AI-driven trading guidance, autonomous strategies, portfolio governance, and transparent market workflows for today's traders.", "twitterCard": "summary", "canonicalUrl": "https://eclatgainetrasystem.click/", "ogDescription": "Eclat Gainetra delivers AI-driven trading guidance, autonomous strategies, portfolio governance, and transparent market workflows for today's traders." }, "trackers": { "requests": 18, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 1, "tls": 22, "wait": 113, "connect": 9, "download": 12 }, "response_ms": 157 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 137343, "co2_grams": 0.005, "cleaner_than": 15 }, "dns_server": { "ns": [ { "ip": "172.64.33.139", "host": "rick.ns.cloudflare.com" }, { "ip": "173.245.58.85", "host": "chloe.ns.cloudflare.com" } ], "zone": "eclatgainetrasystem.click" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3034::ac43:aeeb", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "eclatgainetrasystem.click" }, "dns": { "A": [ "172.67.174.235", "104.21.31.34" ], "NS": [ "rick.ns.cloudflare.com", "chloe.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"chloe.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086644, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3033::6815:1f22", "2606:4700:3034::ac43:aeeb" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "default-src 'self'; img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com;", "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3034::ac43:aeeb", "family": 6 }, "redirects": { "chain": [ "https://eclatgainetrasystem.click" ] }, "linked_pages": { "internal_count": 39 }, "whois": { "registrar": "Spaceship, Inc.", "created": "2026-09-10T07:49:02Z", "updated": "2026-09-15T07:49:51Z", "expires": "2027-09-10T07:49:02Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "chloe.ns.cloudflare.com", "rick.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdel", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```