MALICIOUS — CRITICAL
distribution-dogme[.]pages[.]dev
The domain distribution-dogme.pages.dev was registered on May 29, 2024 through Cloudflare Pages and resolves to the Cloudflare‑owned address 188.114.97.3, located in Canada.
- VirusTotal
- 11/91
- Blocklists
- 4 · MetaMask, ScamSniffer
- Kullanılabilirlik
- Bilinen son aktif · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
distribution-dogme.pages.dev — Bilinen son aktif (HTTP 200). Dolandırıcılık türü: Fake Airdrop. Kanıt özeti: VirusTotal 11/91 (alphaMountain.ai, BitDefender, CyRadar, ESET, Fortinet); 4 external blocklist matches; PhishDestroy score 98/100. Kayıt kuruluşu: Cloudflare Pages.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
The domain distribution-dogme.pages.dev was registered on May 29, 2024 through Cloudflare Pages and resolves to the Cloudflare‑owned address 188.114.97.3, located in Canada. The site serves a page titled “Dog Runestone Airdrop” and is identified as an Airdrop Scam kit, consistent with the generic_phishing threat type. HTTP responses return status 200 and the site presents a valid SSL certificate issued by Google Trust Services (WE1). Technical fingerprints include SweetAlert2, crypto‑js, jsDelivr, cdnjs, HSTS enforcement, and HTTP/3, all delivered via Cloudflare’s CDN. Reputation data show the domain appears on five security blocklists and is actively blocked by PhishDestroy, MetaMask, SEAL, ScamSniffer, and Enkrypt. VirusTotal analysis records eight detections out of 91 scanners, and Gridinsoft assigns a trust score of 0 / 100, indicating a high likelihood of malicious intent. The infrastructure is typical of low‑cost phishing operations that leverage reputable hosting to evade simple URL filtering. While the page content has not been directly examined, the combination of a fabricated airdrop promise, known phishing kit usage, and multiple blocklist entries confirms a high‑risk profile. Defenders should immediately block the domain at network perimeters, update endpoint protection signatures, and monitor for related activity targeting cryptocurrency wallets. Continuous observation of Cloudflare‑originated IP ranges for similar patterns is advised, as attackers may reuse the same hosting environment for future campaigns.
Veri kapsamı12 recorded checks
Ağ Güvenliği İstihbaratı
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
Teknolojiler · 7 identified
SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.
sweetalert2.github.io %100 güvenJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com %100 güvenHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org %100 güvenCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com %100 güvenHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org %100 güvenVirusTotal Analizi
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.