gigglebnbdrop[.]xyz

The domain gigglebnbdrop.xyz is listed as an elevated‑risk phishing site. Technical analysis shows the site was secured with a Google Trust Services certificate issued under the WE1 brand, indicating the use of a legitimate SSL provider. DNS resolution points to the Cloudflare edge IP 172.67.163.169, which is associated with AS13335 (Cloudflare, Inc.) and located in the United States. The authoritative name servers are brit.ns.cloudflare.com and seamus.ns.cloudflare.com, confirming Cloudflare’s hosting of the domain. HTTP headers reveal support for HTTP/3, a modern protocol commonly used by legitimate services but also favoured by threat actors for performance and obfuscation.

The page title returned by the server is “Just a moment…”, a generic placeholder that provides no insight into the actual payload and suggests the site may have been serving a waiting or redirect page at the time of capture. The registrar listed is NiceNIC International Group Co., Limited, a known domain registration service. Detection data indicates five of ninety‑three VirusTotal scanners flagged the domain, reflecting modest but notable malicious confidence among security products. The domain appears on at least one public blocklist (PhishDestroy) and is recorded on a single security blocklist, reinforcing its classification as a phishing vector. The threat taxonomy in the intelligence tags the site as a “Crypto Scam,” implying attempts to lure victims into cryptocurrency‑related fraud.

The domain was created on 21 February 2026 and, as of the report date 24 July 2026, its status is marked as taken offline, suggesting the operators have either removed the content or are rotating infrastructure. Defenders should continue to block the IP address 172.67.163.169 at network perimeters and add gigglebnbdrop.xyz to URL filtering policies.