MALICIOUS — CRITICAL
app-thruster[.]pages[.]dev
PhishDestroy identifies app-thruster.pages.dev as an active generic phishing domain under investigation for brand impersonation.
- VirusTotal
- 13/91
- Blocklists
- 2 · ScamSniffer, Enkrypt
- 가용성
- 마지막으로 알려진 활성 · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
app-thruster.pages.dev — 마지막으로 알려진 활성 (HTTP 200). 사기 유형: Fake Airdrop. 증거 요약: VirusTotal 13/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, ESET, Emsisoft); URLQuery 2 alerts; 2 external blocklist matches (ScamSniffer, Enkrypt); PhishDestroy score 100/100. 등록기관: Cloudflare.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Evidence Analysis
PhishDestroy identifies app-thruster.pages.dev as an active generic phishing domain under investigation for brand impersonation. The threat remains unflagged by VirusTotal despite its presence on two security blocklists and active blocking by ScamSniffer and Enkrypt. This domain was flagged with a risk level of under_investigation and is associated with a generic phishing campaign. Key indicators include 0 detections out of 95 on VirusTotal, registration through Cloudflare, Inc., an SSL certificate issued by Google Trust Services, and resolution to IP 188.114.97.3. The domain is currently blocked by ScamSniffer and Enkrypt, though it evades broader detection efforts. Mitigation for this brand impersonation threat requires immediate avoidance of all interactions with app-thruster.pages.dev. Users should verify the authenticity of any communication purporting to be from the impersonated brand through official channels. Organizations are advised to update blocklists with the domain and associated IP 188.114.97.3, while monitoring for related infrastructure changes. Reporting suspicious activity to PhishDestroy and relevant security vendors enhances collective defense against this evolving campaign.
데이터 적용 범위13 recorded checks
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | app-thruster.pages.dev/ghostbags.js |
audit | Hunting_JS_WebAssembly |
| DNS4EU | app-thruster.pages.dev |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 9 identified
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org 신뢰도 100%SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.
sweetalert2.github.io 신뢰도 100%JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 신뢰도 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 신뢰도 100%VirusTotal 분석
증거 및 외부 보고서Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.