fil[.]airdropsalert[.]us
“Google”
fil.airdropsalert.us — 内容不可用. 品牌冒充:Google; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 13/93 (ChainPatrol, alphaMountain.ai, BitDefender, CRDF, CyRadar); Google Safe Browsing flagged; PhishDestroy score 89/100. 注册商: Dynadot.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of fil.airdropsalert.us indicates a high-risk domain engaged in brand impersonation targeting Google, classified as a crypto scam. The domain was registered on October 18, 2025, through Dynadot LLC and is currently offline. The page title explicitly displays 'Google,' aligning with the reported scam type. Infrastructure analysis reveals the domain resolves to IP 192.178.155.104, hosted under AS15169 (Google LLC), though this does not confirm legitimacy due to potential abuse of cloud infrastructure. No SSL certificate is present, increasing the risk of unencrypted data transmission.
Detection data shows the domain appears on one security blocklist (PhishDestroy) and is flagged by 13 of 93 security vendors on VirusTotal. Google Safe Browsing classifies the domain as engaging in social engineering, corroborating the phishing classification. Nameservers (brenna.ns.cloudflare.com, hassan.ns.cloudflare.com) suggest Cloudflare hosting, a common tactic to obscure malicious activity. The Gridinsoft trust score of 0/100 further supports the domain's malicious designation.
Defenders should treat this domain as confirmed malicious due to its blocklist presence, vendor detections, and alignment with known crypto scam patterns. The absence of SSL and the domain's offline status do not reduce risk, as it may reappear under similar infrastructure. Monitoring for related domains using the same nameservers or IP range is recommended. No evidence of a phishing kit or additional page content is available for deeper analysis.
威胁响应 Pipeline
公共封禁名单状态
取证情报
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。