carnavalpix[.]com
“Gira Pix”
साक्ष्य सारांश
Analysis of the domain carnavalpix.com shows a recently registered internet address, created on February 21, 2026, that is presently taken offline. The domain is hosted by Hostinger operations, UAB, and resolves to the IPv4 address 169.197.142.118, which is announced by AS63023 belonging to GTHost and geolocated to the United States. DNS resolution is served by Cloudflare name servers alec.ns.cloudflare.com and ines.ns.cloudflare.com. No TLS certificate is present, indicating that the site does not support HTTPS.
The page title returned from the last known HTTP response is "Gira Pix," but no further content has been captured. Threat intelligence indicates the site is being used for social media phishing, a classification corroborated by its inclusion in a single security blocklist and a block by the PhishDestroy service. VirusTotal scans report that nine of ninety‑five security vendors flagged the domain, reinforcing the suspicion of malicious activity. Additionally, AlienVault OTX lists the domain in one threat‑intel pulse, providing an external confirmation of its malicious reputation.
While the offline status limits direct observation of the payload or credential‑harvesting mechanisms, the combination of recent registration, absence of encryption, a phishing‑oriented page title, and multiple vendor detections suggests a purposeful campaign targeting social‑media users. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑appearance of the host, and consider adding the IP address to network‑wide deny lists. Ongoing vigilance is advised to detect any future infrastructure reuse, and any observed traffic to the domain should be logged for forensic correlation with other social‑media phishing incidents.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260217-25120E- कैप्चर किए गए पेज का शीर्षक
- Gira Pix
- PDF दस्तावेज़
- PDF प्रमाण
कानूनी आधार
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain carnavalpix.com is engaged in phishing activities, which are explicitly prohibited under your AUP. This constitutes a direct violation of the policy's stipulations against fraud and deception.
Terms of Service (TOS): The ongoing use of this domain for illegal activities breaches your TOS, which reserves the right to suspend or terminate services for any violations, particularly those involving fraudulent behavior.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and the use of such access to commit fraud, including phishing schemes.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud others via electronic communications, which is applicable to the phishing activities associated with carnavalpix.com.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in deceptive practices to obtain sensitive information.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Prompt compliance with your AUP and TOS is essential to mitigate potential risks.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/1798f86c/player_embed_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| OpenDNS | carnavalpix.com |
phishing | Phishing Block |
| DigiCert UltraDNS | carnavalpix.com |
malicious | Sinkholed |
| DNS4EU | carnavalpix.com |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | carnavalpix.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।