amendes24[.]serv00[.]net
“Serv00.com - Free Website Hosting - 403 Website blocked”
amendes24.serv00.net — Non vérifié. Type d'arnaque : Account Takeover. Résumé des preuves: VirusTotal 5/91 (alphaMountain.ai, CRDF, Emsisoft, URLQuery, Webroot); PhishDestroy score 78/100. Bureau d’enregistrement: OVH sas.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Analysis indicates that amendes24.serv00.net was registered on February 21, 2026 through OVH sas and currently resolves to IP address 128.204.223.111 located in Poland. The domain employs nameservers dns1.serv00.com and dns2.serv00.com along with mail exchanger mail10.serv00.com. It serves content via Nginx and presents a 403 status code with the title Serv00.com - Free Website Hosting - 403 Website blocked. The SSL certificate is issued by Let's Encrypt under authority E8. Infrastructure records show the domain remains active as of July 12, 2026 and is classified under account takeover operations.
Intelligence sources record eight out of ninety-five security vendors marking the domain and note its presence on one blocklist. The page returns an explicit block response consistent with prior flagging actions. Registration age of roughly four months aligns with patterns seen in similar campaigns while the hosting arrangement on shared free infrastructure supports rapid domain rotation. MX configuration points to the same provider network used for the primary resolution.
Uncertainties remain around the exact payload delivery mechanism because the 403 response prevents direct content inspection. No additional files or redirects are observable from current records. The account takeover label stems from the reported threat classification rather than observed credential forms or login mimicry.
Defenders should add the domain and its resolving IP to internal block lists while monitoring for related subdomains or MX traffic. Review of mail logs for references to mail10.serv00.com can surface potential follow-on attempts. Continued observation of the 128.204.223.111 address for other hosted domains provides early indication of infrastructure reuse.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Registration: serv00.net
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain serv00.net behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 1 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Confiance à 100 %Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of amendes24.serv00.net · checked Mar 2, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif