airdrop-aa3[.]pages[.]dev
Verifica phishing e sicurezza per airdrop-aa3.pages.dev
“Remember KitKat | Airdrop”
airdrop-aa3.pages.dev — Ultimo attivo conosciuto (HTTP 200). Tipo di truffa: Fake Airdrop. Riepilogo delle prove: VT 2/91 (alphaMountain.ai, Forcepoint ThreatSeeker); URLScan no malicious verdict; GSB no flag; BL 0; PD 71/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
airdrop-aa3.pages.dev is a tenant hostname on Cloudflare, not a separately registered domain. PhishDestroy first recorded this hostname on Jun 23, 2026. The hostname uses “airdrop,” a pattern consistent with a airdrop lure; no target brand is confirmed from stored content. The stored content classification is fake airdrop. The assembled evidence scores 71/100 (high).
One independent source is positive: VirusTotal. VirusTotal recorded 2 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker on Aug 5, 2026 at 14:11 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Jun 23, 2026 at 05:10 UTC. URLScan completed without a malicious verdict (score 0) on Jun 23, 2026 at 08:10 UTC.
HTTP 200 was recorded on Aug 7, 2026 at 10:00 UTC. Cloudflare is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 172.66.47.6 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is cloudflare. Captured page title: “Remember KitKat | Airdrop”. DOM analysis completed on Jun 23, 2026 at 06:20 UTC; stored DOM score 68/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 01:59 UTC; stored 0 format-validated wallet addresses and 1 Telegram indicator. The platform TLS certificate was issued by Google Trust Services / WE1 with validity through Jul 25, 2026; checked Jun 23, 2026 at 07:00 UTC.
No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo