airdropsalerts[.]com
Análisis de phishing y seguridad de airdropsalerts.com
“Access denied | airdropsalerts.com used Cloudflare to restrict access | airdr...”
airdropsalerts.com — Contenido no disponible (HTTP 502). Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 11/95 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CRDF); PhishDestroy score 83/100. Registrador: Dynadot.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain airdropsalerts.com was registered on November 21, 2025 through Dynadot LLC and is currently resolved to the Cloudflare‑managed address 172.67.144.23, belonging to AS13335 Cloudflare, Inc. in the United States. The site’s TLS certificate is issued by Google Trust Services under the WE1 label, indicating a valid HTTPS endpoint, but the certificate alone does not imply legitimacy. The authoritative nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com confirm that the domain is fully proxied through Cloudflare, which also serves the page title “Access denied | airdropsalerts.com used Cloudflare to restrict access | airdropsalerts.com | Cloudflare”. This title suggests the site is presently inaccessible, consistent with the reported offline status.
Intelligence flags the domain as a crypto‑drainer scam, specifically employing the publicly available “Airdrop Scam” phishing kit. The kit is commonly used to lure cryptocurrency users with false airdrop promises and to harvest private keys or redirect funds. The domain appears on a single security blocklist and is listed by PhishDestroy as a malicious resource. VirusTotal analysis shows 11 of 95 scanning engines flag the domain, reinforcing the malicious classification despite the relatively low detection count.
From an infrastructure perspective, the use of Cloudflare and HTTP/3 indicates a modern hosting stack that can obscure the true origin server and provide resilience against takedown attempts. The presence of a valid Google‑issued certificate may increase user trust, while the Cloudflare proxy can hide detailed server fingerprints. No additional public blocklists, Safe Browsing entries, or OTX indicators were observed beyond the one blocklist and the PhishDestroy entry.
Defenders should treat any traffic to airdropsalerts.com as hostile. Network sensors should block outbound connections to the IP 172.67.144.23 and to the domain itself.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.