bluefin[.]app-airdropalert[.]lat
“Google”
bluefin.app-airdropalert.lat — Konten tidak tersedia. Peniruan identitas merek: Google; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 13/95 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CyRadar); PhishDestroy score 89/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
On 23 July 2026, threat‑intel analysts examined the domain bluefin.app-airdropalert.lat, which was registered on 10 November 2025 through Dynadot LLC. The domain resolves to the IP address 142.250.185.132, an address owned by AS15169 Google LLC and located in the United States. Despite the IP belonging to Google’s network, the domain is unauthenticated: it lacks an SSL/TLS certificate and serves only an HTTP response that returns the page title "Google". The site is classified as a crypto‑scam and is explicitly noted to impersonate Google. Infrastructure indicators include Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, suggesting the use of Cloudflare’s DNS services for concealment.
Reputation scoring is extremely low, with Gridinsoft assigning a trust score of 0 out of 100. The domain has been blocked by the PhishDestroy service and appears on one external security blocklist. VirusTotal analysis shows that 13 of 95 scanned security vendors flagged the domain, reinforcing the malicious assessment. Current operational status is offline, and no further content has been captured.
Uncertainties remain regarding the exact payload or phishing kit used, as no page content or HTTP payload has been archived. Defenders should proactively block the domain and its associated IP at network perimeters, add the host to internal and external blocklists, and monitor for any new sub‑domains or similar Cloudflare name‑server configurations that reference the same IP range. Continuous re‑scanning with multi‑vendor services is advised to capture any future changes in the domain’s behavior.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: app-airdropalert.lat
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain app-airdropalert.lat behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Intelijen Forensik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive