airdrophubs[.]org
“Digital Money Market funding system offers a structured airdrop campaign designed to earn tokens by…”
airdrophubs.org — Konten tidak tersedia. Peniruan identitas merek: Ethereum; Jenis penipuan: Airdrop Scam. Ringkasan bukti: VirusTotal 6/94 (ADMINUSLabs, alphaMountain.ai, G-Data, Gridinsoft, SOCRadar); PhishDestroy score 68/100. Registrar: IONOS SE.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
On 7 April 2026 the domain airdrophubs.org was registered through IONOS SE and immediately pointed to Cloudflare’s network with the IP address 104.21.5.202 located in Canada. The domain uses the Cloudflare nameservers lilith.ns.cloudflare.com and pete.ns.cloudflare.com and presents a Google Trust Services / WE1 SSL certificate, indicating a valid TLS termination. The publicly visible page title reads “Digital Money Market funding system offers a structured airdrop campaign designed to earn tokens by completing simple and non-technical tasks,” classifying the site as a fake airdrop operation that aims to lure cryptocurrency users into surrendering private keys or sending funds.
Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, currently listed by PhishDestroy. VirusTotal scans have returned six positive detections out of ninety‑four vendors, confirming that multiple threat intelligence engines recognize the site as malicious. An MX record is configured pointing to “_dc-mx.0c13ab2cfc4d.airdrophubs.org” with priority 0, suggesting potential use for email harvesting or delivery of malicious payloads.
The infrastructure is now taken offline, limiting immediate interaction, but the combination of a fresh registration, Cloudflare hosting, low trust rating, and the fake airdrop narrative indicates a classic crypto drainer campaign. Defenders should add airdrophubs.org to blocklists, monitor for any residual DNS or SMTP activity, and instruct users to disregard unsolicited airdrop promises that reference digital money market funding. Continuous watch of the IP 104.21.5.202 and associated Cloudflare zones is advised, as the actors may repurpose the same hosting for future campaigns.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of airdrophubs.org · checked Apr 7, 2026
Bukti & Laporan Eksternal
PD-20260407-23A24E Recipient: abuse@ionos.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive