echallengem[.]net

Analysis of the domain echallengem.net indicates a brand‑impersonation campaign targeting the Celer brand. The site was registered on December 18 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IPv4 address 147.45.45.11, which is announced by AS205775 (NEON CORE NETWORK LLC) in the Netherlands. The page title returned from the HTTP response is “Global | eSports and Gaming Community,” a generic title that does not reference Celer, suggesting the malicious page may be used to host credential‑stealing or affiliate‑based content rather than a direct replica of the target brand. No TLS certificate is presented, leaving the connection unencrypted and indicating a lack of legitimate security controls.

VirusTotal reports that 18 of 93 scanning engines flag the domain, reinforcing the suspicion of malicious activity. The domain appears on a single security blocklist and has been added to the PhishDestroy blocklist, confirming that at least one anti‑phishing service has taken action. AlienVault OTX references the domain in 15 threat‑intel pulses, providing additional community corroboration of its abusive nature. Gridinsoft assigns a trust score of 1 out of 100, reflecting an extremely low reputation.

Nameserver records point to dns1‑4.regway.com, a common registrar‑provided set that does not mask the underlying infrastructure. The domain’s current status is offline, which limits immediate probing but does not eliminate risk; the hosting infrastructure remains associated with the same IP and ASN. Defenders should continue to block the IP 147.45.45.11 and the domain itself at network perimeter and DNS layers, monitor for any re‑registration attempts, and ensure that user‑education campaigns reference the Celer brand to reduce credential‑harvesting success. Given the limited public content, further forensic analysis of any cached HTTP responses or archived snapshots would be prudent to confirm the exact phishing vector employed.