# PhishDestroy domain threat record: megalaunch.live Content language: English Canonical HTML report: https://phishdestroy.io/domain/megalaunch.live/ Machine-readable companion: https://phishdestroy.io/domain/megalaunch.live/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 01:29:33 UTC - Last availability or vendor check: 2026-10-23 11:16:09 UTC - Stored record updated: 2026-10-23 17:00:33 UTC - VirusTotal detections in the stored snapshot: 6/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 216.198.79.1 - Registrar in stored WHOIS data: NETIM SAS - Last stored HTTP status: 308 - Registration date (registry RDAP, megalaunch.live): 2026-07-09 21:45:37 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a166b7-f865-70cb-899e-4ff68a6ce610/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/megalaunch.live - Certificate Transparency search: https://crt.sh/?q=%25.megalaunch.live - Web Archive lookup: https://web.archive.org/web/*/https://megalaunch.live/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed megalaunch.live as a suspicious domain after its intake on 2026-10-23, citing six malicious detections on VirusTotal. The site was first observed by PhishDestroy on 2026-10-23 showing the page title “MegaEth — Claim $METH”. An HTTP 308 redirect was recorded on that date. How the scam works The domain appears in typical crypto‑phishing campaigns that lure users with promises such as claiming a token ($METH). Such pages generally attempt to trick visitors into entering wallet credentials or approving transactions, but no specific malicious behavior was captured on this page. Evidence VirusTotal reported six malicious detections from alphaMountain.ai, CRDF, Emsisoft, Fortinet, Netcraft and Webroot on 2026-10-23 (6/92 engines). Google Safe Browsing checked on 2026-10-23 did not flag the site. urlscan.io captured the page on 2026-10-21; its overall verdict was non‑malicious but its engine score marked it malicious (score 94). External blocklists MetaMask and SEAL listed the domain, and PhishDestroy’s internal list flagged it. Cloudflare Radar on 2026-10-23 categorized the domain as phishing. OTX recorded three pulses mentioning megalaunch.live. Infrastructure The domain was registered on 2026-07-09 through NETIM SAS and was 105 days old at the time of observation. The DNS records observed on 2026-10-23 listed Cloudflare nameservers liz.ns.cloudflare.com and finley.ns.cloudflare.com, without DNSSEC, and the A record pointed to 216.198.79.65, an Amazon‑owned address associated with Vercel. The TLS certificate captured on 2026-10-23 was issued by Let’s Encrypt, valid from 2026-09-11 to 2026-12-10, and the response included an HSTS header with max‑age=63072000. What to do Visitors should avoid entering any crypto wallet credentials or approving transactions on the site; if such data was submitted, change associated passwords and monitor wallet activity. Defenders can block megalaunch.live at the network perimeter, add it to phishing blocklists, and review access logs for connections to this exact domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a166b7-f865-70cb-899e-4ff68a6ce610/ Cloudflare Radar report: https://radar.cloudflare.com/scan/ed3dcd1d-6e05-469c-a549-e5de356c9972 URLQuery report: https://urlquery.net/report/15c287fb-0d14-4b91-8440-743cbc7f2868 Stored capture screenshot: https://i.ibb.co/7JbMncqB/8d4d6841b785.png Cloudflare Radar screenshot (2026-10-23T01:33:25Z): https://screenshots.phishdestroy.io/cf/ed3dcd1d-6e05-469c-a549-e5de356c9972.png URLScan screenshot (2026-10-21T08:57:17Z): https://screenshots.phishdestroy.io/us/01a15dad-c193-7356-82f0-981010de9292.png URLScan capture report: https://urlscan.io/result/01a15dad-c193-7356-82f0-981010de9292/ URLScan screenshot (2026-10-21T14:48:08Z): https://screenshots.phishdestroy.io/us/01a15eee-f264-7078-a628-055e1969a84d.png URLScan capture report: https://urlscan.io/result/01a15eee-f264-7078-a628-055e1969a84d/ URLScan screenshot (2026-10-21T15:28:08Z): https://screenshots.phishdestroy.io/us/01a15f13-8dda-70cd-a1f8-e99db68a63cd.png URLScan capture report: https://urlscan.io/result/01a15f13-8dda-70cd-a1f8-e99db68a63cd/ URLScan screenshot (2026-10-23T02:10:48Z): https://screenshots.phishdestroy.io/us/01a16669-802d-7788-8ab9-5ffbed744d0d.png URLScan capture report: https://urlscan.io/result/01a16669-802d-7788-8ab9-5ffbed744d0d/ VirusTotal report: https://www.virustotal.com/gui/domain/megalaunch.live Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=megalaunch.live Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 05:30:42 UTC ## Stored page captures - Primary capture: https://i.ibb.co/7JbMncqB/8d4d6841b785.png Captured: 2026-10-23 03:06:13 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a166b7-f865-70cb-899e-4ff68a6ce610.png Captured: 2026-10-23 03:06:13 UTC Source report: https://urlscan.io/result/01a166b7-f865-70cb-899e-4ff68a6ce610/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a15f13-8dda-70cd-a1f8-e99db68a63cd.png Captured: 2026-10-23 01:29:33 UTC Source report: https://urlscan.io/result/01a166b7-f865-70cb-899e-4ff68a6ce610/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ed3dcd1d-6e05-469c-a549-e5de356c9972.png Captured: 2026-10-23 01:33:25 UTC Source report: https://radar.cloudflare.com/scan/ed3dcd1d-6e05-469c-a549-e5de356c9972 SHA-256: d43eb3e20b3ab9d9527e37db04e3ff6bd0ca2546d6b65f0f6a22a9175c180459 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15dad-c193-7356-82f0-981010de9292.png Captured: 2026-10-21 08:57:17 UTC Source report: https://urlscan.io/result/01a15dad-c193-7356-82f0-981010de9292/ SHA-256: 15635dca0e9b3679d80c6c48e7b14c544102ba4431b8a895d2872e948b03e3c5 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15eee-f264-7078-a628-055e1969a84d.png Captured: 2026-10-21 14:48:08 UTC Source report: https://urlscan.io/result/01a15eee-f264-7078-a628-055e1969a84d/ SHA-256: bfc15a6f9b99fb5a97485eb1c2d9ba8867b6e1b23890761878d39b051e0f9505 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15f13-8dda-70cd-a1f8-e99db68a63cd.png Captured: 2026-10-21 15:28:08 UTC Source report: https://urlscan.io/result/01a15f13-8dda-70cd-a1f8-e99db68a63cd/ SHA-256: bf93865ad11bde88b679700e6234a41af622f2dfeac4d20f67e13dd6d74d1f2c - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16669-802d-7788-8ab9-5ffbed744d0d.png Captured: 2026-10-23 02:10:48 UTC Source report: https://urlscan.io/result/01a16669-802d-7788-8ab9-5ffbed744d0d/ SHA-256: 2dc2b1cb4a2171b7c46c8da0ce19938c4a0365f1231d958c41631c665a20b895 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T03:20:00Z", "uuid": "01a166b7-f865-70cb-899e-4ff68a6ce610", "scanned_at": "2026-10-23T03:05:00Z", "final_url": "https://www.megalaunch.live/", "status": 200, "redirected": "parent-domain", "redirects": [ { "to": "https://megalaunch.live/", "from": "http://megalaunch.live/", "status": 307 }, { "to": "https://www.megalaunch.live/", "from": "https://megalaunch.live/", "status": 308 } ], "ip": "216.198.79.65", "domains": [ "api.web3modal.org", "quiet-pine-8993.hellohyper110.workers.dev", "fonts.gstatic.com", "fonts.googleapis.com", "api.ipify.org", "cdnjs.cloudflare.com", "pulse.walletconnect.org", "secure.walletconnect.org", "cdn.jsdelivr.net", "pbs.twimg.com", "megalaunch.live", "invalid" ], "ips": [ "192.178.183.94", "142.251.20.95", "104.18.18.237", "172.66.157.155", "151.101.193.229", "172.67.74.152", "104.17.25.14", "172.64.150.129", "104.21.41.229", "216.198.79.65", "216.198.79.1" ], "asns": [ "15169", "13335", "54113", "16509" ], "countries": [ "US" ], "doc_hash": "c42e38d63bf98a38374b0eba69ce009023e0e72c9dc8342817176ada2c7c85af", "globals": [ "e46jvfbmmj", "c19e53ac75", "f449d05aeb4b879d", "bbd49f82312d0ffe", "db1d0527", "abdae6fa4761fdf009", "ad441e22bf", "_iqfbyspjq", "Buffer", "global", "process", "litPropertyMetadata", "reactiveElementVersions", "litHtmlVersions", "litElementVersions", "_znisvuhjscdlmsnoz", "CoinbaseWalletSDK", "CoinbaseWalletProvider", "WalletLink", "WalletLinkProvider", "CryptoJS", "_ethers", "ethers", "windowHandler", "MerkleTree", "MerkleMountainRange", "IncrementalMerkleTree", "MerkleSumTree", "_gsfojeqdtjrooqppj", "q2icokw78y", "promptSeed", "downloadAppKitLogsBlob" ], "cookies": [ "gacfxdn1x7" ], "storage_keys": [ "IsThisFirstTime_Log_From_LiveServer", "@appkit/active_caip_network_id" ], "tls": { "san": [ "www.megalaunch.live" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "www.megalaunch.live", "protocol": "TLS 1.3", "valid_to": "2026-12-10T08:58:49Z", "valid_from": "2026-09-11T08:58:50Z" }, "domain_age_days": 105, "apex_age_days": 105, "tls_age_days": 41, "tls_valid_days": 89, "requests": 53, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 94, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T01:37:23Z", "uuid": "ed3dcd1d-6e05-469c-a549-e5de356c9972", "scanned_at": "2026-10-23T01:33:25Z", "final_url": "https://www.megalaunch.live/", "status": 200, "redirected": "subdomain", "history": [ { "url": "https://megalaunch.live/", "status": 308 }, { "url": "https://www.megalaunch.live/", "status": 200 } ], "dom_hash": "a06331748be0cd2ac184d7da6a3e87c4b159b9c2155a578fd20fed497d90e5ec", "doc_hash": "c42e38d63bf98a38374b0eba69ce009023e0e72c9dc8342817176ada2c7c85af", "phishing_v2": [ "phishing" ], "domain_risks": [ "Phishing", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "megalaunch.live", "type": "A", "value": "216.198.79.1" }, { "name": "www.megalaunch.live", "type": "CNAME", "value": "38b74f848bedb1da.vercel-dns-017.com" }, { "name": "www.megalaunch.live", "type": "CNAME", "value": "38b74f848bedb1da.vercel-dns-017.com" } ], "dnssec_valid": false, "ip": "216.198.79.65", "verdict": { "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] }, "whois": { "registrar": "NETIM SAS", "created": "2026-07-09T21:45:37Z", "updated": "2026-08-13T19:44:17Z", "expires": "2027-07-09T21:45:37Z", "nameservers": [ "liz.ns.cloudflare.com", "finley.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T05:18:55Z", "analysis_at": "2026-10-21T12:09:14Z", "stats": { "timeout": 0, "harmless": 50, "malicious": 6, "suspicious": 0, "undetected": 36 }, "detections": { "CRDF": "malicious", "Webroot": "malicious", "Emsisoft": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "first_seen": "2026-07-09T22:52:40Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "liz.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "216.198.79.1" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "finley.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "finley.ns.cloudflare.com" } ], "dns_at": "2026-10-21T12:14:46Z", "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb", "cert": { "san": [ "megalaunch.live" ], "issuer": "Let's Encrypt / YR1", "serial": "6cb68f720b67d79033be25a49861af92d57", "sha256": "99108fccf38495e3f3d4e9537388e452c3f5183faa8d0982098d26c5d0dd1db8", "subject": "megalaunch.live", "valid_to": "2026-12-09T05:38:26Z", "valid_from": "2026-09-10T05:38:27Z" }, "rdap": { "status": [ "active", "client transfer prohibited" ], "events": { "expiration": "2027-07-09T21:00:00Z", "last changed": "2026-07-09T23:45:34Z", "registration": "2026-07-09T00:00:00Z", "registrar expiration": "2027-07-09T21:00:00Z", "last update of RDAP database": "2026-10-21T10:59:20Z" }, "registrar": "NETIM SAS", "registrar_iana_id": "1519" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T01:37:44Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "megalaunch.live" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T01:32:31Z", "first": "2026-10-23T01:32:31Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 6648 }, "social_tags": { "title": "MegaEth — Claim $METH" }, "trackers": { "requests": 4, "trackers": [ { "name": "X Corp.", "company": "X Corp.", "country": "US", "category": "Social Media", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://quiet-pine-8993.hellohyper110.workers.dev/" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 308, "timings": { "dns": 9, "tls": 21, "wait": 12, "connect": 5, "download": 0 }, "response_ms": 47 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 25147, "co2_grams": 0.0009, "cleaner_than": 52 }, "dns_server": { "ns": [ { "ip": "173.245.58.189", "host": "liz.ns.cloudflare.com" }, { "ip": "108.162.195.58", "host": "finley.ns.cloudflare.com" } ], "zone": "megalaunch.live" }, "cookies": { "cookies": [ { "name": "gacfxdn1x7" } ] }, "location": { "ip": "216.198.79.1", "asn": "16509", "org": "Network Billing Systems", "city": "Atlanta", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "megalaunch.live" }, "dns": { "A": [ "216.198.79.1" ], "NS": [ "finley.ns.cloudflare.com", "liz.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"finley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414407844, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=63072000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "216.198.79.1", "family": 4 }, "redirects": { "chain": [ "https://megalaunch.live", "https://www.megalaunch.live/" ], "count": 1 }, "subdomains": { "count": 1, "subdomains": [ "www.megalaunch.live" ] }, "tech_stack": { "technologies": [ "Vercel", "HSTS" ] }, "headers": { "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } } } } ```