ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
FBI IC3
Laporkan kejahatan yang dimungkinkan oleh internet di Amerika Serikat
Federal tips line1-800-CALL-FBI
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@spaceship.com.
The latest stored availability evidence still shows the domain reachable; 28 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
28 days
Reports sent
1
Latest case ID
PD-20260720-BB5AA5
Current status
Observed active at latest stored check
Keamanan domain dan intelijen ancaman
cvg67g[.]christmas
“首页”
Putusan ancaman
Kritis
93/100 skor bukti
Ketersediaan
Belum terverifikasi
Keterjangkauan saat ini belum terverifikasi
Sinyal risiko
Deteksi Total Virus: 13/91
Peniruan identitas merek: Generic
Ringkasan laporan
cvg67g.christmas — Belum terverifikasi. Peniruan identitas merek: Generic; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 13/91 (alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker); URLScan malicious verdict; PhishDestroy score 93/100. Registrar: Spaceship.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
KRITIS
The domain cvg67g.christmas was registered on July 16, 2026 through Spaceship, Inc. and currently resolves to the IPv4 address 47.242.217.10. Its authoritative name servers are launch1.spaceship.net and launch2.spaceship.net, indicating that the hosting provider also controls DNS resolution. The domain remains active as of the report date, July 20, 2026, and is classified as a generic phishing site under investigation. VirusTotal records show that the domain was scanned by 91 security vendors, with none reporting a detection at the time of analysis. The domain appears on a single public blocklist, PhishDestroy, which has already flagged it for malicious use. No additional intelligence such as associated malware kits, targeted brands, or observed payloads is presently available, leaving the full scope of the phishing campaign uncertain. Defenders should block or sinkhole the domain, monitor DNS queries for the associated IP address, and apply outbound filtering for traffic to the domain. Continuous re‑evaluation is advised, particularly if new detections or victim reports emerge, to adjust mitigation measures accordingly.
VirusTotal
13 det.
URLScan
Usia
1 mo New
Status terpantau
Belum terverifikasi
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data
VirusTotal
13 / 91
URLQuery
checked — no detections recorded
PhishStats
tidak diperiksa
OTX
no community references
CF Radar
scan completed
URLScan capture
laporan yang disimpan
URLScan verdict
malicious
Pemblokiran DNS
tidak diperiksa
TLS
tidak ada data sertifikat
WHOIS
1 mo old
Tangkapan layar
3 captures · 3 sources
Rantai pengalihan
tidak diselidiki
Intelijen Keamanan Jaringan
SSL Certificate
Invalid
SSL certificate is invalid or expired. Issuer:
Alur Tanggapan Ancaman Pipeline
Penemuan
Checks
Reports
Ketersediaan
11/12
Sent Report Recorded
Stored sent-report record for registrar Spaceship, Inc., hosting provider, 1 abuse contact
abuse@spaceship.com
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Domain
URLScan Verdict
Berbahaya
score 100 Phishing report ↗
Server / ASN
nginx · AS45102 Alibaba (US) Technology Co., Ltd.
Reputasi IP
abuse score 0/100 0 reports checked 20/07/2026
Registrar
Spaceship
(US)
(US)
Alamat IP
47.242.217.10
PendaftaranDibuat 16/07/2026 (32d · New) — Expires 16/07/2027
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi20/07/2026
DOM Analysisanalyzed 20/07/2026score 93/100
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://cvg67g.christmas/
Server namalaunch1.spaceship.netlaunch2.spaceship.net
TLS Observationscanned 17/08/2026
Case ID
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Akreditasi adalah kontrak, bukan cap jaminan keamanan.
Verifikasi biaya ICANN
Baca RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Laporkan Domain Ini
Kirimkan bukti & bantu lindungi orang lain
Analisis VirusTotal
13 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
alphaMountain.ai
BitDefender
CRDF
ESET
Forcepoint ThreatSeeker
G-Data
Gridinsoft
Kaspersky
LevelBlue
Lionic
SOCRadar
Sophos
VIPRE
Bukti & Laporan Eksternal
Analisis Keamanan
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-20260720-BB5AA5 Recipient: abuse@spaceship.com Page title stored with report: 首页
OSINT & Intelijen
DNS & Jaringan
SEO & Domain
Apakah Anda Terpengaruh oleh Situs Ini?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Action Fraud
Laporkan penipuan dan kejahatan dunia maya di Inggris, Wales, dan Irlandia Utara
Contact centre0300 123 2040
PhishDestroy listing review Bukan laporan penegakan hukum
Banding atas Nama Domain
Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI
Tinjau dan kirimkan sendiri
Infrastruktur dan Laporan Terkait
Shared IP 47.242.217.10 6
IP asal ini menghosting beberapa domain phishing — infrastruktur dapat digunakan bersama di seluruh kampanye.
Registrar yang sama: Spaceship 6
relaylink.cc 
dappdashboard.online 
Generic impersonation 8
These domains also target Generic users. View all Generic threats →
Laporan ancaman terkini 6
Laporan baru-baru ini ditambahkan dari database PhishDestroy. Tautan penemuan ini tidak berarti infrastruktur atau kepemilikan bersama.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive