bigbrainsociety[.]com
“bigbrainsociety.com | 522: Connection timed out”
Resumen de las pruebas
Analysis of bigbrainsociety.com indicates that the domain was registered on 2026-02-21 through NiceNIC International Group Co., Limited and immediately pointed to Cloudflare's edge network (AS13335) at IP 104.21.75.169. The hosting location is identified as the United States. The domain resolves to a Cloudflare‑protected address but does not present an SSL certificate, suggesting that TLS was not configured before the site was taken offline. HTTP requests return a 522 timeout, as reflected in the page title “bigbrainsociety.com | 522: Connection timed out”, confirming that the origin server is currently unreachable. The infrastructure is associated with an Airdrop Scam phishing kit, a known template used to lure victims with cryptocurrency‑airdrop promises.
The domain appears on four external blocklists and has been actively blocked by security services including PhishDestroy, MetaMask, ScamSniffer, and SEAL. VirusTotal recorded four positive detections out of ninety‑three scanned engines, reinforcing the malicious classification. Gridinsoft assigns a trust score of 0 out of 100, indicating no confidence in the domain’s legitimacy. Nameserver records list jill.ns.cloudflare.com and noel.ns.cloudflare.com, both standard Cloudflare resolvers, which further confirms the use of Cloudflare's DNS infrastructure.
The lack of SSL, combined with the timeout response, suggests the site was either in the process of deployment or deliberately shut down after detection. While the available data confirms malicious intent, the exact content of the phishing pages, credential‑stealing forms, or redirect URLs remain unknown because the site is offline. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and update threat‑intel feeds with the observed indicators: domain name, registration date, hosting IP, Cloudflare nameservers, and the Airdrop Scam kit fingerprint.
Data Coverage
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
9 fuentes externas supervisadas Sin coincidencias
Evidencia del resultado almacenada
Resultado y atribución del retiro
- Resultado
unknown- Disponibilidad
unreachable- Causa
origin_unreachable- Mecanismo
http_5xx- Confianza
- 20%
- Primera observación
- Última observación
Indisponibilidad estimada
Tiempo hasta la indisponibilidad: 16.78 hSHA-256 de la evidencia bc7eff47529c
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Disponibilidad
Primer valor almacenado: Desconocido
993d00c35140 -
Disponibilidad
Desconocido → Inactivo
3319e533f773 -
Disponibilidad
Inactivo → Desconocido
83374d9d652c
Reportes de la comunidad
Reportado por 1 miembro de la comunidad; visto por primera vez el 21/01/2026
- Reportes almacenados
- 1
- URL únicas reportadas
- 1
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.