proposal-clawdbotatg[.]com
Ringkasan bukti
Analysis of proposal-clawdbotatg.com as of July 24 2026 shows that the domain was registered on March 06 2026 through NiceNIC International Group Co., Limited. DNS resolution points to the Cloudflare edge address 188.114.96.3, which is advertised as belonging to AS13335 Cloudflare, Inc. and is geolocated to the United States. The authoritative name servers are adam.ns.cloudflare.com and danica.ns.cloudflare.com, confirming that the domain is fully hosted on Cloudflare infrastructure. No TLS certificate was observed during the scan, and the sole HTTP response returned the page title “Just a moment…”, which is typical of Cloudflare’s interstitial challenge page rather than a legitimate brand landing page.
The domain has been actively flagged by multiple security services. It appears on three public blocklists, and it is listed as blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal identified a single positive detection out of ninety‑four scanners, indicating that at least one AV engine flagged the resource as malicious. The current operational status is reported as offline, suggesting that the site is no longer serving content, but the historical indicators remain relevant for threat‑intel correlation.
Given the combination of recent registration, Cloudflare‑only hosting, absence of a valid SSL certificate, and explicit blocklist entries, the infrastructure is consistent with a generic phishing or scam deployment. However, the exact payload, targeted brand, or victim interaction flow cannot be confirmed because no page content beyond the title has been captured. Defenders should continue to deny network connections to the domain, add it to URL filtering and DNS sinkhole policies, and monitor for any resurgence of activity from the associated IP address or Cloudflare name servers. Ongoing telemetry collection from proxy logs and endpoint detections will help validate whether the single VirusTotal flag corresponds to a broader campaign.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260306-453A6D- Judul halaman yang direkam
- Just a moment...
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown
Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
8 sumber eksternal dipantau Tidak cocok
Linimasa deteksi
-
VirusTotal
0 → 1
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive