remitano-boschss[.]com

Analysis of the domain remitano-boschss.com indicates it was actively involved in an Airdrop Scam phishing operation before being taken offline. Registered on November 24, 2024, through Porkbun LLC, the domain resolved to the IP address 199.59.243.228, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The domain lacked an SSL certificate, increasing its risk profile for credential interception.

At the time of assessment, the site was flagged by two security blocklists—PhishDestroy and ScamSniffer—and was classified by 15 of 95 security vendors on VirusTotal as malicious. The page title, matching the domain name, provides no additional brand-specific context, though the identified phishing kit aligns with Airdrop Scam typologies. Nameservers were configured under Porkbun’s infrastructure (curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com, salvador.ns.porkbun.com), and the domain’s Gridinsoft trust score was 0/100, further corroborating its malicious classification.

Defenders should treat this domain as part of a broader Airdrop Scam campaign, particularly given its association with known phishing infrastructure. While the domain is currently offline, historical resolution data and detection records suggest it was operational long enough to pose a credible threat. Monitoring for re-registration or related domains under similar naming conventions is recommended.