navi45[.]com
navi45.com 网络钓鱼与安全检查
“Navi Roulette”
navi45.com — 内容不可用 (HTTP 502). 品牌冒充:Counter-strike. 证据摘要: VirusTotal 10/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet); 1 external blocklist match (DiscordPhishing); PhishDestroy score 80/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy first observed navi45.com on Feb 26, 2026. Stored content metadata identifies Counter-strike as the apparent target. The captured page title is “Navi Roulette”. Page analysis recorded additional brand references to Steam. Current evidence score: 80/100 (critical).
Positive findings are stored from 2 sources: VirusTotal and DiscordPhishing. VirusTotal recorded 10 detections among 93 engines: alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet, G-Data, Lionic, Seclookup, Sophos, Webroot on Feb 25, 2026 at 01:13 UTC. DiscordPhishing listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 10:20 UTC. Non-positive and contextual checks: AlienVault OTX listed 2 community pulse references (not vendor detections) on Mar 1, 2026 at 03:16 UTC. URLQuery recorded no positive detection on Aug 31, 2025 at 06:17 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:18 UTC.
HTTP 502 was recorded on Aug 7, 2026 at 01:21 UTC; content was unavailable. The recorded creation date for the domain is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 186.2.171.13 on AS59692 (IQWEB IQWeb FZ-LLC, AE). The recorded endpoint location is Belize City, BZ. The stored server header is ddos-guard. DOM analysis on Jul 29, 2026 at 04:11 UTC returned 78/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists R11 as the certificate issuer.
The content indicators and 2 positive source findings support the current Counter-strike impersonation and phishing classification. The target field identifies Counter-strike, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。