xchallengers[.]pro
Análisis de phishing y seguridad de xchallengers.pro
“Global | eSports and Gaming Community”
xchallengers.pro — No verificado. Suplantación de marca: Celer; Tipo de estafa: Brand Impersonation. Resumen de las pruebas: VirusTotal 16/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Ermes); URLScan malicious verdict; Spamhaus DBL_SPAM; PhishDestroy score 95/100. Registrador: PDR.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain xchallengers.pro was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently listed as offline. Infrastructure analysis shows the domain resolves to IP 91.214.78.102, which belongs to AS205775 NEON CORE NETWORK LLC and is geolocated in the Netherlands. The authoritative nameservers are dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com, indicating use of the RegWay DNS service. A Let's Encrypt certificate issued under the E7 identifier secures the site, a common choice for rapidly deployed malicious sites.
The page title returned by the web server is "Global | eSports and Gaming Community," but no further content has been captured; the site is therefore not directly observable for visual phishing indicators. The domain is flagged as a brand impersonation targeting the brand celer, and it has been classified as a "Brand Impersonation" scam type by threat intelligence sources. Detection metrics show that 16 of 93 security vendors on VirusTotal have flagged the domain as malicious, and it appears on a single security blocklist. Independent verification by PhishDestroy confirms the domain is blocked, and a Gridinsoft trust score of 0 / 100 reflects an extremely low reputation.
While the domain is offline, its recent activity demonstrates a typical short‑lived phishing infrastructure that leverages compromised or rented DNS and hosting resources. Defenders should continue to block the domain at perimeter filters, ensure that any internal indicators of compromise referencing the IP 91.214.78.102 are investigated, and monitor for re‑registration attempts or similar domains using the same registrar or DNS provider. Ongoing threat hunting should include checking for celer‑related credential harvesting attempts and correlating user reports with the observed page title and host infrastructure.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.