sca[.]airdrpsalert[.]click
“airdrpsalert.click | 504: Gateway time-out”
sca.airdrpsalert.click — Konten tidak tersedia (HTTP 502). Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 8/95 (ChainPatrol, CRDF, CyRadar, Seclookup, SOCRadar); PhishDestroy score 74/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
sca.airdrpsalert.click was registered on 26 October 2025 through Dynadot LLC. The domain resolves to the IP address 188.114.96.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. DNS resolution is provided by the Cloudflare authoritative nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate is presented; HTTP requests return a 504 Gateway‑time‑out page title that simply repeats the domain name and the error code, indicating that the site is currently offline. Threat intelligence correlates the domain with a credential‑phishing campaign that leverages an “Airdrop Scam” kit.
Eight of ninety‑five VirusTotal scanners have flagged the domain as malicious, and it appears on one external blocklist. PhishDestroy has already blocked the host, and Gridinsoft assigns it a trust score of 0 / 100, reinforcing the malicious assessment. The presence of the kit suggests the operator may be attempting to harvest cryptocurrency‑related credentials or private keys, although the exact payload has not been captured because the site is not serving content. The available evidence confirms a malicious infrastructure that uses Cloudflare’s network to hide the origin server, a common tactic for fast‑flux or abuse‑resistant phishing operations.
Because the domain is presently offline, active probing cannot reveal additional indicators such as redirect URLs, form fields, or malicious scripts. Defenders should continue to deny any DNS resolution to 188.114.96.3 for this host, add sca.airdrpsalert.click to internal blocklists, monitor for re‑registration or resurrection of the domain, and watch for similar patterns in newly observed Airdrop‑kit domains. Ongoing vigilance is recommended, especially for users who may receive unsolicited airdrop invitations that request private keys or login credentials.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: airdrpsalert.click
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain airdrpsalert.click behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive