ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
FBI IC3
Laporkan kejahatan yang dimungkinkan oleh internet di Amerika Serikat
Federal tips line1-800-CALL-FBI
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@spaceship.com.
The latest stored availability evidence still shows the domain reachable; 27 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
27 days
Reports sent
1
Latest case ID
PD-20260720-4CFC95
Current status
Observed active at latest stored check
Keamanan domain dan intelijen ancaman
ostrau[.]christmas
“首页”
Putusan ancaman
Kritis
93/100 skor bukti
Ketersediaan
Belum terverifikasi
Keterjangkauan saat ini belum terverifikasi
Sinyal risiko
Deteksi Total Virus: 13/91
Peniruan identitas merek: Generic
Ringkasan laporan
ostrau.christmas — Belum terverifikasi. Peniruan identitas merek: Generic; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 13/91 (alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker); URLScan malicious verdict; PhishDestroy score 93/100. Registrar: Spaceship.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
KRITIS
The domain ostrau.christmas was registered on July 16, 2026 through Spaceship, Inc. and is served by the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 47.242.217.10. The domain is currently listed on a single security blocklist and has been flagged by the PhishDestroy service as part of an active generic phishing operation. No public content analysis or page‑level metadata is available, so the exact phishing lure or targeted brand cannot be confirmed at this time. The lack of VirusTotal detections should not be interpreted as evidence of benign intent; the domain remains under investigation. Defenders should add 47.242.217.10 and ostrau.christmas to block lists, monitor DNS queries for the associated name servers, and consider sinkholing the address to disrupt any credential‑harvesting infrastructure. Ongoing reconnaissance is recommended to capture any payloads or redirects that may appear as the campaign evolves.
VirusTotal
13 det.
URLScan
Usia
1 mo New
Status terpantau
Belum terverifikasi
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data
VirusTotal
13 / 91
URLQuery
checked — no detections recorded
PhishStats
tidak diperiksa
OTX
no community references
CF Radar
scan completed
URLScan capture
laporan yang disimpan
URLScan verdict
malicious
Pemblokiran DNS
tidak diperiksa
TLS
tidak ada data sertifikat
WHOIS
1 mo old
Tangkapan layar
3 captures · 3 sources
Rantai pengalihan
tidak diselidiki
Intelijen Keamanan Jaringan
SSL Certificate
Invalid
SSL certificate is invalid or expired. Issuer:
Alur Tanggapan Ancaman Pipeline
Penemuan
Checks
Reports
Ketersediaan
11/12
Sent Report Recorded
Stored sent-report record for registrar Spaceship, Inc., hosting provider, 1 abuse contact
abuse@spaceship.com
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Domain
URLScan Verdict
Berbahaya
score 100 Phishing report ↗
Server / ASN
nginx · AS45102 Alibaba (US) Technology Co., Ltd.
Reputasi IP
abuse score 0/100 0 reports checked 20/07/2026
Registrar
Spaceship
(US)
(US)
Alamat IP
47.242.217.10
PendaftaranDibuat 16/07/2026 (30d · New) — Expires 16/07/2027
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi20/07/2026
DOM Analysisanalyzed 20/07/2026score 93/100
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttp://ostrau.christmas/
Server namalaunch1.spaceship.netlaunch2.spaceship.net
TLS Observationscanned 16/08/2026
Case ID
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Akreditasi adalah kontrak, bukan cap jaminan keamanan.
Verifikasi biaya ICANN
Baca RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Laporkan Domain Ini
Kirimkan bukti & bantu lindungi orang lain
Analisis VirusTotal
13 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
alphaMountain.ai
BitDefender
CRDF
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Kaspersky
Lionic
SOCRadar
Sophos
VIPRE
Bukti & Laporan Eksternal
Analisis Keamanan
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-20260720-4CFC95 Recipient: abuse@spaceship.com Page title stored with report: 首页
OSINT & Intelijen
DNS & Jaringan
SEO & Domain
Apakah Anda Terpengaruh oleh Situs Ini?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Action Fraud
Laporkan penipuan dan kejahatan dunia maya di Inggris, Wales, dan Irlandia Utara
Contact centre0300 123 2040
PhishDestroy listing review Bukan laporan penegakan hukum
Banding atas Nama Domain
Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI
Tinjau dan kirimkan sendiri
Infrastruktur dan Laporan Terkait
Shared IP 47.242.217.10 6
IP asal ini menghosting beberapa domain phishing — infrastruktur dapat digunakan bersama di seluruh kampanye.
Registrar yang sama: Spaceship 6
rainbetcasinoaus.net 
datafdn-wallet.com 
trezoroffersltd.com Generic impersonation 8
These domains also target Generic users. View all Generic threats →
Laporan ancaman terkini 6
Laporan baru-baru ini ditambahkan dari database PhishDestroy. Tautan penemuan ini tidak berarti infrastruktur atau kepemilikan bersama.
warrantytrustwallet.com 
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive