claim-drop[.]live
Pemeriksaan phishing dan keamanan claim-drop.live
“Ripple FXRP Airdrop”
claim-drop.live — Konten tidak tersedia (HTTP 502). Jenis penipuan: Fake Airdrop. Ringkasan bukti: VirusTotal 19/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); Google Safe Browsing flagged; Spamhaus DBL_PHISH; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); CF Radar malicious; PhishDestroy score 100/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
PhishDestroy first observed claim-drop.live on Jun 17, 2026. The hostname uses “claim,” a pattern consistent with a reward-claim lure; no target brand is confirmed from stored content. The captured page title is “Ripple FXRP Airdrop”. Evidence score: 100/100 (critical).
7 independent sources recorded positive findings: VirusTotal, MetaMask, ScamSniffer, SEAL, Google Safe Browsing, and Spamhaus DBL, and others. VirusTotal recorded 19 detections among 91 engines: ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET on Jun 26, 2026 at 15:20 UTC. MetaMask, ScamSniffer, and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 06:20 UTC. Google Safe Browsing flagged the domain: Social Engineering on Jun 18, 2026 at 04:00 UTC. Spamhaus DBL: DBL_PHISH on Jul 17, 2026 at 22:30 UTC.
HTTP 502 was recorded on Aug 9, 2026 at 01:33 UTC; content was unavailable. Latest classified outcome: registration hold observed; cause registrar client hold; mechanism client hold; observed actor NICENIC INTERNATIONAL GROUP CO., LIMITED on Aug 9, 2026 at 01:48 UTC. Registration records for the domain list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar and Apr 30, 2026 as the creation date. At collection time, the hostname resolved to 188.114.97.3 (AS13335 Cloudflare, Inc.). The evidence archive retains 2 visual captures from PhishDestroy and URLScan.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 03:48:09 UTC
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260617-590760 Recipient: abuse@identitydigital.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.