VirusTotal
10 / 91
“Un instant…”
airdrop.lobstarcoin.digital — Getarnt · erreichbar (HTTP 403). Markenidentität: Sui; Betrugstyp: Crypto Scam. Zusammenfassung der Beweislage: VirusTotal 10/91 (alphaMountain.ai, BitDefender, ESET, Fortinet, G-Data); Spamhaus DBL_MALWARE; cloaking observed; PhishDestroy score 100/100. Registrar: PDR.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
The domain airdrop.lobstarcoin.digital is a cryptocurrency-related scam site impersonating a brand categorized as Airdrop Scam. The page title "Un instant…" suggests the site displays a loading or waiting page, a common tactic to lower user suspicion during credential or wallet theft. The threat posed is financial theft through fake airdrop schemes, targeting cryptocurrency users.
Technical evidence shows VirusTotal flagged this domain by 4 out of 95 vendors, with detections from ADMINUSLabs, G-Data, SOCRadar, and Sophos. It appears on 1 blocklist. The domain was registered on 2026-02-21 with PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP 104.21.69.219 located in the US, hosted on AS13335 Cloudflare, Inc. SSL certificate is issued by Let's Encrypt (serial E7). Nameservers are liv.ns.cloudflare.com and michael.ns.cloudflare.com.
Currently, the site is down or offline. The risk level is moderate due to its active detection by security vendors and presence on blocklists, though its downtime reduces immediate threat. Users should avoid any interaction if the site becomes active again.
Die Seite lieferte einem browserähnlichen Besucher eine Antwort und einem Crawler oder Sicherheitsscanner eine andere. Cloaking dient ausschließlich dazu, Prüfer von der eigentlichen Landingpage fernzuhalten.
status_splitcloudflareAnmerkung des Scanners: cloudflare_challenge: raw=cf_challenge; http=403; via=https_proxy; server=cloudflare
For the registrable domain lobstarcoin.digital behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Die Edge-IP-Reputation wird dieser Domäne nicht zugeordnet.
michael.ns.cloudflare.comLocation describes the IP network.
ab1a1d9fe5b39f9abd478f459a348d1b15f8a908bf4cdcb007077948bb544559lobstarcoin.digitalSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Von 1 Community-Mitglied gemeldet; erstmals gesehen am 20.02.2026
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Template-based draft · optional AI wording assistance requires separate consent
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenMelden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenAktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBeobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt