Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is gdg@dynadot.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
opinionlabs[.]trade
“Opinion Airdrop Guide 2026 – How to Qualify & Use the Opinion Claim Portal”
opinionlabs.trade — Non verificato. Simulazione del marchio: Genericcrypto; Tipo di truffa: Airdrop Scam. Riepilogo delle prove: VirusTotal 7/93 (alphaMountain.ai, CyRadar, Ermes, Forcepoint ThreatSeeker, Gridinsoft); URLQuery 1 alert; URLScan malicious verdict; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 75/100. Registrar: Global Domain Group.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
On July 24, 2026, the domain opinionlabs.trade was observed hosting a page titled “Opinion Airdrop Guide 2026 – How to Qualify & Use the Opinion Claim Portal”. The site was registered on 21 February 2026 through Global Domain Group LLC and uses Cloudflare nameservers cameron.ns.cloudflare.com and mckenzie.ns.cloudflare.com. DNS resolution points to the IPv6 address 2a06:98c1:3120::3, which is allocated to AS13335 Cloudflare, Inc. in the United States. The TLS certificate is issued by Google Trust Services under the WE1 certificate authority, indicating a valid HTTPS endpoint despite the malicious intent. The page delivers an “Airdrop Scam” kit that promises users a non‑existent token distribution, a known fake airdrop pattern frequently abused to harvest credentials or cryptocurrency wallets.
The HTTP response returned a 403 status code, suggesting the content was intentionally blocked or the site is no longer serving pages. The domain has been taken offline, but historical evidence shows it was actively serving malicious content before removal. Reputation data shows the domain appears on four security blocklists and is specifically blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL. VirusTotal analysis recorded seven detections out of ninety‑three scanners, reinforcing its malicious classification. The combination of Cloudflare infrastructure, a legitimate‑looking SSL certificate, and the use of a popular airdrop narrative is consistent with attempts to bypass automated trust checks.
Uncertainty remains regarding the extent of victim outreach, as no traffic logs or victim reports were provided. The current offline status limits immediate threat propagation, yet the registration details and infrastructure pattern suggest the operators could reuse the same nameservers and hosting arrangement for future campaigns. Defenders should add opinionlabs.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | opinionlabs.trade |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 1 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
PD-20260214-822E5B Recipient: gdg@dynadot.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo