tia[.]airdropalert[.]us
“Google”
tia.airdropalert.us — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Google; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 11/93 (ChainPatrol, alphaMountain.ai, BitDefender, CRDF, CyRadar); PhishDestroy score 83/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain tia.airdropalert.us was registered through Dynadot LLC on 19 Oct 2025. It resolves to the IPv4 address 142.250.190.228, which belongs to AS15169 owned by Google LLC and is geolocated in the United States. The domain uses the Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate was observed, indicating the site served only HTTP. The page title returned by the server is "Google", and the domain is explicitly listed as impersonating Google, matching the brand‑target field.
The intelligence classifies the activity as a crypto‑related scam that leverages the Google brand, consistent with a brand‑impersonation campaign. VirusTotal analysis shows that 11 of 93 scanning engines flagged the domain as malicious, and the domain appears on a single external blocklist. PhishDestroy has also listed the domain as blocked. The current operational status is offline, and the site has been taken down.
Uncertainty remains regarding the exact payload or phishing kit used, as no further page content has been captured. Defenders should continue to block any DNS resolution to the address 142.250.190.228 when associated with tia.airdropalert.us, enforce HTTP‑to‑HTTPS redirection policies, and monitor for any re‑registration attempts. Adding the domain to internal blocklists and sharing the indicator with upstream threat‑sharing feeds will help prevent future impersonation attempts. Continuous monitoring of the registrar Dynadot for new domains that mimic the same pattern is also advised.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive