auth[.]claimsportal[.]celsius[.]network[.]distributions-id932[.]com
“500 Internal Server Error”
auth.claimsportal.celsius.network.distributions-id932.com — Belum terverifikasi. Ringkasan bukti: VirusTotal 2/91 (alphaMountain.ai, Forcepoint ThreatSeeker); PhishDestroy score 56/100. Registrar: OwnRegistrar.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
auth.claimsportal.celsius.network.distributions-id932.com is a subdomain of distributions-id932.com. PhishDestroy first observed the hostname on Aug 19, 2026. The captured page title is “500 Internal Server Error”. Current evidence score: 56/100 (high).
One source contains a positive finding: VirusTotal. VirusTotal recorded 2 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker on Aug 20, 2026 at 01:20 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 20, 2026 at 02:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 20, 2026 at 01:20 UTC. URLScan completed without a malicious verdict (score 0) on Aug 19, 2026 at 23:08 UTC.
The collector marked the hostname reachable on Aug 19, 2026 at 18:41 UTC, but did not retain the HTTP response code. Registration records for the registrable domain distributions-id932.com list OwnRegistrar, Inc. as the registrar and Aug 18, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 103.227.84.141 on AS200823 (MHost LLC). The recorded endpoint location is Frankfurt am Main, DE. The stored server header is nginx. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YR1 as the certificate issuer with validity through Nov 16, 2026; checked Aug 19, 2026 at 19:02 UTC.
Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: distributions-id932.com
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain distributions-id932.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 7 identified
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com Keyakinan 100%Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
zendesk.com Keyakinan 100%Mixpanel provides a business analytics service. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Its toolset contains in-app A/B tests and user survey forms.
mixpanel.com Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application.
aws.amazon.com Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of auth.claimsportal.celsius.network.distributions-id932.com · checked Aug 19, 2026
Bukti & Laporan Eksternal
PD-20260819-0C7CE7 Recipient: abuse@mhost.ee Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive