resilient-bublanina-c4ca5b[.]netlify[.]app
“$Peace - Airdrop Live”
resilient-bublanina-c4ca5b.netlify.app — Non verificato. Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 2/91 (alphaMountain.ai, LevelBlue); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. Registrar: Netlify.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain resilient-bublanina-c4ca5b.netlify.app was registered on March 01, 2026 and remains active as of the report date, July 12, 2026. It is classified as a high‑risk brand‑impersonation campaign targeting the "Airdrop Scam" brand, with the page title observed as "$Peace - Airdrop Live". The site is delivered via Netlify infrastructure and the HTTP response returns a 200 status code, indicating a fully operational front‑end. The phishing kit identified matches the known "Airdrop Scam" kit, and the site is currently blocked by multiple security services including PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, underscoring the malicious nature of the content.
Infrastructure analysis shows the domain resolves to IP address 63.176.8.218, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in Germany. The domain uses Netlify’s default nameserver set: dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, and dns4.p01.nsone.net. TLS termination is provided by a DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate, confirming the presence of HTTPS with a valid chain. Detected technologies include Unpkg, Netlify, and HTTP Strict Transport Security (HSTS), consistent with typical Netlify‑hosted sites.
Threat intelligence indicates the domain appears on three security blocklists and has been flagged by one out of ninety‑five VirusTotal scanners. The combination of a zero‑score trust rating, active blocklist entries, and a confirmed phishing kit justifies the high risk rating. Defenders should immediately add the domain and its resolved IP address to deny‑list rules, update URL filtering policies to include the observed Netlify sub‑domain pattern, and monitor for any related activity leveraging the same nameserver set or IP range. Continuous re‑evaluation is recommended, as the short registration window suggests a rapidly deployed campaign that may spawn additional variants.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 3 identified
Fast CDN for everything on npm — serves raw files from npm packages.
Platform for deploying and hosting modern web applications.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of resilient-bublanina-c4ca5b.netlify.app · checked Mar 2, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo