ton[.]airdropsalert[.]us
“Google”
ton.airdropsalert.us — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Google; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 12/93 (ChainPatrol, alphaMountain.ai, BitDefender, CRDF, CyRadar); PhishDestroy score 86/100. Registrar: Dynadot.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of ton.airdropsalert.us indicates a confirmed brand impersonation campaign targeting Google, classified as a crypto scam. The domain, registered on October 18, 2025, through Dynadot LLC, currently resolves to IP 142.251.163.105, hosted under AS15169 (Google LLC) in the United States. Infrastructure review reveals the domain uses Cloudflare nameservers (brenna.ns.cloudflare.com, hassan.ns.cloudflare.com) but lacks an SSL certificate, increasing exposure to interception risks. The page title 'Google' directly aligns with the reported brand target, suggesting an intent to deceive users into believing the site is affiliated with Google.
Detection data shows the domain appears on one security blocklist (PhishDestroy) and is flagged by 12 of 93 security vendors on VirusTotal, confirming malicious classification. Gridinsoft assigns a trust score of 0/100, further corroborating its fraudulent nature. As of July 23, 2026, the domain is offline, though historical records indicate it was actively serving content prior to takedown. The absence of an SSL certificate and reliance on Cloudflare nameservers are consistent with low-effort phishing infrastructure, though the use of Google LLC’s IP range may reflect attempts to evade reputation-based filtering.
Defenders should treat this domain as compromised and block all resolutions at the DNS level. Given the crypto scam classification, monitor for related domains using the 'airdropsalert' subdomain pattern or similar Google-themed lures. No evidence links this domain to a specific phishing kit or additional payloads, so further forensic analysis of captured traffic or historical snapshots would be required to determine exact attack vectors. The domain’s registration age (9 months) suggests it may have been part of a longer-term campaign, warranting retrospective log reviews for prior exposure.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive