flamingo-finance[.]pages[.]dev
“Aidrops on Flamingo, The Exclusive Multichain Airdrop”
flamingo-finance.pages.dev — Não verificado. Tipo de golpe: Fake Airdrop. Resumo das evidências: VirusTotal 2/91 (alphaMountain.ai, Gridinsoft); 2 external blocklist matches (ScamSniffer, Enkrypt); PhishDestroy score 83/100. Registrador: Cloudflare.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain, flamingo-finance.pages.dev, is actively hosting a high-risk phishing operation impersonating a multichain airdrop platform. Registered on April 24, 2026, through Cloudflare, Inc., the site resolves to the IP address 188.114.97.3 and presents a page titled 'Aidrops on Flamingo, The Exclusive Multichain Airdrop.' Analysis indicates the use of a known airdrop-themed phishing kit, with detected technologies including Unpkg, SweetAlert2, jsDelivr, HSTS, crypto-js, cdnjs, and Cloudflare infrastructure supporting HTTP/3. The SSL certificate is issued by Google Trust Services, a common feature in both legitimate and malicious sites, offering no inherent indication of trustworthiness. The domain holds a Scamadviser trust score of 11/100 and a Gridinsoft trust score of 0/100, reflecting strong suspicion of fraudulent activity. It appears on three security blocklists and is currently blocked by ScamSniffer, PhishDestroy, and Enkrypt. While two of 95 security vendors on VirusTotal flag the domain, this limited detection does not conclusively confirm malicious intent but aligns with broader indicators of compromise. Defenders should treat this domain as active phishing infrastructure. The exact content and mechanics of the scam remain unanalyzed, but the combination of airdrop-themed branding, low trust scores, and blocklist inclusion warrants immediate mitigation. Network-level blocking or monitoring of connections to 188.114.97.3 and flamingo-finance.pages.dev is recommended. Further investigation into associated wallet addresses or redirect chains may reveal additional compromised endpoints.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 8 identified
SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.
sweetalert2.github.io 100% de confiançaJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100% de confiançaHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo