Security Scan Report: inv2celestia.online

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 13 HTTP transactions. The main domain is inv2celestia.online and was registered 2 weeks ago.

Submitted URL: https://inv2celestia.online/

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Recruitment page using the Celestia brand on a non-official lookalike domain with no verifiable operator; combined with a HIGH IDS stager alert, treat as a likely impersonation lure despite no captured forms.

Risk Factors (5)
Use of the Celestia name and technical description on a non-official, lookalike domain (inv2celestia.online) without authorisation disclosure beyond a vague 'independent developer outreach' line
No verifiable operating company, legal notice, team or contact information anywhere on the page
HIGH-severity network IDS alert indicating a PowerShell stager / attack-response pattern on traffic associated with the host
Unranked domain with unknown registration age and no established reputation
Fake-recruitment pattern common in crypto/Web3 targeting engineers' identities and development environments
Domain age information unavailable

Details

Page Title

Celestia Protocol Engineering — Developer Invitation

Scan Type

public

Domain Name Analysis

The domain name 'inv2celestia.online' uses the modern generic top-level domain (.online). Count 12 characters in 'inv2celestia' containing five vowels alongside six consonants, notching 1 digit. Breaking it apart gives 4 words: in, v, 2, celestia. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

@cevestia Apel © PRIVATE INVITATION Protocol engineering for data availability. Built in the open. An invitation for skilled developers in P2P, distributed systems, Rust, and Go — to help scale Cel...

Page Load Overview

5.42s
Total Load Time
871 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,743 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(94%)🇵🇭tl(3%)🇫🇷fr(3%)

Website Classification

Primary Category

technology software63% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
63%
cryptocurrency blockchain
41%
documentation technical
32%
cryptocurrency
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13193.160.32.243Nuremberg, Bavaria, Germany
AS206216Advin Services LLC
131--

Detected Technologies2

Nginxv1.28.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AC22DB3253F51A3780B390D67A903B656ED88117C15A1302B7BC8F886FF6D96EA1F50E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:8ZKEZAJpZb+Bw2TPhrrHy+chgsE/nxJaScpeYU5q07:8ZKEZAt+BwEPhrrHy+chgsE/nxMScpeN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10188:KQEqgoCMImAUw+BMwDmIoAEGKJAJUAIAUpNOAJpAt5Sg3U1wkINBiIASxBQcyYBuHCQz4IFnQ0MCVQQBGAWILIxhHZRwGECG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02181810107e7e00
Perceptual Hash:8a3d33972c97b12c
Difference Hash:9671b17133d8d403
Wavelet Hash:433d1919197f7f01
Color Hash:38006600000

Scan History

Scan history not available

Unable to load historical scan data