drrdeesrfesr[.]top
“Приложения в Google Play – Боги Олимпа (Gods of Olympus)”
Rilevamento memorizzato
Avviso di cloaking
- Tipo di cloaking
bot_redirect_safe- Punteggio di cloaking
- 4/6
Riepilogo delle prove
The domain drrdeesrfesr.top was registered on 2026-04-14 through Dynadot LLC and is currently active. It is classified as a high‑risk Google brand‑impersonation campaign. The site returns HTTP 302 redirects and serves a page titled “Приложения в Google Play – Боги Олимпа (Gods of Olympus)”, indicating an attempt to masquerade as official Google Play content. Infrastructure analysis shows the domain resolves to IP 172.67.137.28, which belongs to Cloudflare, Inc. and is geolocated in Canada. Authoritative nameservers are jeremy.ns.cloudflare.com. and nucum.ns.cloudflare.com., confirming the use of Cloudflare’s DNS and proxy services. The SSL certificate is issued by Let’s Encrypt (E7), and the site employs reCAPTCHA, HSTS, Google Tag Manager, Google Analytics, and HTTP/3, all of which are typical of legitimate Google‑related services but do not mitigate the impersonation risk. Threat intelligence indicates the domain has been flagged by PhishDestroy and appears on a single security blocklist. Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports a single vendor detection out of 95, suggesting limited visibility rather than a clean verdict. The page title in Russian referencing “Gods of Olympus” is unrelated to Google, implying a lure to Google Play users, possibly to harvest credentials or distribute unwanted software. Defenders should add drrdeesrfesr.top to outbound and inbound deny lists, enforce DNS sink‑hole or block‑page policies for the domain, and monitor any resolved connections to 172.67.137.28. Continuous inspection of traffic to Cloudflare edge nodes for this host is advised, as the proxy can mask further command‑and‑control infrastructure. Organizations should also educate users about the anomalous Russian‑language page that pretends to be a Google Play listing, reinforcing verification of URLs before entering credentials.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of drrdeesrfesr.top · checked Apr 15, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo