studio--solana-swap-cdxjl[.]us-central1[.]hosted[.]app
“Firebase Studio App”
studio--solana-swap-cdxjl.us-central1.hosted.app — Contenuto non disponibile. Simulazione del marchio: Solana; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 4/95 (alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker); CF Radar malicious; PhishDestroy score 65/100. Registrar: MarkMonitor.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain studio--solana-swap-cdxjl.us-central1.hosted.app was observed returning HTTP 404 and presenting the page title “Firebase Studio App”. Registration records show the domain was created through MarkMonitor Inc., a registrar commonly used for legitimate brand assets, indicating an attempt to lend credibility to the infrastructure. The site impersonates the Solana brand and is classified as a crypto‑related scam. VirusTotal scans recorded four detections out of ninety‑five security vendors, and the domain appears on a single external blocklist.
PhishDestroy has already taken the domain offline, and current monitoring confirms the site is no longer reachable. DNS resolution points to the IP address 35.219.200.24, which belongs to AS19527 Google LLC and is geolocated in South Korea. The hosting environment is Google Cloud, employing Envoy as a reverse proxy, Google Cloud CDN, and HTTP/3 support. The TLS certificate is issued by Google Trust Services under the WR3 identifier, matching the Google Cloud hosting.
Nameserver delegation uses Google’s cloud DNS set (ns-cloud-b1.googledomains.com through ns-cloud-b3). The combination of a legitimate registrar, Google‑hosted infrastructure, and a modest detection footprint suggests a low‑profile campaign that relied on the perceived trust of the Solana brand and Google services. Defenders should continue to block the IP range associated with AS19527, monitor for any re‑registration attempts of similar subdomains, and update detection rules to flag the page title “Firebase Studio App” when coupled with Solana‑related keywords. Organizations using Solana assets should educate users about the offline status of this domain and reinforce verification of official URLs before any credential or transaction requests.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Registration: hosted.app
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain hosted.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 4 identified
Suite of cloud computing services running on Google infrastructure.
Content delivery network built on Google global edge infrastructure.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo