railgun-privacy[.]gitbook[.]io
“Overview | Wiki”
Resumen de las pruebas
This domain, railgun-privacy.gitbook.io, is currently flagged as a high‑risk brand‑impersonation site targeting Arbitrum. Infrastructure analysis shows the hostname resolves to 172.64.147.209, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The domain uses Cloudflare‑provided nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com, and the TLS certificate is issued by Google Trust Services under the WE1 root, confirming a valid HTTPS handshake. HTTP requests receive a 307 temporary redirect response, and the page title reported by passive scanners is “Overview | Wiki”, which does not disclose any Arbitrum‑related content but suggests a generic documentation layout. The site is built on GitBook and also leverages Google Cloud, Vercel, HSTS, Google Cloud Trace and HTTP/3, indicating a modern stack that may be used to host malicious content while appearing legitimate.
The brand indicator list identifies the domain as impersonating Arbitrum, and the scam classification is recorded as a crypto‑scam. The domain was created on 30 March 2014 and is registered through Cloudflare, Inc. The Gridinsoft trust score of 0 / 100 reflects a lack of confidence in the host’s reputation. Detection telemetry shows the domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal scans have returned detections from two of ninety‑five vendors, reinforcing the malicious assessment. Defenders should treat any traffic to railgun-privacy.gitbook.io as hostile.
Blocking at the DNS or proxy layer is advised, and existing security controls that reference the listed blocklist should be updated to include the domain. Continuous monitoring of the IP address 172.64.147.209 for any new payloads or command‑and‑control activity is recommended, as the underlying Cloudflare infrastructure can be reused for other campaigns.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
VirusTotal
2 → 1
-
VirusTotal
1 → 2
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of railgun-privacy.gitbook.io · checked Mar 7, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.