mole[.]airdrpalerts[.]cfd
“Google”
mole.airdrpalerts.cfd — Konten tidak tersedia. Peniruan identitas merek: Google; Jenis penipuan: Generic Phishing. Ringkasan bukti: VirusTotal 13/95 (ChainPatrol, alphaMountain.ai, BitDefender, CRDF, CyRadar); PhishDestroy score 89/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain mole.airdrpalerts.cfd indicates that it was registered on October 25, 2025 through Dynadot LLC and resolves to the IP address 172.253.62.103, which is assigned to AS15169 Google LLC in the United States. The domain is hosted on Cloudflare infrastructure, as evidenced by the authoritative nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate was observed for the site, and the HTTP response returned no secure transport. The page title presented by the site is the string "Google," matching the declared brand target of Google.
VirusTotal scans recorded 13 detections out of 95 security vendors, suggesting a consensus among multiple AV engines that the domain is malicious. The domain has been listed on a security blocklist and is currently blocked by the PhishDestroy service. According to the latest intelligence, the domain is offline, but historical activity confirms that it was used for brand impersonation.
Defenders should continue to block the domain at DNS and proxy layers, monitor the associated IP 172.253.62.103 for any reactivation, and add the domain to internal threat intel feeds. Ongoing observation of the registrar Dynadot and the Cloudflare name server pair may reveal further infrastructure reuse. Given the elevated risk rating, organizations handling Google credentials should treat any traffic to this domain as hostile and enforce strict URL filtering policies.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ZONA SHORTDOT · BUKTI PUBLIK
.cfd
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Registration: airdrpalerts.cfd
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain airdrpalerts.cfd behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive