Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is registryescalations@markmonitor.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
consistent-indigo-zbntuivvn9-wuymg4e86j[.]edgeone[.]app
“Aave • 2026 New Year Elite Airdrop • Official”
consistent-indigo-zbntuivvn9-wuymg4e86j.edgeone.app — असत्यापित. घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 9/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, Fortinet, G-Data); URLQuery 2 alerts; PhishDestroy score 83/100. रजिस्ट्रार: MarkMonitor.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
On 24 July 2026 analysts observed that the domain consistent-indigo-zbntuivvn9-wuymg4e86j.edgeone.app remains active and hosts a page titled “Aave • 2026 New Year Elite Airdrop • Official”. The site was registered on 21 February 2026 through MarkMonitor, Inc. and resolves to the IPv4 address 43.152.26.58, which is allocated to AS139341 ACE in Germany. The TLS certificate is issued by DigiCert, Inc., using a DigiCert Secure Site OV G2 RSA‑4096 SHA‑256 certificate issued in 2022, confirming the presence of a valid HTTPS service that returns HTTP 200 for the landing page. Infrastructure fingerprints show the use of Cloudflare CDN, as well as third‑party libraries from jsDelivr and cdnjs. Nameserver delegation points to ns3.dnsv4.com and ns4.dnsv4.com.
VirusTotal analysis reports that 3 of 95 AV engines flagged the domain, indicating partial detection of malicious activity. The domain appears on one external security blocklist and is listed by PhishDestroy, reinforcing the classification as a crypto‑related phishing operation. Gridinsoft assigns a trust score of 0/100, reflecting a high likelihood of abuse. The identified phishing kit is labeled “Airdrop Scam”, consistent with the page title that attempts to lure victims with a purported Aave New Year elite airdrop. While the available data confirms the presence of a phishing kit and multiple detection signals, no public threat‑intel feeds such as OTX or Google Safe Browsing are referenced, leaving the broader distribution of the malicious URL unknown.
The exact content of the landing page beyond the title has not been captured, so the specific credential‑capture mechanisms remain uncertain. Defenders should block the domain at perimeter firewalls and DNS resolvers, add the IPv4 address to host‑based deny lists, and ensure that any corporate email filters flag messages containing the “Aave 2026 New Year Elite Airdrop” phrase.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | consistent-indigo-zbntuivvn9-wuymg4e86j.edgeone.app/ |
malware | Detects file containing Telegram Bot API |
| Quad9 DNS | consistent-indigo-zbntuivvn9-wuymg4e86j.edgeone.app |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: edgeone.app
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain edgeone.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 4 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comFree public CDN for open-source projects, serving files from npm and GitHub.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of consistent-indigo-zbntuivvn9-wuymg4e86j.edgeone.app · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260124-6B71F0 Recipient: registryescalations@markmonitor.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।