zentraclaim[.]xyz
“Zentra Wallet Airdrop Claim Portal”
zentraclaim.xyz — Terselubung · dapat dijangkau (HTTP 502). Jenis penipuan: Fake Airdrop. Ringkasan bukti: VirusTotal 1/91 (Bfore.Ai PreCrime); Spamhaus DBL_SPAM; cloaking observed; PhishDestroy score 86/100. Registrar: Name.com.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain zentraclaim.xyz, created on May 25, 2026 and registered through Name.com, Inc., indicates it was used to host a fake airdrop claim portal titled "Zentra Wallet Airdrop Claim Portal." The site deployed an Airdrop Scam kit, a known pattern for crypto‑draining campaigns that lure victims into submitting private keys or wallet credentials. Infrastructure evidence shows the domain resolved to IP address 216.198.79.1, which belongs to Amazon.com, Inc. (AS16509) and is physically located in the United States. DNS resolution is handled by ns1.vercel-dns.com and ns2.vercel-dns.com, suggesting the use of Vercel’s DNS service for rapid deployment. The site employed a Let’s Encrypt R12 certificate, providing HTTPS encryption but offering no indication of legitimacy.
Security telemetry records a single blocklist entry and a Gridinsoft trust score of 0 / 100, reinforcing the malicious classification. PhishDestroy has also blocked the domain. VirusTotal analysis recorded that one of ninety‑one security vendors flagged the domain, confirming at least one detection of malicious activity.
The risk level is listed as elevated, though the current operational status is offline, likely after takedown or abandonment by the operators. Defenders should continue to monitor the associated IP address and Vercel DNS nameservers for re‑use, incorporate the domain and IP into blocklists, and educate users about unsolicited airdrop claims that request wallet credentials. Because the site is no longer reachable, direct remediation is limited, but threat‑intel feeds should retain the indicator for future correlation with similar crypto‑drainer campaigns.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260624-E826E4 Recipient: abuse@name.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive