Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@vercel.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
airdrop[.]fight[.]foundation
“$FIGHT Airdrop Claim”
airdrop.fight.foundation — Terselubung · dapat dijangkau. Peniruan identitas merek: Sui; Jenis penipuan: Fake Airdrop. Ringkasan bukti: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); cloaking observed; PhishDestroy score 71/100. Registrar: Gandi SAS.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, airdrop.fight.foundation, is actively hosting a crypto drainer phishing kit targeting users of the $FIGHT token. Analysis indicates the site presents itself as a legitimate airdrop claim page, as evidenced by the page title '$FIGHT Airdrop Claim' and the classification as a fake airdrop scam. The domain was registered on March 24, 2026, and resolves to IP 216.150.16.193, hosted on infrastructure associated with Vercel, Inc. in the United States. The SSL certificate is issued by Let's Encrypt (R12), and the domain is served via nameservers ns-137-b.gandi.net, ns-207-c.gandi.net, and ns-74-a.gandi.net, registered through Gandi SAS. Technical indicators reveal the use of Node.js, React, Vercel, Next.js, HSTS, and Webpack, which are consistent with modern web applications but do not inherently confirm malicious intent. The domain is flagged by at least one security blocklist and has been identified by three of 91 security vendors on VirusTotal, though this detection rate is not definitive evidence of widespread recognition. The Gridinsoft trust score of 0/100 further supports the assessment of high risk. Defenders should treat this domain as an active threat. The infrastructure and registration details do not align with known legitimate $FIGHT token distribution channels. Network-level blocking of the domain and its resolving IP (216.150.16.193) is recommended. If internal logs indicate user interaction with this domain, initiate incident response procedures to assess potential wallet compromise or credential exposure. Further analysis of the phishing kit's behavior, such as wallet addresses or backend endpoints, may provide additional indicators for detection and mitigation.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: fight.foundation
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain fight.foundation behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 6 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
Cloud platform for frontend deployment, optimized for Next.js.
React framework for production with hybrid static and server rendering.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Module bundler for modern JavaScript applications.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of airdrop.fight.foundation · checked Jun 26, 2026
Bukti & Laporan Eksternal
PD-20260324-A2FC36 Recipient: abuse@vercel.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive