drop[.]life
“Access Denied”
Détection enregistrée
Alerte de dissimulation
- Type de dissimulation
status_split- Score de dissimulation
- 2/6
- Motif
- alive_content: raw=ok; http=200; via=https_proxy
The domain drop.life was identified as a generic phishing site with no specific brand impersonation or drainer kit associated. It posed an elevated risk by attempting to harvest user credentials or sensitive information through deceptive means. As of the latest verification, drop.life has been taken offline, though it remains a documented phishing threat.
Technical analysis of drop.life revealed limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and SOCRadar, while Google Safe Browsing did not flag it. It appeared on 1 security blocklist, specifically PhishDestroy. Registered through DNSPod, Inc., the domain was created on March 23, 2026, and resolved to the IP address 76.223.54.146, hosted on AWS Global Accelerator in the US. The SSL certificate was issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2. The observed page title was 'Access Denied,' and the site utilized Akamai technologies. MX records were empty, and nameservers were ns1.afternic.com and ns2.afternic.com.
Users who may have interacted with drop.life should immediately change any exposed credentials, particularly for accounts sharing the same password. Enable two-factor authentication (2FA) on all critical services to mitigate unauthorized access. Monitor financial and login activity for signs of fraud. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader threat mitigation.
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources · synchronisé le 09/08/2026
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif