Análisis de phishing y seguridad de dentreward.com

The domain dentreward.com was registered on 18 Oct 2025 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335) with the IP address 172.67.190.25 located in the United States. The authoritative nameservers are angelina.ns.cloudflare.com and yadiel.ns.cloudflare.com. No TLS certificate is presented; the site serves only HTTP, exposing any credentials to passive network observation. The only visible page element captured is the title “Just a moment…”, which provides no indication of the underlying content.

VirusTotal records show that six of ninety‑five scanning engines have generated detections for the domain, and Gridinsoft’s trust score is 0 / 100, indicating a high likelihood of malicious intent. The domain appears on a single public blocklist and is actively listed by PhishDestroy, which has taken the site offline as of the report date. The listed scam type is “Fake Airdrop”, a common social‑engineering lure used to harvest cryptocurrency wallet addresses or personal data. Because the site is already offline, immediate mitigation focuses on preventing re‑use of the associated IP address and Cloudflare‑hosted hostname.

Defenders should add dentreward.com and its resolved IP to DNS‑based blocklists, monitor for new domains resolving to the same Cloudflare edge nodes, and enforce strict TLS‑only policies for outbound traffic to avoid accidental connections to non‑encrypted endpoints. Continuous tracking of future VirusTotal submissions and blocklist updates is recommended to capture any resurgence of the campaign. At present, the lack of SSL, low trust score, and multiple vendor detections provide sufficient evidence for elevated risk classification.