royalcoinshug[.]com
“1 new message”
ملخص الأدلة
Analysis of royalcoinshug.com shows a recently created (21 Feb 2026) domain that was taken offline but left a forensic trail indicating a high‑risk generic phishing operation. The site was protected by a Let’s Encrypt R13 certificate and served over HTTP/3, employing a front‑end stack that included D3, xCharts, Bootstrap, LiteSpeed, Select2, jQuery and FancyBox. Google Safe Browsing flagged the domain for social engineering, and VirusTotal recorded 14 of 93 security vendors marking it as malicious, reinforcing the suspicion of a phishing payload. Gridinsoft assigned a trust score of 0 / 100, and the domain appears on one additional security blocklist besides PhishDestroy, confirming its inclusion in active threat feeds.
Infrastructure analysis reveals the host IP 198.251.81.188 belongs to AS53667 (FranTech Solutions) in the United States, with authoritative nameservers ns17.asurahosting.com and ns18.asurahosting.com, typical of disposable hosting services. The only visible page element is a title reading "1 new message," providing no further insight into the targeted brand or credential‑collection mechanism. Consequently, the precise impersonated entity remains uncertain, and no payload samples have been captured.
Defenders should immediately block the domain and its hosting IP at DNS and firewall layers, ingest the associated hash and indicator data into SIEM and EDR solutions, and monitor for re‑registration or similar patterns from the same ASN or hosting provider. Email gateways should be tuned to flag messages containing the domain or related social‑engineering cues, and threat‑intelligence teams should track the ASN for future malicious registrations. Continuous re‑scanning of the domain, should it reappear, is advised to capture any evolving payloads or new indicators.
لقطة الأدلة المرسلة
- أُرسل
- سجلات الدفتر
- 1
- معرّف القضية
PD-20260219-1D6292- ملف PDF
- دليل PDF
الأساس القانوني
النص الكامل للدليل
Acceptable Use Policy (AUP): The domain royalcoinshug.com is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations, including those related to fraud and phishing, which are evident in the activities associated with this domain.
Applicable Laws (US):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: This law prohibits unauthorized access to computers and networks, which is applicable to phishing schemes that deceive users into providing sensitive information.
Wire Fraud - 18 U.S.C. § 1343: Engaging in fraudulent schemes using electronic communications, such as phishing, constitutes wire fraud under this statute.
CAN-SPAM Act - 15 U.S.C. § 7701: This act regulates commercial email and prohibits deceptive practices, including misleading headers and subject lines, which are often utilized in phishing attempts.
Regulatory Note: Failure to act on this report may expose your organization to legal liabilities and regulatory scrutiny under applicable laws. Immediate action is recommended to mitigate risks associated with hosting this malicious domain.
Data Coverage
استخبارات أمن الشبكات
مسار الاستجابة للتهديدات Pipeline
تغطية قوائم الحظر
١٠ مصادر خارجية مراقبة · لقطة محفوظة 13/08/2026
المخطط الزمني للاكتشاف
-
Cloudflare Radar
تم حفظ فحص Cloudflare Radar · فتح الفحص
-
VirusTotal
14 ← 13
-
VirusTotal
14 ← 13
-
VirusTotal
14 ← 13
-
VirusTotal
14 ← 13
لقطة محفوظة
معلومات النطاق
التفاصيل التقنيةDNS وأسماء TLS والطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of royalcoinshug.com · checked Mar 2, 2026
هل تأثرت بهذا الموقع؟
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
تحقق من أي نطاق
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنالإبلاغ عن محاولة تصيد احتيالي
أرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتحديثات فورية حول التهديدات
تقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةابقَ على اطلاع، وابقَ آمنًا
راقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب