auth[.]claimsportal[.]celsius[.]network[.]distributions-id932[.]com
“500 Internal Server Error”
auth.claimsportal.celsius.network.distributions-id932.com — 未验证. 证据摘要: VirusTotal 3/91 (alphaMountain.ai, Forcepoint ThreatSeeker, SOCRadar); PhishDestroy score 86/100. 注册商: OwnRegistrar.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
auth.claimsportal.celsius.network.distributions-id932.com is a subdomain of distributions-id932.com. PhishDestroy first observed the hostname on Aug 19, 2026. The captured page title is “500 Internal Server Error”. Current evidence score: 86/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 3 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker, SOCRadar on Aug 20, 2026 at 07:25 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 20, 2026 at 10:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 20, 2026 at 07:28 UTC. URLScan completed without a malicious verdict (score 0) on Aug 19, 2026 at 23:08 UTC.
The collector marked the hostname reachable on Aug 19, 2026 at 18:41 UTC, but did not retain the HTTP response code. Registration records for the registrable domain distributions-id932.com list OwnRegistrar, Inc. as the registrar and Aug 18, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 103.227.84.141 on AS200823 (MHost LLC). The recorded endpoint location is Frankfurt am Main, DE. The stored server header is nginx. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YR1 as the certificate issuer with validity through Nov 16, 2026; checked Aug 19, 2026 at 19:02 UTC.
Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: distributions-id932.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain distributions-id932.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 7 identified
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 置信度 100%Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
zendesk.com 置信度 100%Mixpanel provides a business analytics service. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Its toolset contains in-app A/B tests and user survey forms.
mixpanel.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application.
aws.amazon.com 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of auth.claimsportal.celsius.network.distributions-id932.com · checked Aug 19, 2026
证据与外部报告
PD-20260819-0C7CE7 Recipient: abuse@mhost.ee 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。