# PhishDestroy domain threat record: gaite.love

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/gaite.love/
Machine-readable companion: https://phishdestroy.io/domain/gaite.love/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 20:07:22 UTC
- Last availability or vendor check: 2026-10-27 20:07:22 UTC
- Stored record updated: 2026-10-27 23:40:16 UTC
- VirusTotal detections in the stored snapshot: 4/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: Dynadot, LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-01-16 23:55:48 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17ef7-a1a3-72e8-ab0f-4546f29fd77a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/gaite.love
- Certificate Transparency search: https://crt.sh/?q=%25.gaite.love
- Web Archive lookup: https://web.archive.org/web/*/https://gaite.love/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake on 2026-10-27 recorded the page title “Sichere Weiterleitung” and noted that the site appears to offer a generic redirect service, but no malicious behavior was observed. The domain was first seen by PhishDestroy on 2026-10-27 and returned an HTTP 200 response on that date, after which it was added to the internal blocklist.

How the scam works
Redirect services can be abused to forward visitors to phishing pages, malware downloads, or other fraudulent destinations without the user’s knowledge. The listing does not confirm any specific abuse on this site, only that such services are a known risk vector.

Evidence
VirusTotal scanned the domain on 2026-10-13 and reported 4 detections out of 92 engines (alphaMountain.ai – suspicious, Certego – suspicious, Fortinet – phishing, SOCRadar – phishing). Google Safe Browsing checked on 2026-10-27 and did not flag the site. OTX listed 4 pulses as of 2026-10-27. URLScan captured the page on 2026-10-27; its machine‑learning engine gave a malicious score of 70 but the overall verdict was non‑malicious. PhishDestroy’s internal blocklist marks the domain as malicious, while external blocklists returned zero hits on the check date.

Infrastructure
The domain was registered with Dynadot, LLC on 2026-01-17. DNS resolution pointed to Cloudflare IP ranges (e.g., 172.67.150.165) and the site used Cloudflare’s CDN with a TLS certificate issued by Google Trust Services, valid until 2026-12-20. Nameservers were donna.ns.cloudflare.com and julian.ns.cloudflare.com; DNSSEC was not enabled. These observations are historical and do not identify the operator.

What to do
Visitors should avoid entering credentials or following unknown redirects on gaite.love; if any information was submitted, change the associated passwords and monitor accounts for unusual activity. Defenders can block the exact domain, watch for DNS queries to the recorded Cloudflare IPs, and review access logs for connections to the observed hostnames.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17ef7-a1a3-72e8-ab0f-4546f29fd77a/
Cloudflare Radar report: https://radar.cloudflare.com/scan/1de14b04-2e29-4f99-8255-76844545ae6c
Stored capture screenshot: https://urlscan.io/screenshots/01a17ef7-a1a3-72e8-ab0f-4546f29fd77a.png
Cloudflare Radar screenshot (2026-10-27T20:37:38Z): https://screenshots.phishdestroy.io/cf/1de14b04-2e29-4f99-8255-76844545ae6c.png
URLScan screenshot (2026-07-24T11:04:43Z): https://screenshots.phishdestroy.io/us/019f93cc-6d9c-7268-a8ef-6f3ace659d9e.png
URLScan capture report: https://urlscan.io/result/019f93cc-6d9c-7268-a8ef-6f3ace659d9e/
URLScan screenshot (2026-10-27T19:52:14Z): https://screenshots.phishdestroy.io/us/01a17eeb-8e3b-7019-adac-6c4e264a169c.png
URLScan capture report: https://urlscan.io/result/01a17eeb-8e3b-7019-adac-6c4e264a169c/
VirusTotal report: https://www.virustotal.com/gui/domain/gaite.love
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=gaite.love
Archived copy: https://web.archive.org/web/20261027200928/https://gaite.love/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 20:38:37 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a17ef7-a1a3-72e8-ab0f-4546f29fd77a.png
  Captured: 2026-10-27 20:07:22 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17ef7-a1a3-72e8-ab0f-4546f29fd77a.png
  Captured: 2026-10-27 20:07:22 UTC
  Source report: https://urlscan.io/result/01a17ef7-a1a3-72e8-ab0f-4546f29fd77a/
- URLScan · 2026-07-24: https://screenshots.phishdestroy.io/us/019f93cc-6d9c-7268-a8ef-6f3ace659d9e.png
  Captured: 2026-07-24 11:04:43 UTC
  Source report: https://urlscan.io/result/019f93cc-6d9c-7268-a8ef-6f3ace659d9e/
  SHA-256: ad022497b737976bb2371fb89aee94de5141a57c5acd0c76a6d48b7608a5f611
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17eeb-8e3b-7019-adac-6c4e264a169c.png
  Captured: 2026-10-27 19:52:14 UTC
  Source report: https://urlscan.io/result/01a17eeb-8e3b-7019-adac-6c4e264a169c/
  SHA-256: 27b9682c9b1173659464a04a12293ab78fd07f48eb8f1f2cc71808a6d7539edc
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1de14b04-2e29-4f99-8255-76844545ae6c.png
  Captured: 2026-10-27 20:37:38 UTC
  Source report: https://radar.cloudflare.com/scan/1de14b04-2e29-4f99-8255-76844545ae6c
  SHA-256: 06109dd99d4dcaa348fc4ea678b995feb1629b711ddd081d6a5bcc7cc6849ff0

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T20:30:43Z",
        "uuid": "01a17ef7-a1a3-72e8-ab0f-4546f29fd77a",
        "scanned_at": "2026-10-27T20:05:28Z",
        "final_url": "https://gaite.love/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://gaite.love/",
                "from": "http://gaite.love/",
                "status": 307
            }
        ],
        "ip": "172.67.150.165",
        "domains": [
            "fonts.gstatic.com",
            "static.cloudflareinsights.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "64.233.180.94",
            "104.16.80.73",
            "172.253.62.95",
            "172.67.150.165"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "c531c2b119307091d76c306c4795477ac0e17ed012ab0ade33306c6f0108f21d",
        "globals": [
            "__cfBeacon"
        ],
        "tls": {
            "san": [
                "gaite.love",
                "*.gaite.love"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "gaite.love",
            "protocol": "QUIC",
            "valid_to": "2026-12-20T09:00:53Z",
            "valid_from": "2026-09-21T08:00:57Z"
        },
        "domain_age_days": 283,
        "apex_age_days": 283,
        "tls_age_days": 36,
        "tls_valid_days": 90,
        "requests": 6,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 70,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html;charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T20:37:55Z",
        "uuid": "1de14b04-2e29-4f99-8255-76844545ae6c",
        "scanned_at": "2026-10-27T20:37:38Z",
        "final_url": "https://gaite.love/",
        "status": 200,
        "history": [
            {
                "url": "https://gaite.love/",
                "status": 200
            }
        ],
        "dom_hash": "9c5ffc9118183c6653b85631d9adb3cdbd80c1d3adc12180f32bd5b7704bfe6f",
        "doc_hash": "c531c2b119307091d76c306c4795477ac0e17ed012ab0ade33306c6f0108f21d",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "gaite.love",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "gaite.love",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "gaite.love",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            },
            {
                "name": "gaite.love",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.17",
        "whois": {
            "registrar": "Dynadot, LLC",
            "created": "2026-01-17T00:55:48Z",
            "updated": "2026-07-23T13:51:21Z",
            "expires": "2027-01-17T00:55:48Z",
            "nameservers": [
                "donna.ns.cloudflare.com",
                "julian.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T20:37:35Z",
        "analysis_at": "2026-10-13T09:38:16Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 2,
            "suspicious": 2,
            "undetected": 36
        },
        "detections": {
            "Certego": "suspicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "alphaMountain.ai": "suspicious"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "created": "2026-01-17T00:00:00Z",
        "updated": "2026-01-22T00:00:00Z",
        "first_seen": "2026-01-17T14:42:33Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.90.8"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "donna.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "julian.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:96a5"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::6815:5a08"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.150.165"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "donna.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-13T09:44:25Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "gaite.love",
                "*.gaite.love"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "8526a0365829eacd13ce6e2daecf362d",
            "sha256": "106504d02d3a3b0885f63cad4952488c67420c96456a2dfa70a019fa601087e6",
            "subject": "gaite.love",
            "valid_to": "2026-12-20T09:00:53Z",
            "valid_from": "2026-09-21T08:00:57Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-01-17T00:55:48Z",
                "last changed": "2026-07-23T13:51:21Z",
                "registration": "2026-01-17T00:55:48Z",
                "registrar expiration": "2027-01-17T00:55:48Z",
                "last update of RDAP database": "2026-10-12T19:55:58Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T20:38:06Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "gaite.love"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-27T20:09:28Z",
            "first": "2026-10-27T20:09:28Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 1732
        },
        "social_tags": {
            "title": "Sichere Weiterleitung"
        },
        "trackers": {
            "requests": 3,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 13,
                "tls": 21,
                "wait": 38,
                "connect": 10,
                "download": 1
            },
            "response_ms": 83
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 6206,
            "co2_grams": 0.0002,
            "cleaner_than": 82
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.94",
                    "host": "julian.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.192.151",
                    "host": "donna.ns.cloudflare.com"
                }
            ],
            "zone": "gaite.love"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "gaite.love"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "donna.ns.cloudflare.com",
                "julian.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"donna.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415523989, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://gaite.love"
            ]
        },
        "subdomains": {
            "count": 2,
            "subdomains": [
                "admin.gaite.love",
                "www.gaite.love"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cloudflare",
                "HTTP/3"
            ]
        },
        "whois": {
            "registrar": "Dynadot, LLC",
            "created": "2026-01-17T00:55:48Z",
            "updated": "2026-07-23T13:51:21Z",
            "expires": "2027-01-17T00:55:48Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "donna.ns.cloudflare.com",
                "julian.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html;charset=UTF-8"
            }
        }
    }
}
```